Arethere any Best Practices whitepapers out there on
the recommended default property sets for a secure AD? It sounds like this
ability could seriously hindersome infrastructures running
AD.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mr
OteeceSent: Wednesday, March
I may be launchingpossibly a very nonsensical
question, but are you guys using Virtual Machines to host a production Active
Directory environment? What are the consequences of that? Does that
introduce a greater single point of failure for your infrastructure? How
would it not? How is the
Sorry Guido, I am just trying to follow the logic of it,
thats all. If I am in a branch office and there is one physical server and
I want it to be capable of being a Domain Controller, as well as other things,
why does it make sense to virtualize it, meaning, how does the load of
Hey list,
Do you guys/gals know whether it is true that R2 disk 1 is the same as Windows
2003 SP1? I loaded the first disk and it loads exactly and looks exactly like
Windows 2003 SP1, except when the license agreement screen comes up, it lists
the OS as 2003 R2. In the R2 FAQ page on the
PROTECTED] On Behalf Of Bahta,
Nathaniel V Contractor NASIC/SCNA
Sent: 17 February 2006 15:34
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] R2 and W2K3 SP1
Hey list,
Do you guys/gals know whether it is true that R2 disk 1 is the same as
Windows 2003 SP1? I loaded the first disk
If I were wanting to hide out in the directory, and didnt
know much about Active Directory, but had a fair amount of general knowledge
about computers, I would check into the Active Directory hotel under a fake name
with the Mrs and I. I would call myself Intrasite Topology Generation
Frank,
Holy cow! Are you serious? 1GB profiles? Are
you sure you dont mean Home Directories?
Q) If you have a 265mb link and a 1GB profile and a
100 Mbps connection, how long does it take to download a profile during peak
usage (i.e. first thing in the morning)?
(I am in a Math 102 class
Title: RE: [ActiveDir] Token Bloat
Hey Joe,
That script, when run, only can return a
subdirectory. I tried using the flag false for the subdirectory not being
monitored, but I cant get it to work. I tried, true, false, 0, 1, and
2. I cant get it to monitor a folder like M:\Data. It will
Title: RE: [ActiveDir] Token Bloat
Gil,
That is a good avenue of approach, although I do not recall
any GPO's that modify folder permissions, it is something I have not checked
nevertheless.I will give that a look.
Joe,
That would be great if you had the perl code for file
Title: RE: [ActiveDir] Token Bloat
Hey everyone,
I am having a issue with a cluster server that shares our
our common access data drive. Every other day, the NTFS permissions on the
shared clustered drive will revert to only Administrators and System having
privleges. I have it set up as
Or how about borrowing your friends Rainbow magazine and sitting in the living
room in front of the tv, typing in lines of code for hours during the summer,
just to see your TRaSh 80 display a mexican blanket and play the mexican
hatdance song, and then, using another module of 350 coded lines
What language are you writing this
in?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jitendra
KalyankarSent: Tuesday, December 20, 2005 11:10 AMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Script to find
Computers under particular OUs
I am trying to find a way
I agree, hire a contractor. Get it done right while things are still in their
infancy.
:)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Wednesday, December 14, 2005 1:13 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] W2K
What I mean is following the best practices when building
your cluster servers that you will mount the LUNS from. We
had Microsoft here and we asked them how to manage volumes at the TB level, and
they told us to simply not create volumes that large because they will be
unmanageable. The
Well the NFS server needs the DC to synchronize the NIS
maps with the DC's database. If you demote it, make sure you reconfig SFU
to point to another DC.
Nate
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alex
FontanaSent: Friday, December 09, 2005 12:41 PMTo:
I have never had a problem with seeing LUNs on a SAN using
Windows NT, Windows 2000 or Windows 2003 server. However, making sure you
follow the best practices for a fileserver and if you are using MSCS following
those best practices as well. Your server build consistencywill
dictate the
You're right Brian, Volume Manager it is,that is my take on
presenting data over a SAN to Windows, from the Storage Management point of
view.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
DesmondSent: Monday, December 12, 2005 3:03 PMTo:
Title: AD Wish list
We have the NET IQ Application Manager suite and I have not
been impressed with it at all. The information is not anything new, it is
no more than a collection of scripts with a scheduler and then we tack on SQL
Reporting Services and it makes a report out of its data. If
All,
I am trying to audit changes to the permissions to a
folder. So far:
I have changed the local computer audit policy to audit
success and failures of object access.
I have enabled auditing on a folder for Everyone and put a
check in the box for Change Permissions success and
There is no overriding taking place.
Object access Success and failures are the effective
settings.
No RSOP, its a 2K box.
Nate
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]Sent: Tuesday, December 06, 2005 9:42
AMTo: ActiveDir@mail.activedir.orgSubject:
action is also a
trivial process. And again, I'm not saying I don't see your point; I
just
don't agree with it.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bahta
Nathaniel V Contractor NASIC/SCNA
Sent: Wednesday, November 30, 2005 12:32 PM
That process is trivial in itself. It does not take much to transfer the
roles before you conduct maintenance on a server. Why not do it? It will
save you cleaning up metadata after you seize a role of a failed operations
master. Sounds like a stitch in nine saves time concept to me. I do not
What about scheduling the restore of the system state, and then taking the
scheduled task it creates and copying the command from it? You could use
that, however, it would only call the ntbackup.exe and run that specific
restore, but you could do it from one command, and then feed it variables as
Title: RE: [ActiveDir] Token Bloat
Hey everyone,
I am having a issue with a cluster server that shares our
our common access data drive. Every other day, the NTFS permissions on the
shared clustered drive will revert to only Administrators and System having
privleges. I have it set up as
Dan,
Just like any
Raid Scheme, it pays to pay attention to the types of reads and writes your
system will be making. Keep the random, reads/writes on one drive, and the
Sequential reads/writes on another, that is seperate directory data, from log
data. That allows you to keep your head
-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Bahta
|Nathaniel V Contractor NASIC/SCNA
|Sent: Wednesday, November 02, 2005 3:50 AM
|To: ActiveDir@mail.activedir.org
|Subject: [ActiveDir] Crashed Root DC HELP!
|
|Hey all,
|
|My root DC which held the roles Schema master
are always scary and I'm
just trying to feel comfortable with the outcome.
RH
__
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bahta Nathaniel V
Contractor NASIC/SCNA
Sent: Wednesday, November 02, 2005 7:33 AM
To: ActiveDir
Hey all,
My root DC which held the roles Schema master and Infrastructure master
showed me the BSOD via inacessible boot device. I reinstalled the OS,
restored the system state from DSRM, and it BSOD'D again. I have a corrupt
system state backup most likely. Since this is the ROOT DC, is my
28 matches
Mail list logo
