RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-28 Thread Brian Desmond
Nowhere does the OP say he's assigned a /16 mask to any interface. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU Sent: Sunday, January 28, 2007 4:02 AM To: ActiveDir@mail.activedir.org Subject: Re

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-28 Thread Brian Desmond
times. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Sunday, January 28, 2007 9:24 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries My advice would have

RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT

2007-01-28 Thread Brian Desmond
Yeah personally I'd have written some little .net contraption doing it in the background if it was something as simple as this. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Sunday, January 28, 2007 10:04 AM

[ActiveDir] Naming Convention for Site Links

2007-01-28 Thread Brian Desmond
Was wondering what other folks use for naming site links. A point to point link is obvious to me SiteA - SiteB or something like that. What about a link with three or four sites in it (e.g. SiteA, SiteB, SiteC, etc)? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-27 Thread Brian Desmond
While your math is right you should look up supernetting and subnetting somewhere. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU Sent: Saturday, January 27, 2007

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-27 Thread Brian Desmond
OK well you don't need a layer 2 link to do what the OP wants... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU Sent: Saturday, January 27, 2007 12:53 PM

RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT

2007-01-27 Thread Brian Desmond
You can whack notes with ldifde or something. MIIS is a convenient way to do it though. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Saturday, January 27, 2007 3:08 PM To: ActiveDir@mail.activedir.org Subject

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-27 Thread Brian Desmond
take your hub datacenter(s) and associate large supernets with the site objects (as big as 10.0.0.0/8 if appropriate). Then you associate the actual subnets with the sites where they're physically located. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-26 Thread Brian Desmond
Yes. I have done this in organizations with hundreds of sites and a well designed subnetting scheme. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline Sent: Friday, January 26, 2007 4:20 PM To: ActiveDir

RE: [ActiveDir] Overlapping AD Subnet Boundaries

2007-01-26 Thread Brian Desmond
to logon to their usual PCs anyway. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, January 26, 2007 7:36 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries

RE: [ActiveDir] adsiedit question

2007-01-23 Thread Brian Desmond
You shouldn't be doing this. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Condra, Jerry W Mr HP Sent: Tuesday, January 23, 2007 5:59 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Remote DC's on Virtual Server

2007-01-20 Thread Brian Desmond
gigantic servers on a SAN, drink the kool aid off the cover of eweek, etc - go buy an esx license or two. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji Sent: Sunday, January 21, 2007 12:29 AM

RE: [ActiveDir] OT: Apache LDAP authentication oddity

2007-01-19 Thread Brian Desmond
So you're describing searching for something and talking about authentication. Which is it? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Friday, January 19, 2007 10:19 AM

RE: [ActiveDir] OT: HARDWARE question. FILE SERVER VS ATTACHED STORAGE SOLUTION

2007-01-19 Thread Brian Desmond
pretty good with Cisco switches and routers in that respect too. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Ramon Linan Sent: Friday, January 19, 2007 11:19 AM To: ActiveDir

RE: [ActiveDir] Cisco VPN user authentication problem

2007-01-19 Thread Brian Desmond
debugging type stuff? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Egan (Temp) Sent: Friday, January 19, 2007 5:39 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Cisco VPN user authentication

RE: [ActiveDir] OT: Different default GALs for different groups

2007-01-18 Thread Brian Desmond
I did this for a school once. Basically what you do is create a group for each GAL and put the folks in the groups, then you create GAL/ALs in System manager and filter on this group membership. Set the ACLs accordingly and deny access to the default GAL. --brian

RE: [ActiveDir] OT: Who needs that much ram anyway?

2007-01-16 Thread Brian Desmond
The more you can get in memory, the better. 32GB is the threshold for Exchange before it stops making sense. I've remoted into SQL servers with dozens of CPUs and dozens of gigs of ram before... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL

RE: [ActiveDir] Likely OT: :) Managing/preventing rogue DHCP servers? (or how do you find it?)

2007-01-16 Thread Brian Desmond
, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Al Garrett Sent: Tuesday, January 16, 2007 11:29 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Likely OT: :) Managing/preventing

RE: [ActiveDir] File replication setup problem

2007-01-15 Thread Brian Desmond
Steve- Is the box running R2? You need to upgrade to schema v31 (r2) if so. If not I tend to think your DNS is busted. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Egan (Temp) Sent: Monday

RE: [ActiveDir] R2 Schema

2007-01-14 Thread Brian Desmond
I thought you needed the schema updates for the extra attributes for pushing printers via GP. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Sunday, January

RE: [ActiveDir] R2 Schema

2007-01-12 Thread Brian Desmond
No. I've done numerous upgrades in this scenario. It takes like five minutes. There's a known issue someone here will/probably has commented on with SFU I believe but other than that its good. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL

RE: [ActiveDir] R2 Schema

2007-01-12 Thread Brian Desmond
DFSR, Printers, integrated SFU... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brunson Sent: Friday, January 12, 2007 5:56 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] R2

RE: [ActiveDir] Way OT: Shared Folders snap-in columns

2007-01-11 Thread Brian Desmond
Office autorecover will write to the share fairly frequently... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Miller Sent: Thursday, January 11, 2007 4:45 PM To: ActiveDir

RE: [ActiveDir] Shares with Computer Account Permissions

2007-01-10 Thread Brian Desmond
No. This would only apply for things running in the context of the computer account (e.g. services as SYSTEM or NETWORK SERVICE). When you go \\server file:///\\server in explorer you connect as ben not bensmachine... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From

RE: [ActiveDir] AD Schema - adding an attribute

2007-01-10 Thread Brian Desmond
It's an attribute of the user class. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Brown Sent: Wednesday, January 10, 2007 8:53 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir

RE: [ActiveDir] AD Schema - adding an attribute

2007-01-10 Thread Brian Desmond
Yeah. Joe just emailed me too offlist - I seem to be hallucinating. I've seen it in so many directories I guess I thought it was part of the standard g. My suggestion is to keep birthDate in HR but you can easily extend the schema to include it if you want. Thanks, Brian Desmond [EMAIL PROTECTED

RE: [ActiveDir] DNS Comments

2007-01-09 Thread Brian Desmond
This is not a dynamic zone at all. The AD domains are all already integrated and dynamic and working. As far as the BIND merging, this is actually a bit of a cleanup/migration so it’s going to require some custom scripting more than anything. Thanks, Brian Desmond [EMAIL PROTECTED

RE: [ActiveDir] AD Schema - adding an attribute

2007-01-09 Thread Brian Desmond
, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Brown Sent: Tuesday, January 09, 2007 10:56 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Schema - adding an attribute How do I add

RE: [ActiveDir] DNS Comments

2007-01-08 Thread Brian Desmond
Well there hasn’t been some sort of ruling on whether the existing BIND folks will get new tools or the AD team (which is very gui dependent) will take it over. Are there any commercial tools you’d recommend I look at as far as management goes? Thanks, Brian Desmond [EMAIL PROTECTED

RE: [ActiveDir] DNS Comments

2007-01-08 Thread Brian Desmond
Integrated. They tell me they make a couple updates a day to the zone. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 08, 2007 7:53 PM To: ActiveDir@mail.activedir.org Subject

RE: [ActiveDir] AD Auditing and Change Control

2007-01-05 Thread Brian Desmond
nice pretty reports and is priced at an affordable price point. I prefer the MOM/ACS route mostly because I can play with the raw data to my liking. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mattingly

RE: [ActiveDir] ADFind help

2007-01-05 Thread Brian Desmond
Set your filter to (proxyAddresses=smtp*) to get all the smtp addresses. Just do * for stuff like x400 also. Adfind -b ou=myou,dc=mydomain,dc=com -f (proxyAddresses=*) Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

[ActiveDir] DNS Comments

2007-01-05 Thread Brian Desmond
doesn't. How do people manage metadata about their DNS zones? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

RE: [ActiveDir] ADFind help

2007-01-05 Thread Brian Desmond
Do you have such a feature that combines ou=myou with whatever searchroot -default resolves? It occurred to me today that that would save a lot of typing. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] NTP Client Software

2007-01-03 Thread Brian Desmond
Pool.ntp.org is what you want to point to ideally. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Wednesday, January 03, 2007 10:25 AM

RE: [ActiveDir] OT: Sorta... AD and the 3/07 Time Change

2006-12-31 Thread Brian Desmond
Hi Richard- The time sync process is just going to set the actual time (think UTC) not the timezone. If the client thinks it is GMT-5 then it will set the time accordingly. Given the rochester.rr address - U of R or RIT? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

[ActiveDir] OT MOM 2005 Install

2006-12-29 Thread Brian Desmond
Is there someone who has a MOM 2005 SP1 install and access to the SQL server it's on that could ping me offlist? I don't have access to my VMWare environment and I need the create script for a couple things. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

RE: [ActiveDir] Delegate Password Resets

2006-12-22 Thread Brian Desmond
It's in the book and his book's website - I was feeling lazy the other day and copied it verbatim to make a password reset page rather than look up the line of code I couldn't remember. Worked great. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED

RE: [ActiveDir] Delegate Password Resets

2006-12-22 Thread Brian Desmond
A lot of companies don't have someone with your skill set to write it so they think it's cheaper to buy stuff everytime then to employ a decent dev or two. It adds up overtime but they still don't get it. There's also the companies who have tons of devs and they're all clueless. Thanks, Brian

RE: [ActiveDir] Delegate Password Resets

2006-12-21 Thread Brian Desmond
I gave a 500K seat org helpdesk a copy of ADUC and the same rights as below and it worked like a charm. Not pretty but cheap and functional. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent

RE: [ActiveDir] OT:TechNet Magazine Active Directory Component Jigsaw Poster:

2006-12-20 Thread Brian Desmond
Talk to your account team if you want one (or more) ... one of my accounts they were giving them away. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, December 20, 2006 1:24 PM

RE: [ActiveDir] Schema Extension Question

2006-12-19 Thread Brian Desmond
It should be fine with normal credentials. Why are you so scared of SP1 or a schema extension? Neither of them are going to end the world... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED

RE: [ActiveDir] OT: Group Restrictions

2006-12-19 Thread Brian Desmond
No. Limit who can send to it to people who aren't stupid. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, December 19, 2006 4:02 PM To: ActiveDir@mail.activedir.org Subject

RE: [ActiveDir] ADfind to find locked accounts

2006-12-19 Thread Brian Desmond
Search for lockoutTime0. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent: Tuesday, December 19, 2006 5:06 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] ADfind to find locked accounts

RE: [ActiveDir] Redirecting MyDocs without Offline folder sync

2006-12-18 Thread Brian Desmond
Right click the share and goto the sharing tab and disable offline files/sync'ing... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, December 18

RE: [ActiveDir] AD Reports

2006-12-18 Thread Brian Desmond
I usually use Joe's ADFIND tool, Excel, and SQL. Occasionally I would replace adfind with a simple .net app if I need some logic as part of the data collection process. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Automatic user disable based on criteria

2006-12-18 Thread Brian Desmond
If whenCreated 7 days and pwdLastSet = 0 then they haven't logged in yet... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar Sent: Monday, December 18, 2006 12:19 PM To: ActiveDir

RE: [ActiveDir] Redirecting MyDocs without Offline folder sync

2006-12-18 Thread Brian Desmond
On the actual share, not through DFS goto the properties of it and the sharing tab. There's a button towards the bottom that controls this. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED

RE: [ActiveDir] Strange Lock Out Issue

2006-12-18 Thread Brian Desmond
Eventcombmt the DCs for whatever the lockout ID is also works. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent: Monday, December 18, 2006 2:50 PM To: ActiveDir@mail.activedir.org Subject: RE

RE: [ActiveDir] AdminSDHolder orphans

2006-12-18 Thread Brian Desmond
and then fix the deltas. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Monday, December 18, 2006 8:32 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] AdminSDHolder orphans

RE: [ActiveDir] Vista GPO

2006-12-16 Thread Brian Desmond
Oddly enough I was on a concall with MS the other day and one of the accounts mentioned he was rolling out a 3K seat Vista upgrade in March. Sad they already had vendor commitments for application fixes and everything. I was pretty surprised. Thanks, Brian Desmond [EMAIL PROTECTED] c

RE: [ActiveDir] Send As(OT)

2006-12-16 Thread Brian Desmond
I have a recollection of being able to send from a DL though I haven't been an Exchange admin in 6+ months so I may be thinking of something else. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED

RE: [ActiveDir] AB Views Export/Import

2006-12-16 Thread Brian Desmond
No I think he wants a GALSync type thing... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Saturday, December 16, 2006 8:49 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AB Views Export

RE: [ActiveDir] Vista GPO

2006-12-15 Thread Brian Desmond
There was a hotfix for that - they lengthened some string or something in the adm file format if I remember right. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Rich Milburn Sent

RE: [ActiveDir] Way OT: Laptop Battery Life

2006-12-12 Thread Brian Desmond
half life) in about 6 months. A combination of desk work and being mobile does this because of the uneven discharge/charge cycles. You can either be real meticulous about taking care of the batteries or start hitting your IT department up for new ones. Thanks, Brian Desmond [EMAIL PROTECTED

RE: [ActiveDir] Way OT: Laptop Battery Life

2006-12-12 Thread Brian Desmond
Whatever they give me must not be Lithium then. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji Sent: Tuesday, December 12, 2006 11:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir

RE: [ActiveDir] running scripts via group policy using alternate accounts

2006-12-09 Thread Brian Desmond
if you must do this. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anuj Attree Sent: Saturday, December 09, 2006 2:29 AM To: activedir@mail.activedir.org Subject: [ActiveDir] running scripts via group policy

RE: [ActiveDir] Quest Recovery Manager

2006-12-09 Thread Brian Desmond
Heh - funny I received the half off email at the widget company I'm at earlier this week. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Saturday, December 09, 2006 6:10 PM To: ActiveDir

RE: [ActiveDir] What is Websence

2006-12-07 Thread Brian Desmond
deployment of it there is significant planning involved, FYI. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ravi Dogra Sent: Thursday, December 07, 2006 6:30 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Maybe OT: Shared Calendars w/o using Exchange? Tips/Suggestions/Recommedations?

2006-12-06 Thread Brian Desmond
reliable so far? If so, then I wouldn't worry about it. If not, either get a better DSL provider or find someone to be your MX or backup MX. Regarding bandwidth, ADSL goes to 6mbps these days - what limitations are on your circuit? Outlook 2003 in cached mode doesn't chew that much. Thanks, Brian

RE: [ActiveDir] Quest Recovery Manager

2006-12-06 Thread Brian Desmond
stuff is of course great if you can afford it. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DCRI) [E] Sent: Wednesday, December 06, 2006 3:23 PM To: ActiveDir@mail.activedir.org Subject: RE

RE: [ActiveDir] Maybe OT: Shared Calendars w/o using Exchange? Tips/Suggestions/Recommedations?

2006-12-05 Thread Brian Desmond
says in house costs too much. I have a pretty good track record of putting an SBS box (or whatever was appropriate) in that shop after the fact. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 Javier Jarava wrote: Hi! Sorry if this question is a bit off-topic to the list

RE: [ActiveDir] OT: Exchange Design Question

2006-12-05 Thread Brian Desmond
Mark, In scenario 2 will your SMTP server in the DMZ subnet be part of the Exchange organization? If so the whole DMZ thing isn't really going to get you much if anything. Personally I think DMZs are outdated and not a good model anymore. I would go with option 1. Thanks, Brian Desmond

RE: [ActiveDir] OT: Exchange Design Question

2006-12-05 Thread Brian Desmond
Well it’s a Juniper NetScreen probably not a server ... just a firewall. I'd either throw ISA there behind the Juniper or just go with option three and point the NAT on your Juniper straight to the backend. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message

RE: [ActiveDir] OT: Vista Activation and KMS

2006-12-04 Thread Brian Desmond
On the VL site there are different MAK and KMS keys...which did you use Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline Sent: Monday, December 04, 2006 12:45 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Renaming sites

2006-12-04 Thread Brian Desmond
You should be fine, but your example leads me to believe that you should hash out your naming conventions such that they're thoughtful and future-proof and only do this once. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Import User Details from a XLS file

2006-11-30 Thread Brian Desmond
Look at csvde Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Haritwal, Dhiraj Sent: Thursday, November 30, 2006 10:40 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Import User Details from a XLS file

RE: [ActiveDir] Child domain for external SharePoint users

2006-11-30 Thread Brian Desmond
You need a separate forest to get the effect you want. The Domain gets you nothing more than an OU would. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Group, Russ Sent: Thursday, November 30, 2006 11:19 AM

RE: [ActiveDir] Split pagefile

2006-11-30 Thread Brian Desmond
You're going to have other issues if you have that little free space on your C drive. My suggestion is that you find something else to cleanup or else replace the spindles with larger ones. Yes its fine to store the pagefile elsewhere though. Thanks, Brian Desmond [EMAIL PROTECTED] c

RE: [ActiveDir] dynamic variables within an event log entry?

2006-11-30 Thread Brian Desmond
Michael- I don't have an AD install or ADFind in front of me, but whencreated=Now-24hr gives you everything in the past 24 hours. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent

RE: [ActiveDir] Pointsec software vs. Active Directory

2006-11-28 Thread Brian Desmond
Vincent- I have no idea what Pointsec is or does, perhaps you could share a little bit about this. What are the characteristics of the domain controllers in your test forest? How much memory? Disk config? How big is the DIT? Thanks, Brian Desmond [EMAIL PROTECTED] c

RE: [ActiveDir] Anonymous Access to Virtual Directory or Web Site...

2006-11-28 Thread Brian Desmond
On IIS 6 ensure that Network Service has rights to the content. On IIS5 or IIS6 in IIS5 compatability mode ensure ISUR_HOSTNAME has access to the content. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] mailNickName(OT)

2006-11-23 Thread Brian Desmond
to include [EMAIL PROTECTED] to generate this for each object. Reference Q285136 for more info. 8 People for 110K mailboxes seems like a lot to me, but that's just me. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

2006-11-23 Thread Brian Desmond
Yeah. I suspect you'll bottleneck on disk and memory before you do on CPU, so 1 quad will get you more than enough, as would I suspect 1 dual. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] mailNickName(OT)

2006-11-23 Thread Brian Desmond
I don't understand your issue, then. Can you rehash it for me and I'll make a second attempt? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Thursday, November 23, 2006 5:14 PM

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

2006-11-22 Thread Brian Desmond
A pair of quad cores is a lot of horsepower for testing. I suspect you will run out of disk i/o perf and memory long before you encounter the need for a second quad core chip given the scenarios you've described. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message

RE: [ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

2006-11-22 Thread Brian Desmond
Tim- There is a hotfix for this, I think for Exchange. The issue is that the Exchange 2000 RUS doesn't sense changes when Linked Value Replication is happening. The easiest solution is to introduce an Exchange 2003 server to run your RUS. Thanks, Brian Desmond [EMAIL PROTECTED

RE: [ActiveDir] AD Replication Problem

2006-11-18 Thread Brian Desmond
I would wipe INSIDADC52 and do a metadata cleanup removing it from the domain and then rebuild/repromote it. That will be the easiest route. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Haritwal, Dhiraj Sent: Saturday, November 18, 2006 9:58 AM To:

RE: [ActiveDir] Domain and Subdomain. Duplicating accounts

2006-11-16 Thread Brian Desmond
What Laura said, plus - why do you have two domains for this scenario. I know nothing about your environment, but my instinct says that you don't need them. Thanks, Brian From: [EMAIL PROTECTED] on behalf of Laura A. Robinson Sent: Thu 11/16/2006 7:16 PM To:

RE: [ActiveDir] AD Audit/Compliance Tool

2006-11-14 Thread Brian Desmond
Probably could get some of this out of a Quest Reporter type tool. Personally Id just write a bunch of small .net apps (or use adfind if appropriate) that pump out csv files. Then I import them into a SQL database and make my queries and voila. Thanks, Brian Desmond [EMAIL

RE: [ActiveDir] OT: new ms-Sysinternals utils: .exe size gone up like crazy!

2006-11-13 Thread Brian Desmond
I think MS may have signed them all. Dunno if that increases size. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Javier Jarava Sent: Monday, November 13, 2006 12:47 PM

RE: [ActiveDir] Beginner's Book on Scripting - WSH or VBScript?

2006-11-09 Thread Brian Desmond
from as well. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett Sent: Thursday, November 09, 2006 10:00 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Beginner's Book on Scripting - WSH

RE: [ActiveDir] mailbox enumeration(OT)

2006-11-09 Thread Brian Desmond
=configuration,dc=blah,dc=blech for whatever the cass is for the mailstores, I think msExchPrivateStore or something similar. Then just iterate each of those and search AD for homeMDB=DnOfThat. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Brian Desmond
Id use ADMT at a minimum youll want to run the security translation wizard if you dont use the move computer wizard. MSSQL will require some manual work. I have no idea about Citrix. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Brian Desmond
ADMT3 can replace subinacl Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Tuesday, November 07, 2006 1:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir

RE: [ActiveDir] Decommissioning a DC

2006-11-07 Thread Brian Desmond
Well if you have some crappy app that is hardcoded to it by name or ip it will break, but thats fine you need to fix those problems anyway. Otherwise do it and forget about it. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED

RE: [ActiveDir] OT - USB HD no boot

2006-11-05 Thread Brian Desmond
That is possible, then. G4 was when they added the USB ports on the front and the usb key stuff. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Albert Duro Sent: Sunday, November

[ActiveDir] Subnet Object Question

2006-11-05 Thread Brian Desmond
Question on Subnet Objects It appears that there is not an actual property designated for the subnet network/mask. Does anyone know does AD use the name or cn for this information/ Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

RE: [ActiveDir] Subnet Object Question

2006-11-05 Thread Brian Desmond
Well yes, but Im wondering which one is the actual value used. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Sunday, November 05, 2006 4:18 PM To: ActiveDir

RE: [ActiveDir] Subnet Object Question

2006-11-05 Thread Brian Desmond
As the actual representative subnet if CN=foo and name=10.10.10.0/24 will the match occur or vice versa if CN=10.10.10.0/24 and name=foo will the match occur? In other words which of the two attributs represents the actual subnet info? Thanks, Brian Desmond [EMAIL PROTECTED] c

RE: [ActiveDir] OT - USB HD no boot

2006-11-05 Thread Brian Desmond
there. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Sunday, November 05, 2006 10:30 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT

RE: [ActiveDir] /3GB and/or /USERVA and/or /PAE???

2006-11-04 Thread Brian Desmond
wont buy more RAM. Quad proc is a lot of horsepower must be some busy sites youre putting these into. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Baudino Sent: Saturday, November 04, 2006 12:30 PM

RE: [ActiveDir] OT - USB HD no boot

2006-11-04 Thread Brian Desmond
What generation and model is the server - DL is just the make, still need the model and year. :) Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Albert Duro Sent: Saturday

RE: [ActiveDir] Phantom Exchange server(OT)

2006-11-04 Thread Brian Desmond
Can i just delete it from the config NC with adsiedit.msc? is there anything else I should worry about? I generally take this route Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf

RE: [ActiveDir] DC crashed

2006-11-03 Thread Brian Desmond
1 and 2 yes, 3 is certainly unnecessary. 4 I suppose if you don't think you squared things away or you only have a few. --brian From: [EMAIL PROTECTED] on behalf of Figueroa, Johnny Sent: Fri 11/3/2006 5:02 PM To: ActiveDir@mail.activedir.org Subject: RE:

RE: [ActiveDir] OT - Backup Follies

2006-11-03 Thread Brian Desmond
Compaq ILO/RILOE board, Dell DRAC, IBM Remote Access, IP KVM + APC PDU w/ remote access are all viable options... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Bob Anderson Sent

RE: [ActiveDir] Active Directory Health Check tool - where can it run from?

2006-10-31 Thread Brian Desmond
Which tool is this? The AD Snapshot tool that you get from an ADRAP can run from any server. --brian From: [EMAIL PROTECTED] on behalf of Washington, Booker Sent: Tue 10/31/2006 4:04 PM To: ActiveDir@mail.activedir.org Subject: Active Directory Health Check

RE: [ActiveDir] Active Directory Health Check tool - where can it run from?

2006-10-31 Thread Brian Desmond
results when I go from an XP workstation, or a member server, and I wondered if I needed to run it from the DC itself. Thanks From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Tuesday, October 31, 2006 5:15 PM

RE: [ActiveDir] Need some advices....

2006-10-25 Thread Brian Desmond
If the domain was created in Windows 2000 or 2003 R2, youve got 60 days to fix it, 2003 domains you have 180 days. This is assuming you havent tweaked the tombstone lifetime. 4 hours is nothing. :) Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL

RE: [ActiveDir] Need some advices....

2006-10-25 Thread Brian Desmond
That sounds right - I forgot about the SP1 change Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Wednesday, October 25, 2006

  1   2   3   4   5   6   7   8   9   10   >