ADMT V3 has been
released.
http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212displaylang=en
http://tinyurl.com/bk98u
Mike
Celone
LAN
Administrator
Radio Frequency Systems
v.
203-630-3311
f.
203-634-2027
m.
203-537-2406
[EMAIL PROTECTED]
Guido,
Thanks for
pointing that out. I had never tried it so I wasn't sure. It's not
such a big deal anymore then.
I just got access to the ADMT v3 beta so I'm going to try
it out. See what else it has.
Mike
From: Grillenmeier, Guido
[mailto:[EMAIL PROTECTED] Sent: Wednesday, August 10,
In my test lab I
have a single Win2k3 root domain and 2 child domains. I am using ADMT 2
(when is 3 coming out, it's been in Beta for over a year now) to migrate the
accounts over. Everything works great except for the UPN. For some
reason it's always taking the name of the root domain and
Anyone have a copy
of this? I've used it in the past but I can't put it on my new
machine. Microsoft discontinued it when Exchange 2003 was announced it
would have these capabilities built in. It used to be a free download on
Microsoft's site but it's gone now. If anyone has a copy of this
I need to get a list
of users that have Dial In set to Allow Access but I can't seem to find what
attribute AD uses to store this information. Any help?
Mike
store the Dial In settings?
msNPAllowDialIn
**
Charlie Kaiser
MCSE, CCNA
Systems Engineer
Essex Credit / Brickwalk
510 595 5083
**
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Celone, Mike
Sent: Thursday
Title: time server
I've had problems with machines that are not part of the
domain being unable to synch with the time service on a DC. It seems that
if the machine is not part of the domain you are unable to use it as a time NTP
or SNTP server.
Mike
From: Creamer, Mark [mailto:[EMAIL
Title: RE: [ActiveDir] RDP
What type of server is this? Specifically what video card? I had a machine I was using as a test server with an ATI card in it. Whenever I connected via Terminal Services the thing would boot on me. Updating the video card driver fixed it for me.
Mike
I have to turn
on the Enable Intergrated Windows Authentication underAdvanced options in
IE6 on some 400+ desktops. Does anyone know what theregistry key this
is? I would like to create an ADM file and use a GPO toturn this on
for all the desktops at once. I can't seem to find where it'sset
: [ActiveDir] OT: Turn on Integrated Windows Authentication in IE 6
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings
EnableNegotiate
DWORD value 1
0 is off
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Celone
Title: RE: [ActiveDir] GPO - File and Printer Sharing.
We had a few users that would like to turn that off also. What we did was use snetcfg.exe in a batch file as a startup script. Since it runs in the localsystem account it can add file/printer sharing without the user being a admin on the
We are reviewing
designs for our global AD environment and one suggestion what so usea
non-standard TLD for our domain instead of the usual .com, org,net,
etc. Onegroup is arguing that using a non-standard TLD is better for
security. Can someone expand on this. When they were asked to they
Title: RE: [ActiveDir] OT: Connecting Cisco Switches
Yes. Well at least on the 2924, 2924XL, and 2924M, we had to use a crossover cable.
Mike
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 05, 2004 2:27 PM
To: [EMAIL PROTECTED]
When we performed
our AD upgrade we built a new PDC and upgraded that one to Win2k so that we
wouldn't have to migrate. Our plan was to rebuild that machine eventually
but we never got the chance to yet. I'm trying to do some performance
monitoring on this and I noticed it's missing all the
We are looking to
add a certificate to one of our web servers so we can do an https session over
it. This will be for our users to access OWA over a secure
connection. Instead of purchasing a certificate from Verisign we would
like to put up a CA server and use our own certificates.Is this
.
AL
--
From: Celone, Mike [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 20, 2004 12:00 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Certificate Services
We are looking to add a certificate to one of our web servers so we can
do an https session over it. This will be for our users
Thanks for correcting me on
this. I would much rather use restricted groups than have the script I run
everytime the machine is booted up.
Mike
From: joe [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 8:55 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
Title: RE: [ActiveDir] SUS 2.0 Beta
There will be an upgrade path for WUW/SUS 2.0. However it hasn't been worked out yet.
Mike
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 14, 2004 2:43 PM
To: [EMAIL PROTECTED]
Subject: RE:
Can someone confirm
something for me? Can you join a Win2k or Win2k3 server to a domain
created with SBS 2k or SBS2k3 and the run DCPROMO and bring it online as a
DC. I thought that you could not do that with SBS. I thought SBS
could be the only domain controller in your domain.
Mike
Thanks Michael.
Mike
From: Michael B. Smith
[mailto:[EMAIL PROTECTED] Sent: Thursday, April 08, 2004 3:19
PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir]
Join other DCs to an SBS2k or 2k3 domain?
You can't have trusts on the SBS server, so it kinda
depends on what you mean by "migrate".
Before I start just
to let you know I checked with Tony before sending this to the list. Does
anyone know anyone companies in the North Eastern US area that does AD
consulting and design? My CIO would like to bring in a consulting company
to help us out with a global AD design for our
"Also (the
kicker) his account has the "password never expires" set to never
expire"
This will have no effect on being able to lockout his
account. His account is being locked out not expiring. They are two
different things.
Are there any services that running under his domain
account?
I must be doing
something stupid that I can't seem to figure out. I'm trying to use CSVDE
to export all the users from our domain. Now whenever I run the program
and specify to only export user objects it exports everything on me! Here
the command line I am using:
csvde -f c:\file.csv
-d
Title: OT: Exchange 5.5 SMTP Log Parser
Anyone know of a log parser for Exchange 5.5 IMC logs? I downloaded Microsoft's log parser 2.0 but it doesn't seem to do Exchange 5.5 logs. I've got to dig through some big logs files and I was hoping to parse them first.
Mike
Administrator Inovis Inc.
-Original Message-From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004
11:07 AMTo: '[EMAIL PROTECTED]'Subject:
[ActiveDir] OT: Exchange 5.5 SMTP Log Parser
Anyone know of a log parser for Exchange 5.5 IMC logs? I
downloaded
I've got a few
questions about using multiple trees in a forest.
Are there
transitive Kerberos trusts across the trees in Win2k?
Win2k3?
What's the
advantage/disadvantages of going with 3 seperate trees vs 1 single tree with
an empty root and 3 child domains?
Assuming we
be adding to by having 3 trees within the same
forest.
Mike
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 17, 2004 12:48 PMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Multiple Trees
questions
Thoughts inline
From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent
in
scope, not restriced to tree-wide.
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 17, 2004 10:48 AMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Multiple Trees
questions
Thoughts
inline
From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2
Will this work for Win2k servers also?
Mike
From: GRILLENMEIER,GUIDO (HP-Germany,ex1)
[mailto:[EMAIL PROTECTED] Sent: Tuesday, March 16, 2004 1:40
PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir]
security event log audits
MACS (MS Audit Collector System) will do all of that for
you and
Title: [OT] SMS LIST???
There's one hosted by Topica.
The address is [EMAIL PROTECTED].
Excellent contributors on the list and it's very very active. FYI it's run
by www.MyItForum.com and will be
migrating to their list server starting Monday so you may want to wait till then
to subscribe.
Title: Message
www.joeware.net
Oldcmp is the name of the utility. Works
great!
Mike
From: J0mb [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 25, 2004 11:08 AMTo:
[EMAIL PROTECTED]Subject: R: [ActiveDir] Find and
delete/disable all your old computer acc ounts real easy
i must have
Title: RE: [ActiveDir] MS04-004
Anyone know if this also applies to ftp connections too. On the SMS list one guy says it does and others say it doesn't? I haven't deployed the patch yet but plan on doing it soon.
Mike
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL
There's a utility in the Win2k Resource kit called
DHCPEXIM. You can also get it here http://tinyurl.com/36j2m. I know it
works for Win2k, not sure about Win2k3 though.
Mike Celone
Systems Specialist
Radio Frequency
Systems
v 203-630-3311 x1031
f 203-634-2027
m 203-537-2406
From:
am going to test your solution in the lab today!
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Celone, Mike
Sent: Friday, February 06, 2004 7:42 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Computer Migration Issues with ADMT
Title: Message
This is probably the very best SMS list out there.
Lots of knowledgeable folks there.
http://www.topica.com/lists/MSSMS/
Mike
From: Steve Shaff [mailto:[EMAIL PROTECTED]
Sent: Monday, February 09, 2004 1:58 PMTo:
[EMAIL PROTECTED]Subject: [ActiveDir] Other
Listsrvs
This
Title: RE: [ActiveDir] Computer Migration Issues with ADMT
Santosh,
I moved a total of 3 machines yesterday in our lab and was
able to get them to reboot successfully. Instead of changing the time to 1
minute I left it at 5. Those machines rebooted without issue. I then
tried again
Title: RE: [ActiveDir] Computer Migration Issues with ADMT
So your saying that the machines won't reboot because they
can't resolve the target domain? This can't be true because all the machines I
tried it on join to the target domain (I see the account created) but just don't
reboot. After
I seem to remember
someone on the list had a Excel spreadsheet that had a listing of with all the
settings in the default GPOs and explanations for each one. I could of
swore I found it on Microsoft's site but I can't now. Anyone have this
handy?
/details.aspx?FamilyId=7821C32F-DA15-438D-8E48-45915CD2BC14displaylang=en
From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: Tuesday, February 03, 2004
10:31 AMTo: '[EMAIL PROTECTED]'Subject:
[ActiveDir] GPO explanations
I seem to remember
someone on the list had a Excel spreadsheet that had
] On Behalf Of Doug
HampshireSent: Tuesday, February 03, 2004 1:57 PMTo:
[EMAIL PROTECTED]Subject: Re: [ActiveDir] GPO
explanations
This what you're looking for?
- Original Message -
From:
Celone, Mike
To: '[EMAIL PROTECTED]'
Sent: Tuesday, February 03, 2004 10:30
AM
We have a single NT4
machine that is a BDC in our AD. Right now the netlogon service has been
turned off because we are trying to get all machines to authenticate to our 3
Win2k DCs. We would shutdown and remove this server but it has Autodesk
Licence Manager on it and well it's being a
/Products/UPromote/UPromote.htm)
to drop your NT4 BDC to a standalone server. We did this on several machines
that were DCs in domains we were consolidating. Worked great for us...but if you
go this route be sure to test it in a lab setting first.
Hunter
From: Celone, Mike
[mailto:[EMAIL PROTECTED
You mean this?
http://support.microsoft.com/default.aspx?scid=kb;en-us;828930Product=win2000
Mike
From: Creamer, Mark [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 11:06 AMTo:
[EMAIL PROTECTED]Subject: [ActiveDir] OT: slipstreaming
Win2K
I've successfully slipstreamed
Title: RE: [ActiveDir] net time
That's the way it's supposed to work. All your DCs will act as time servers and your clients will synch with them. They just synch their time with the PDC-E which should be set to use and outside time service.
Mike Celone
Systems Specialist
Radio Frequency
e-From: Celone,
Mike [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 19, 2003
11:41 PMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Using
InstallShield in a Startup Script
I tried
this and it does the same thing. I have a script that lists all
process
setups do require Admin rights/does the setup create reg keys/shortscuts in part
of the profile
-
Would it be a problem to run the script at logon time instead
?
Erik
-Original Message-From: Celone,
Mike [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 19,
2003 11:41 PMTo: '[EMAIL
ing' ?
3) look at at yor 4th line. Probably the
erroris there
c:\temp\v5r2\setup -s
-f1z:\iseriesv5r2.iss -f2c:\v5r2.log -SMS
-Original Message-From:
Celone, Mike [mailto:[EMAIL PROTECTED] Sent: Wednesday,
November 19, 2003 11:41 PMTo:
'[EMAIL PROTECTED]'S
Has anyone ever
called an InstallShield setup from a startup script before? I have a
simple batch file that calls an InstallShield setup.exe filefrom a startup
script but it never seems to run. The setup.exe file is on a server with a
Null Share. I've verified that the script is able to
I tried this and it does the same
thing. I have a script that lists all processes running on the machine and
I can see setup.exe in there but it never does anything. I'm starting to
think you can't use an InstallShield installer until you are logged in. I
can see it copy the files down and
Oops messed up the batch file.
It read like this I mean:
md c:\tempmd c:\temp\V5R2copy
\\server\iseries\*.*
c:\temp\v5r2c:\temp\v5r2\setup -s -f1c:\temp\v5r2\iseriesv5r2.iss
-f2c:\v5r2.log -SMS
From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: Wednesday, November 19, 2003
5:41 PMTo
Title: RE: [ActiveDir] Virus Protection
Which version of eTrust? We are using v6 and we haven't seen any issues with memory leaks on our terminal servers. We did however not allow the realmon.exe process to start for each user because it can eat up quite a bit of memory if you have multiple
Title: RE: [ActiveDir] Background
In Internet Explorer right click an image on a webpage and choose Set as Background. Maybe that's how she's doing it?
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 06, 2003 11:07 AM
To: ActiveDir
We are getting ready
to upgrade out NT4 domain to AD and I have a simple DNS question. Right
now we use domain.com internally for our network. However when we go to AD
we want to use ad.domain.com for our domain name and keep domain.com for just
our static DNS entries we have. This way all
You should be able to use the IE6
Administator Kit for this. We use it to build our own IE6 installation
that is customized for our company.
http://www.microsoft.com/windows/ieak/downloads/default.asp
Mike
From: Rick Reynolds
[mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003
Title: RE: [ActiveDir] OT: SUS Question
When we setup SUS we approved all patches. If the machine already had the patch it just ignored it. It did not reapply patches that were already on the machine.
Mike
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Title: RE: [ActiveDir] SUS does SPs now
You must approve the updates before a
client can download them. If you don't want SPs being pushed out then just
don't approve it.
Mike
From: Mayet, Yusuf Y
[mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003
10:30 AMTo: '[EMAIL
Title: RE: [ActiveDir] SUS does SPs now
If the SP is installed through SUS it will show up in Add/Remove programs on the server. You can uninstall through that.
Mike
-Original Message-
From: Comeau, Steven [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 18, 2003 2:12 PM
To:
Title: RE: [ActiveDir] SUS - ot? not sure
Have you run the IIS Lockdown tool on this machine and turned off ASP?
Mike
-Original Message-
From: Jennifer Fountain [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 11, 2003 4:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
Title: RE: [ActiveDir] SUS Feedback...
We also use SUS with great results. I'm looking forward to using SUS 2.0 with support for other apps, especially Office. Another new feature in SUS 2.0 is deadline installs. So you assign an update and the user has until a certain time to install it. If
Title: RE: [ActiveDir] Users Logged In
Actually mine was included in the Win2k Resource Kit and it's srvmgr.exe.
Mike
-Original Message-
From: Free, Bob [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 29, 2003 2:06 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Users Logged In
For anyone still
running Exchange 5.5 out there I found a bug in Win2k SP4. I was setting
up a temporary Exchange 5.5 server on Win2k Server and installed SP4.
Exchange installs fine but upon running the Optimizer you get the following
error:
"The services's list
of dependent services
bug
Did this affect any
servers with Ex 5.5 already installed? That is, has anyone experienced
problems putting SP4 on a server with Ex 5.5 already
installed?
Jordan
-Original
Message-From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: July 22, 2003 9:30 AMTo:
'[EMAIL PROTECTED
attendant,this error disappears and you
can continue on through the perfwiz windows.
Hunter
From: Celone, Mike
[mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 9:30
AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir]
Win2k SP4 + Exchange 5.5 bug
For anyone still
running Exchange 5.5 out there I
You can use Microsoft Print Migrator to move the queues to
a new server. http://www.microsoft.com/windows2000/technologies/fileandprint/print/download.asp
Then just use rundll32 printui.dll,PrintUIEntry in your
login scripts to move them to a new print server. You can do rundll32
Title: Message
We
have a copy of it from our Select agreement. It has the default WinXP
background but only the command prompt can be used. Maybe the background
is what he is referring to as the GUI?
Mike
From: Rick Kingslan [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 05, 2003 11:18
Title: RE: [ActiveDir] AD users question
They are used by IIS for anonymous access. Do you have IIS installed on one of your DCs?
Mike
-Original Message-
From: John Balos [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 13, 2003 2:18 PM
To: [EMAIL PROTECTED]
In AD there is an
Title: Message
Actually it means that the scope is getting low on addresses. It
has a different symbol (I think it's red colored) if you run out of
addresses. We have this problem periodically.
Mike
From: Tim Hines [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 24, 2003 9:24 AMTo:
67 matches
Mail list logo
