RE: [ActiveDir] Remote DC's on Virtual Server

2007-01-20 Thread Brett Shirley
Does anyone know if the vmware stuff, allows ba xxx w4 in the windows debugger (obviously running on windows guest VM)? ba xxx w4 = means break on address write w/in 4 bytes of the xxx, which is a pointer. This kind of bp is set through a register directly on the CPU. I know for a fact VS

Re: [ActiveDir] Tombstone.

2006-12-04 Thread Brett Shirley
, don't remember OTOH). By setting this attribute the AD object turns into an AD tombstone, a change that can replicate normally around to make the delete global. Cheers, Brett Shirley On Tue, 5 Dec 2006, Ajay Kumar wrote: Hi all, I have a query Is that possible to recover network object

Re: [ActiveDir] OT: new ms-Sysinternals utils: .exe size gone up like crazy!

2006-11-14 Thread Brett Shirley
I did not say that compiler options produced the increase in size. I said someone guessed pretty close, and pasted all the guesses into one mail thread (because people on this alias are so terrible at finding the tip of the thread). Cheers, -BrettSh On Tue, 14 Nov 2006, Javier Jarava wrote:

RE: [ActiveDir] OT: new ms-Sysinternals utils: .exe size gone up like crazy!

2006-11-13 Thread Brett Shirley
We had to compile in bbisw.lib (Big Brother Is Watching). You might think that's against your rights, but you signged them away when you accepted the 5k larger eula.txt below (which you didn't read). Cheers, BrettSh [EMAIL PROTECTED] -- I've decided its funny when I use it. Just b/c I know this

RE: [ActiveDir] OT: new ms-Sysinternals utils: .exe size gone up like crazy!

2006-11-13 Thread Brett Shirley
three-line program would be a MINIMUM of 170K. Maybe it's because a GUI is now included, or somesuch?? Steve Egan Purcell Systems System/Network Administrator desk 509 755-0341 x110 cell 509 475-7682 fax 509 755-0345 On Mon, 13 Nov 2006, Brett Shirley wrote: We had to compile

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Brett Shirley
What groups you are in, is a question that has different answers in different contexts ... Ask your domain's DC get one answer, ask another domain get a 2nd answer (which one is relevant often depends on the domain of the computer you logged onto / authenticated to), ask your workstation (local

Re: [ActiveDir] Monitoring AD Database

2006-10-22 Thread Brett Shirley
second) issued by the database cache manager to the database file or files. This counter should be as low as possible. If it is not, it usually indicates that the server needs more memory. Teo On 6/27/06, Brett Shirley [EMAIL PROTECTED] wrote: If you give me specifics on which performance

RE: [ActiveDir] Linked Attributes Replication

2006-10-20 Thread Brett Shirley
I suspect ... and winging it here ... if you truly have a DC _that isn't a GC_ for the domain (domain2 I believe) of the user object with the dangling manager link ... move IM for domain2 to that DC ... wait four days for IM to make the rounds ... he should [re?]generate a infrastructure update

Re: [ActiveDir] what is the meaning of OT in front of the subject

2006-10-05 Thread Brett Shirley
Huh, I would've considered that on-topic ... esp. when threads start How do I configure a Exchange mailbox blah blah ... right like we know about Exchange? Cheers, -BrettSh no warranties, yada, yada ... On Thu, 5 Oct 2006, Mark Parris wrote: Off Topic i.e. the people on the list might know

Re: [ActiveDir] OT: wikis

2006-10-05 Thread Brett Shirley
Except when 99% of the common wisdom about something is wrong, like in the case of ESE / JET Blue ... ;-) Cheers, -BrettSh On Thu, 5 Oct 2006, Greg Nims wrote: It's funny how we quote wikis as definitive sources of information, when they can be edited by anyone and everyone :) Who

RE: [ActiveDir] MORE OT OT: wikis

2006-10-05 Thread Brett Shirley
There are three types of mathematicians, those who can count, and those who can't. On Thu, 5 Oct 2006, Laura A. Robinson wrote: TRIPLE AAARGH!!! 10! 10! I give up; I'm dain bramaged today. _ From: Laura A. Robinson [mailto:[EMAIL PROTECTED] Sent:

Re: [ActiveDir] [OT] Exchange 2007 Schema

2006-10-05 Thread Brett Shirley
Oh crap! Brian Puhl, you reading? Tony says E2k7 is a beta product, I hope you didn't load that schema on our main forest? Too late to get it backed out (via forest restore)? Thanks for the heads up Tony, BrettSh [msft] P.S. - Does anyone think I'm as funny as I think I am ... probably not

RE: [ActiveDir] Replication Metadata

2006-09-15 Thread Brett Shirley
Just tell your boss you didn't say the hour would be made up of consecutive minutes. [1] Cheers, -BrettSh [1] A line that was used on me when Windows Architect told me I'd be able to solve my global sync object naming problem within a few hours. A couple days of issues later, and after he spent

Re: RE : RE: [ActiveDir] backup and restore AD.

2006-08-18 Thread Brett Shirley
BTW, if you have snapshot based backup you _can_ backup and just restore only the AD data (dit, log, and chk), and it will work w/o USN rollback correctly. We used to run quick tests like that all the time, but ONLY validated that the DS / AD didn't break. That doesn't make it supported. BTW,

RE: [ActiveDir][OT]Dean's kick-a## article

2006-08-15 Thread Brett Shirley
Maybe I can help w/ the ego (after all I consider trimming Dean's ego one of my higher callings in life ;-) ... Dean, you said you didn't mind if we continued to discuss this thread at one point (a at the time highly volatile thread, which I decided to let settle down), do you remember this

RE: [ActiveDir][OT]Dean's kick-a## article

2006-08-15 Thread Brett Shirley
on mine ;0) ... uhhh, okey dokes :0/ -- Dean Wells MSEtechnology t Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Tuesday, August 15, 2006 9:12 AM

RE: [ActiveDir][OT]Dean's kick-a## article

2006-08-15 Thread Brett Shirley
full of Bretts. (www.cafepress.com there can be a Brett Store with Brett merchandise) Brett Shirley wrote: Ego isn't wearing a t-shirt with your own picture on it, ego is insisting others wear a t-shirt with your picture on it ... So was that it, Dean? Were you conceding my

Re: [ActiveDir] Setting FFL=2 automatically when building first DC in forest

2006-08-03 Thread Brett Shirley
Touching schema.ini would qualify as very not supported ... -B On Thu, 3 Aug 2006, Paul Williams wrote: Setting FFL=2 automatically when building first DC in forestIt might be worth looking at the %systemroot%\system32\schema.ini file again. I just had a poke around in there after reading

Re: [ActiveDir] Information about lingering objects in a Windows 2000-based forest or in a Windows Server 2003-based forest:

2006-08-02 Thread Brett Shirley
Susan, how on earth could _you_ get a lingering object? Seems impossible with only one DC, oh wait did you just forget to delete it? From The Love, -B On Wed, 2 Aug 2006, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: Information about lingering objects in a Windows 2000-based forest

Re: [ActiveDir] 80/20 ..... Was: Read-Only Domain Controller and Server Core

2006-08-01 Thread Brett Shirley
I've always followed a DSI[1] access model, it definately supercedes in every way what RBS[resource], RBS[role], ABS, CBS, NBC, ABC can provide ... [1] DSI = Defending Security Infrastructures -B On Tue, 1 Aug 2006, Matt Hargraves wrote: Without going with an Access-Based Security (ABS)

RE: [ActiveDir] Virtual DCs

2006-07-19 Thread Brett Shirley
Random thoughts on VM based DCs ... 1. There is a whitepaper on Virtual DCs on msft's site, I didn't see it mentioned below, so I thought I'd mention it. 2. The whitepaper neglected to mention that you should turn off HD caching on the host system. 3. of course diff-disks are absolutely not

Re: [ActiveDir] Monitoring AD Database

2006-06-27 Thread Brett Shirley
If you give me specifics on which performance counters specifically don't show up for 2003 that are there in 2000, I can look into it (could've been removed on purpose, unintentionally removed, superceded by another counter, or simply made squeaky). Cheers, BrettSh [msft] On Tue, 27 Jun 2006,

Re: RE : Re: [ActiveDir] Question regarding compacting AD DB.

2006-06-27 Thread Brett Shirley
Just curious, Al, where did you hear this from: doing this. Online defrag can be a wonderful thing, and off-line is typically recommended if online is not going to be able to finish during it's run time. Because I've never recommended that. online defrag actually saves off where it

Re: [ActiveDir] DC Configuration

2006-06-23 Thread Brett Shirley
I think to go from 5000 users to a load metric (across organizations) is ridiculous ... one orgs 5000 users do not generate the same load as anothers 5000 users. Be careful about making comparisons like that. Just my 2c. Cheers, -BrettSh On Fri, 23 Jun 2006, Al Lilianstrom wrote: Myrick,

Re: [ActiveDir] Is this like AD blog season or what?

2006-06-23 Thread Brett Shirley
it, especially any of those undocumented featuresalthough I guess writing a blog about them might make them documented. Too soon to start blogging about longhorn AD stuff? Phil On 6/22/06, Brett Shirley [EMAIL PROTECTED] wrote: I wouldn't mind hearing specific things people would like

RE: [ActiveDir] AD Restore

2006-06-21 Thread Brett Shirley
Very likely replication is not working for some reason ... there are a few reasons it could not be working, some of them fixable, some of them not. I suspect we should answer this question first ... what is the backup / restore software you used? Thanks, BrettSh [msft] On Wed, 21 Jun 2006,

RE: Re: [ActiveDir] Errors During Authoritative Restore

2006-06-21 Thread Brett Shirley
This should give you a list of any other classes using non-standard naming attributes. Send us the output. Cheers, BrettSh FindNonStdNamingAtts.cmd: @echo off rem Somewhat brute force, should claim one non-standard naming rem attribute msTapi-uid, but this provides a sort of yes, the rem the

RE: Re: [ActiveDir] Errors During Authoritative Restore

2006-06-21 Thread Brett Shirley
have to make sure all the other DC's computer accounts are deleted, this fails auth so that they can't replicate. IIRC, ntdsutil from sp1 does delete the DC computer accounts, where as win2k3 RTM and before does not. Cheers, BrettSh On Wed, 21 Jun 2006, Brett Shirley wrote: This should give you

Re: [ActiveDir] Ghost Backup or Image for Active Directory Server and Exchange Server

2006-06-20 Thread Brett Shirley
Two things ... Secondly, it isn't just security groups, has anyone been hired or quit? Firstly, the whole thing isn't big server vs. small server ... it is whether you have any AD replicas, that includes having two DCs for the same domain (assuming neither is NT4, then these DCs replicate the

Re: [ActiveDir] Errors During Authoritative Restore

2006-06-20 Thread Brett Shirley
Do you have any schema extensions applied? Do you know if those schemas added any LDAP naming attributes? If the 2nd question doesn't make sense to you, I'll figure out a way you can query this, and send it to us. Aside, it is generally not recommended to run restore database. In fact this

RE: [ActiveDir] How much of the DIT is cached in RAM ?

2006-06-15 Thread Brett Shirley
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Thursday, April 28, 2005 8:32 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] How much of the DIT is cached in RAM ? The dev who put it in, is what I like to call my boss ... he has no child, I can

RE: [ActiveDir] [OT] User Accounts

2006-06-14 Thread Brett Shirley
I added a bit more about Eric's GIGANTIC DIT here: http://blogs.msdn.com/brettsh/archive/2006/06/12/631516.aspx ... feel free to post questions in the responses section ... or here. Sorry the formatting on the table isn't the best. Cheers, BrettSh On Fri, 9 Jun 2006, Brett Shirley wrote

RE: [ActiveDir] [OT] User Accounts

2006-06-09 Thread Brett Shirley
] On Behalf Of |Brett Shirley | Sent: Tuesday, April 18, 2006 5:11 PM | To: ActiveDir@mail.activedir.org | Cc: Send - AD mailing list | Subject: RE: [ActiveDir] User Accounts | | | Dean, I didn't understand this comment ... | But, dude, seriously, you weren't aware that AD's ESE |used a 32 bit

Re: [ActiveDir] question regarding Tony's article on linked attributes

2006-06-09 Thread Brett Shirley
It is 1/2 a dozen of one, 1/2 a dozen of the other ... We store forward links, but AD defines a table, with indices such that we have an efficient way to lookup backlinks for a given object. Don't have time right now to show you what I mean, but my Daddy says there are 24 usable hours in the

Re: [ActiveDir] DSID-020A06F3 error from French platform AD

2006-06-05 Thread Brett Shirley
This means there is a physical corruption in the AD database. Does this domain have replicas? If yes, just repromote another replica and then demote this guy. If no, sometimes a offline defrag can save the database. Otherwise, what is the backup situation for this domain? Don't be tempted to

RE: [ActiveDir] New DC can't find the machine account

2006-05-31 Thread Brett Shirley
Is this joe joe or joe someoneelse? It occured to me, I've NEVER seen joe joe's last name ... -B On Wed, 31 May 2006, McNicholas, Joe wrote: off the top of my head Is DFS running? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Lilianstrom

RE: [ActiveDir] Windows 2003 R2

2006-05-26 Thread Brett Shirley
How is DFSR, FSM, SRM, and CLFS about AD or a supporting service? On Fri, 26 May 2006, Bernard, Aric wrote: Er...yes? Can you be more specific? A reason behind your question could make for a better answer... DFSR PMC FSM SRM MMC3.0 ADAM ADFS Enhanced subsystem

Re: [ActiveDir] 2003 to 2003 Upgrade Questions

2006-05-26 Thread Brett Shirley
Just to be clear, the fix for USN rollback doesn't make restoring an image a Microsoft supported mechanism. It's still not supported, just makes it less likely (though not 100%) to hork DS / AD. Cheers, BrettSh [msft] On Fri, 26 May 2006, Riley, Devin wrote: We are preparing for our upgrade

RE: [ActiveDir] User Accounts

2006-05-15 Thread Brett Shirley
://www.windowsserverfaq.org -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Monday, May 15, 2006 7:57 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] User Accounts Hmmm, you've actually combined too many layers in my

RE: [ActiveDir] User Accounts

2006-05-14 Thread Brett Shirley
Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED] On Behalf Of |Brett Shirley | Sent: Tuesday, April 18, 2006 5:11 PM | To: ActiveDir@mail.activedir.org | Cc: Send - AD mailing list | Subject: RE: [ActiveDir] User Accounts | | | Dean, I didn't understand

RE: [ActiveDir] Image a DC?

2006-05-12 Thread Brett Shirley
No you won't. Cheers, -BrettSh On Fri, 12 May 2006, Almeida Pinto, Jorge de wrote: Very interested in hearing how as it depends on if the backup tool triggers the actions needed (and therefore AD aware) or not. If it is not, then the OS (DC) should detect this in some way... jorge

RE: [ActiveDir] Image a DC?

2006-05-12 Thread Brett Shirley
it works? :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: 12 May 2006 16:32 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Image a DC? No you won't. Cheers, -BrettSh On Fri, 12 May 2006, Almeida Pinto

RE: [ActiveDir] Image a DC?

2006-05-12 Thread Brett Shirley
What are you talking about, you don't need mushrooms, these responses have as much content as any post I've seen from joe and Dean. ;-) From The Love (esp. for Dean who's going to think I'm being an ass), BrettSh On Fri, 12 May 2006, Darren Mar-Elia wrote: You need to consume special mushrooms

RE: [ActiveDir] backup/restore of DCs with third party tool

2006-05-03 Thread Brett Shirley
Does anyone have experience with this? I have some. I can only speak to separating and backing up only the AD DB state without registry, etc. We used to use this method alot in testing AD, we had a little utility / unit test called dsback.exe, that would just trigger AD's streaming backup /

RE: [ActiveDir] User Accounts

2006-04-17 Thread Brett Shirley
://www.windowsserverfaq.org/ Profile: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 D |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley |Sent: Monday, April 17, 2006 2:47 AM |To: ActiveDir@mail.activedir.org

RE: [ActiveDir] User Accounts

2006-04-16 Thread Brett Shirley
Eric's quoting didn't come across in pine so well, so I've improved it by using where he was quoting others ... *Ahem* ... for the hex heads ... ESE limits: The underlying store (aka ESE or JET Blue) does not have a 4.2 billion row constraint to the # of rows in a single table ... ESE will

RE: [ActiveDir] Technet Magazine Active Directory Component Jigsaw

2006-03-08 Thread Brett Shirley
I'm definately not responsible for purchasing of IT products at my company, oh well guess I'm not influential enough to justify a free subscription of the magazine. Sigh. -B On Wed, 8 Mar 2006, Grillenmeier, Guido wrote: wow, what a hurdle ;-) From:

RE: [ActiveDir] repadmin info oddity

2006-02-21 Thread Brett Shirley
Dean on another fork identified where repadmin gets the GUIDs it can resolve. It does a search in CN=Sites (maybe CN=Configuration) for all DSA objects (aka nTDSDSA or NTDS Settings objects, retrieving the two attributes Dean mentioned, and makes a table/cache to translate the names to GUIDs. If

RE: [ActiveDir] repadmin info oddity

2006-02-21 Thread Brett Shirley
I wouldn't make a hard feature on such parsing, b/c it is not documented and could change at Brett or (lets call him) Greg's willy nilly. Oh and I just rememberd ... I should also note, isn't a 100% accurate to use retired DSA signatures, we punted a bug in repadmin relating around this, IIRC

RE: [ActiveDir] Script to transfer FSMO roles.

2006-02-14 Thread Brett Shirley
That is not true, the schema and naming FSMOs also have extensive state that is sensitive and critical, however the frequency of the updates is significantly less, and thus less likely to cause an issue. Having personally been on PSS cases for people who've f-d up thier forest, because they

Re: [ActiveDir]

2006-02-10 Thread Brett Shirley
Sorry Doug, the mail system is broken ... you'll probably get mails forever from this alias, it is unavoidable. Sorry for the inconvience. -Brett This posting is provided AS IS with no warranties, and confers no rights. On Fri, 10 Feb 2006, Doug Ferguson wrote: Unsubscribe List info :

Re: [ActiveDir] OT: DEC 2006 (way OT ...)

2006-01-13 Thread Brett Shirley
Al, I always wished that Microsoft would support multiple file versions like VMS did. I'm just curious, if you have the time, for my own edification, what was this VMS file system feature? Could you elaborate how it worked? Cheers, BrettSh [msft] SDE - ESE On Thu, 12 Jan 2006, Al

RE: [ActiveDir] OT: DEC 2006 (way OT ...)

2006-01-13 Thread Brett Shirley
? From: [EMAIL PROTECTED] on behalf of Brett Shirley Sent: Fri 1/13/2006 12:46 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: DEC 2006 (way OT ...) Al, I always wished that Microsoft would support multiple file versions like VMS did. I'm

RE: [ActiveDir] Reducing number of Global Catalogs

2005-12-20 Thread Brett Shirley
Ignoring the fairly over-discussed if every DC is a GC anyway, the Infrastructure FSMO / Master (IM) can be on GC aspect ... In the standard forest (if there is such a thing) with a mix of DCs and GCs, the Infrastructure FSMO must be on a non-GC, for both win2k and win2k3. There has been no

RE: [ActiveDir] Ntds.dit file corruption

2005-12-06 Thread Brett Shirley
corruption... and sbsland freaks out. Either we do indeed need to ensure we have a secondary DC or we need to park a second copy of a system state offsite [say at the vap/var] Brett Shirley wrote: She replied offline, very likely a single bit flip, tragedy, they aren't one release later (Longhorn

RE: [ActiveDir] Ntds.dit file corruption

2005-12-05 Thread Brett Shirley
She replied offline, very likely a single bit flip, tragedy, they aren't one release later (Longhorn), where this would've probably been non-disruptively handled, logged, and possibly self-healed: http://blogs.technet.com/efleis/archive/2005/01.aspx Anyway, this kind of thing is usually

RE: [ActiveDir] GC list

2005-11-29 Thread Brett Shirley
Note instead of repadmin /options *, look for GC flag, you can run repadmin /viewlist gc: Gives only all GCs in your forest ... something I thought would probably be useless when I implemented it. Cheers, -BrettSh [msft - ESE - SDE] On Tue, 29 Nov 2005, Almeida Pinto, Jorge de wrote: to view

RE: [ActiveDir] Microsofts Exchange Server 12 64 bit announcement

2005-11-21 Thread Brett Shirley
I can confirm, yes, you will only be able to deploy Exchange 12 on amd64 (well x64, i.e. including EMTWhatever) hardware. Now, I must confess something ... A bit over one and a half years ago (~Mar 2004, give or take a couple months), there was this Focus 64 campaign, posters showed up everwhere

RE: [ActiveDir] Microsofts Exchange Server 12 64 bit announcement

2005-11-21 Thread Brett Shirley
Cost debate ... I've heard that on big Exchange servers that by a factor of 4 or 5 to 1, the cost is mostly spent on big disk hardware (read as SAN). It is the IOPS that cost. With a 4x drop in IOPS required, the same hardware will be usable for more users/servers. Clearly the people who get

Re: [ActiveDir] DHCP ERROR

2005-11-02 Thread Brett Shirley
These are ESE (the database engine under DHCP) events. Did you reACL anything like the root of the volume or the Windows directory? Anti-virus software installed, that is scanning that directory? Are these events persistent, or sporadic? Cheers, BrettSh [msft] On Thu, 3 Nov 2005, Ravi Dogra

Re: [ActiveDir] Exchange now supported on virtual hardware [okay so now we're getting a bit OT]

2005-10-31 Thread Brett Shirley
Susan, SMTP isn't a client retrieval protocol (like POP), it's a mail delivery protocol. IMAP, POP, and MAPI are your client retrieval protocols. SMTP and (IIRC) MAPI are mail delivery protocols. MAPI doing double duty. SMTP, IMAP, and POP are the open (i.e. standardized) protocols. IMAP is

Re: [ActiveDir] Is your AD 'dirty'? OT

2005-10-21 Thread Brett Shirley
I'll ask him, I know him. -B On Fri, 21 Oct 2005, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: http://blogs.technet.com/bpuhl/contact.aspx Ping the blog and see if he'll turn on comments. Al Mulnick wrote: Shame we can't comment it. I've seen similar and I note that people

Re: [ActiveDir] Is your AD 'dirty'? OT

2005-10-21 Thread Brett Shirley
Should be fixed. -B On Fri, 21 Oct 2005, Brett Shirley wrote: I'll ask him, I know him. -B On Fri, 21 Oct 2005, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: http://blogs.technet.com/bpuhl/contact.aspx Ping the blog and see if he'll turn on comments. Al Mulnick

RE: [ActiveDir] Knowing when users were deleted.

2005-10-18 Thread Brett Shirley
The proposal was no history, nor even a history of who modified it, merely who made the current state of the AD be the way it is. In order to do that, you must track the modifier (whether by backlink, GUID, SID, DN, samAccountName, whatever) at the replication conflict level, ergo for each

RE: [ActiveDir] Knowing when users were deleted.

2005-10-18 Thread Brett Shirley
Ulf, what Al (well the suggestion on the plate) is suggesting is taht the something to centralize that info, _is_ AD replication. Implying the data is in AD. Cheers, -Brett On Tue, 18 Oct 2005, Ulf B. Simon-Weidner wrote: | Wherever the information gets put, it should be a) done as |the

RE: [ActiveDir] Knowing when users were deleted.

2005-10-14 Thread Brett Shirley
Ignoring the 16 bytes at the beginning of the metadata for version and attr count info, and garbage wasted space ... the metadata for a single attribute is 48 bytes, adding the SID (28 bytes) would be an expansion of 57% on the _raw_ per attribute metadata size. A sampling of a corporate DB

RE: [ActiveDir] Knowing when users were deleted.

2005-10-14 Thread Brett Shirley
wrote: Is that a yes you'll add it? Or no, ..and no bananas for you. answer? Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Friday, October 14, 2005 11:50 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir

RE: [ActiveDir] Knowing when users were deleted.

2005-10-14 Thread Brett Shirley
narrow. OK, I'm done. On Fri, 14 Oct 2005, Brett Shirley wrote: Well, first you should _never_ ever view anything _I_ am musing as a possible feature from the product group, I muse ALOT of stuff. PMs will be feature groups spokespeople, I am a dev. This feature (in various forms) has been

RE: [ActiveDir] Documenting AD

2005-10-13 Thread Brett Shirley
://support.microsoft.com/?kbid=885875 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Thursday, May 05, 2005 13:19 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] best practice? I don't really have serious

RE: [ActiveDir] Adding custom fields to AD

2005-10-11 Thread Brett Shirley
uses. So do we have a timeline on these blog entries? eg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Monday, October 10, 2005 1:32 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Adding custom fields to AD

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Brett Shirley
re: some virtualization and isolation of processes and threads ... A CS teacher once told me that in general in computers whenever you hear the word virtual, you can replace with slow ... - virtual memory (yeah, yeah I'm really thinking of paging, not VM, but I used a

Re: [ActiveDir] Adding custom fields to AD

2005-10-09 Thread Brett Shirley
Tom, what revision of the server OS was the WINS server? NT 4.0? Did you ever determine if the WINS DB corruptions were being exposed at the app/WINS level (esentutl /g succeeds) or ESE level (esentutl /g fails)? esentutl /g (the svc/DB must be offline for this) is the (slightly simplistic)

RE: [ActiveDir] Adding custom fields to AD

2005-10-09 Thread Brett Shirley
... joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Sunday, October 09, 2005 8:24 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Adding custom fields to AD Tom, what revision of the server OS

RE: [ActiveDir] Adding custom fields to AD

2005-10-09 Thread Brett Shirley
Someone told me offline, they think I'm wrong about WINS not being in 3.50. Hmmm, was it DHCP that didn't exist til 3.51? Maybe RPL? Maybe WINS just wasn't JET Blue based until then? H, now I'm all curious. Cheers, -BrettSh [msft] On Sun, 9 Oct 2005, Brett Shirley wrote

RE: [ActiveDir] Adding custom fields to AD

2005-10-09 Thread Brett Shirley
a Socialist because I am willing to buy a burger for a friend and a good conversation. ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Sunday, October 09, 2005 11:29 AM To: ActiveDir@mail.activedir.org Subject: RE

RE: [ActiveDir] AD Restore Problem

2005-10-06 Thread Brett Shirley
If you have any replicas of those servers, when you restore those VMWare images, you will have corrupted your forest during restore. -BrettSh [msft] This posting is provided AS IS with no warranties, and confers no rights. On Thu, 6 Oct 2005, Carroll Frank USGR wrote: I am working my way

RE: [ActiveDir] AD Restore Problem

2005-10-06 Thread Brett Shirley
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Thursday, October 06, 2005 9:51 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Restore Problem If you have any replicas of those servers, when you restore those VMWare images, you will have corrupted your

Re: [ActiveDir] Anyone seen this database corruption error before?

2005-10-06 Thread Brett Shirley
Did you know strupr, can change it's behavior based on locale of the process? Deji, your issue is likely a specific bug ... - There is a QFE, but you need to call msft to get it, ask for KB 902396 Note: this QFE causes some small number of indices to rebuild, so the machine

RE: [ActiveDir] Sysvol and AV exclusions

2005-09-16 Thread Brett Shirley
files and folders. with no additional explanation. Tony -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Tuesday, 13 September 2005 10:47 p.m. To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Sysvol and AV exclusions

RE: [ActiveDir] NTOSKRNL

2005-09-14 Thread Brett Shirley
You can not restore a ghost image _IF_ you have more than 1 DC in your AD forest. Doing so can cause replicated inconsistencies and corruption, so you should be very sure before you restore a ghost image of a DC. If this is the only DC for a child domain in a forest with other domains, and ghost

Re: [ActiveDir] Sysvol and AV exclusions

2005-09-13 Thread Brett Shirley
The articles should not be inconsistent. The 822158 does mention 814263 (see bullet 2). 284947 - is how to detect and diagnose excessive FRS replication. Noting it might be caused by Anti-Virus software. And mentioning how to recover. It is not SYSVOL specific, it is FRS specific. But

RE: [ActiveDir] Infrastucture Master and adprep /domainprep

2005-08-29 Thread Brett Shirley
IFM is an odd abbreviation of the Infrstructure Master role. I think IM is more typical. -B On Mon, 29 Aug 2005, Grillenmeier, Guido wrote: Andreas actually teased me with this at the second DEC in US (must have been 2003 in Scottsdale, Arizona), as I also wondered why the IFM would be

RE: [ActiveDir] Enterprise Domain Controllers

2005-08-26 Thread Brett Shirley
it had membership, completely dependent on the state of being both a domain controller (or at least flagged in a way in the directory to indicate such) and authenticated. :o) joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett

RE: [ActiveDir] Database Corruption

2005-08-26 Thread Brett Shirley
PROTECTED] On Behalf Of Brett Shirley Sent: Monday, August 22, 2005 10:22 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Database Corruption Both Steve, Hunter's, and your original advice is sound ... I think it is very likely if you call PSS, they'll tell you to do Steve's, yours

RE: [ActiveDir] Enterprise Domain Controllers

2005-08-24 Thread Brett Shirley
I don't think that's right at all ... he's talking AD EDC group, nothing to do with Exchange. I'm just going to make this up* ... it's a piece of data on the DC's computer account object that helps SAM determine if you deserve the EDC group in your token. Maybe it is a bit in the

RE: [ActiveDir] Enterprise Domain Controllers

2005-08-24 Thread Brett Shirley
After reading joe's description, which sounds accurate to a non-expert like myself, I am willing to raise my confidence in my answer from a measly 12% to a full 17%. Well, I agree with most of what joe said, except for the part about not being able to look at the membership, you _sort of_ can as

RE: [ActiveDir] Database Corruption

2005-08-22 Thread Brett Shirley
Both Steve, Hunter's, and your original advice is sound ... I think it is very likely if you call PSS, they'll tell you to do Steve's, yours, and Hunter's advice in about that order. My favorite disk sub-system diagnostics is jetstress, but dedicated disk sub-system stressers are better, as they

[ActiveDir] OMG, the most aweful ESE event info ever!!! ...

2005-08-19 Thread Brett Shirley
In the event view, you know how you can click the fwlink page to get help and support text for any given event? So I found the support and help text (below) for EventID 101 (farther below) for Windows NTDS ISAM and for general ESENT, and it's like about as close to 100% wrong as you can get.

RE: [ActiveDir] OMG, the most aweful ESE event info ever!!! ...

2005-08-19 Thread Brett Shirley
] On Behalf Of Brett Shirley Sent: Friday, August 19, 2005 10:13 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OMG, the most aweful ESE event info ever!!! ... In the event view, you know how you can click the fwlink page to get help and support text for any given event? So I

RE: [ActiveDir] OMG, the most aweful ESE event info ever!!! ...

2005-08-19 Thread Brett Shirley
Wow, I meant to say, I can _not_ promise immediate action ... It depends upon the severity of the bad text ... Cheers, BrettSh On Fri, 19 Aug 2005, Brett Shirley wrote: Yes. I can promise action immediately though. I've seperated my action plan into 4 phases ... Now: cleanup of crap

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-19 Thread Brett Shirley
PROTECTED] On Behalf Of Brett Shirley Sent: Thursday, August 18, 2005 10:27 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:Exchange 2003 SP1 bloat I am actually a programmer for ESE (you know the database under Exchange, once know as JET Blue ... ) ... yes, it may come

RE: [ActiveDir] Question on Replication Topology

2005-08-18 Thread Brett Shirley
PROTECTED] On Behalf Of Brett Shirley Sent: Wednesday, August 17, 2005 11:37 AM To: ActiveDir@mail.activedir.org Cc: Send - AD mailing list Subject: RE: [ActiveDir] Question on Replication Topology You're trying to weasel your way out of taking responsibility for your misunderstanding

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-18 Thread Brett Shirley
I am actually a programmer for ESE (you know the database under Exchange, once know as JET Blue ... ) ... yes, it may come as a shock to some of you that building 7 garage door operator is not my only job duty at msft ... Anyway, I'd like to clear up some confusion and mistatements ... 1. The /p

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-18 Thread Brett Shirley
requirement? Item 3, step 3: are ALL indices recreated and tables moved? I was under the presumption (perhaps mistaken) that some were discarded. Thanks, Michael -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Thursday

RE: [ActiveDir] Question on Replication Topology

2005-08-17 Thread Brett Shirley
Dean, what did you mean by the last line, indicated here? The IM process itself does not create phantoms, if it were exclusively responsible for that task, all group modifications referencing non-local-domain members would require origination against the IM -- this is not the

RE: [ActiveDir] Question on Replication Topology

2005-08-17 Thread Brett Shirley
of object references (i.e. link pairs). -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Wednesday, August 17, 2005 4:24 AM To: ActiveDir

RE: [ActiveDir] Question on Replication Topology

2005-08-17 Thread Brett Shirley
the phantom necessary, and AD creates the phantomn if it doesn't exist. Cheers again, -B On Wed, 17 Aug 2005, Brett Shirley wrote: Yeah, that's what I thought you might mean ... that's not true. The process of injecting a phantom is carried out by the directory service itself. It's in the AD's

RE: [ActiveDir] Question on Replication Topology

2005-08-17 Thread Brett Shirley
define the dblayer as part of the directory ... its purpose is to abstract such specifics. -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent

Re: [ActiveDir] lost and found

2005-08-16 Thread Brett Shirley
Auth restore is a perfectly normal way to end up with phantoms, w/o replication problems having been present. Delete parent X (including children, and grandchildren). Auth Restore children. Children and grandchildren will be in Lost+Found ... Cheers, -BrettSh On Tue, 16 Aug 2005, Tom Kern

RE: [ActiveDir] user dump

2005-08-14 Thread Brett Shirley
PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Thursday, August 11, 2005 11:20 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] user dump And repadmin. BrettSh On Wed, 10 Aug 2005, Phil Renouf wrote

  1   2   >