RE: [ActiveDir] Exchange queue(OT)

2006-05-10 Thread Douglas M. Long
Sweet! I can see your messages again Al. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, May 10, 2006 1:10 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Exchange queue(OT) Your reply came back as yup, but no

RE: [ActiveDir] AD Snapshot Tool (ADST) - how useful is it?

2006-05-09 Thread Douglas M. Long
I missed if anyone was making this tool available to the list? :) List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Optimize Exchange Pagefile

2006-05-05 Thread Douglas M. Long
If you get another drive a RAID 01 (or is it 10) would be a better choice in my eyes _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Wade Sent: Thursday, May 04, 2006 5:07 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Optimize Exchange Pagefile

[ActiveDir] OT: Blank messages to lists???

2006-05-05 Thread Douglas M. Long
Anyone else receiving blank emails? The reply from Al (below Susans email) and a couple of others I have got over the past couple of days have had empty bodies. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks

RE: [ActiveDir] DNS addition - event error 4010: unable to create RR for AD zone

2006-04-25 Thread Douglas M. Long
Some suggestions: Look into the differences between 2000 and 2003 AD integrated DNS. I believe in 2000 they are stored in the domain partition and in 2003 they are stored in the application directory partition. http://support.microsoft.com/?id=817470

RE: [ActiveDir] NT 3.51 trust verification lies

2006-04-23 Thread Douglas M. Long
that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Tue 4/18/2006 12:14 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] NT 3.51 trust verification lies Lol. Yeah, I am serious

[ActiveDir] NT 3.51 trust verification lies

2006-04-18 Thread Douglas M. Long
Anyone experience the following NT 3.51 to 2000 Native mode trust Nltest validates the trust GUI validates the trust Cannot enumerate users of 3.51 domain from domainA Can enumerate users of 3.51 from another 2000 native mode domain... domainB Trust no longer validates to domainA after about 30

RE: [ActiveDir] NT 3.51 trust verification lies

2006-04-18 Thread Douglas M. Long
From: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Tue 4/18/2006 10:54 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] NT 3.51 trust verification lies Anyone experience the following NT 3.51 to 2000 Native mode trust Nltest validates the trust

RE: [ActiveDir] View Delegated Tasks?

2006-04-05 Thread Douglas M. Long
Any word on getting this info to those on the list that cant make it to the show? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Holme Sent: Wednesday, March 29, 2006 1:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] View Delegated Tasks?

RE: [ActiveDir] Individual admin accounts vs Generic admin account.

2006-03-10 Thread Douglas M. Long
being told that it's better to have one central admin account I think you are being told by someone who will eventually, through some means obtain a privileged account, and knows that his/her own self has a very good chance of screwing something up or doing something unethical. In cases like

RE: [ActiveDir] OT: Netlogon Service

2006-03-10 Thread Douglas M. Long
Did someone link a new GPO or edit a GPO that affects the machine? _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Visser Sent: Friday, March 10, 2006 11:39 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Netlogon Service Well if they did

RE: [ActiveDir] Lost perfmon counters(OT)

2006-02-10 Thread Douglas M. Long
http://support.microsoft.com/?kbid=300956 I had the same problem in the past but luckily enough the lodctr /R worked for me. I would take a look at this article

[ActiveDir] AD management MMC

2006-02-07 Thread Douglas M. Long
I remember in the past downloading a MMC that already had ADUC, GPO, DNS, and other snapins in it. I thought it was called Active Directory Management Tool, but I can't find it. Does anyone else recall this tool? Its name? List info : http://www.activedir.org/List.aspx List FAQ:

RE: [ActiveDir] DNS vs NETBIOS name? Or something else?

2006-02-03 Thread Douglas M. Long
else? What are the options in the Winlogon box? You should only have the choice of the NetBIOS domain name or the local box (and any trusted domains). To use the DNS name you need to use a UPN. --Paul - Original Message - From: Douglas M. Long [EMAIL PROTECTED] To: ActiveDir

RE: [ActiveDir] DNS vs NETBIOS name? Or something else?

2006-02-02 Thread Douglas M. Long
Ok, I am revisiting this because it is bugging the crap out of me. 2003 domain upgraded from NT 4.0 NetBIOS name: DOMINT DNS Domain name: domain.com Users can logon to the machine with DOMINT, but not DOMAIN from the drop down. There are no NeutralizeNT4Emulator or NT4Emulator keys on either

RE: [ActiveDir] UNIX intergation into W2K3 Domain

2006-01-30 Thread Douglas M. Long
I have to agree. It seems that once you have finally dorked around for what seems forever and have it working, something (whether it be a samba vulnerability or some other *nix change; especially in Solaris) breaks it and you have to dork around again. Vintela honestly took me less than 10

[ActiveDir] OT: Gauging AD experience

2006-01-18 Thread Douglas M. Long
I am trying to figure out how one gauges their AD experience. For example, I have designed, implemented and maintained an AD/Exchange environment of 5000 users with 1000 workstations from the ground up, alone. The environment is only 3 sites, with little complexity. I now work for a

RE: [ActiveDir] ADUC updates - Was Expired Accounts

2006-01-17 Thread Douglas M. Long
This may be more of an Exchange management add-in, but it sure would be nice to be able to go into Exchange Tasks from ADUC and do an export of a mailboxor is there some exmerge plug-in to do this

[ActiveDir] Expired Accounts

2006-01-12 Thread Douglas M. Long
Shouldn't expired accounts show up with a red X just like a disabled account? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] OT: adfind syntax

2006-01-06 Thread Douglas M. Long
Title: Way OT: DC Server monitoring tools Man, can someone tell me what I am doing wrong here. I just cannot figure this out. Dont laugh; I am sure it is something stupid. adfind -default -rb ou=wsusclients,ou=xpclients -f (objectcategory=computer) I assume this should search for

RE: [ActiveDir] OT: adfind syntax

2006-01-06 Thread Douglas M. Long
1 Objects returned D:\TOOLS _ From: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Fri 2006-01-06 15:05 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: adfind syntax Man, can someone tell me what I am doing wrong here. I just cannot figure this out. Don't laugh; I am

RE: [ActiveDir] OT: adfind syntax

2006-01-06 Thread Douglas M. Long
: [ActiveDir] OT: adfind syntax What does the part at the bottom say... the part that says Best Match of: That will tell you how much of the DN it knows to be valid. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Friday, January 06, 2006 9:06

RE: [ActiveDir] OT: adfind syntax

2006-01-06 Thread Douglas M. Long
|---wsusclients Cheers, Jorge _ From: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Fri 2006-01-06 16:12 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: adfind syntax It tells me 'DC=domain,DC=com' Of course with the correct domain for domain

RE: [ActiveDir] Acitve Directory Other OS's

2006-01-05 Thread Douglas M. Long
PAM modules Probably the easiest is the winbind pam module. I cant tell you much more than that. And as someone else already said, Vintela. Talk about making a task easybut it is kinda expensive From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent:

[ActiveDir] Time Service

2005-12-28 Thread Douglas M. Long
I have read the Time Service white paper from Microsoft and am still confused. I have set the default domain GPO to use NT5DS under Configure Windows NTP Client, and set an external time server (navobs1.oar.net,0x1) for NTPServer. I have also set Enable Windows NTP Server to enabled. There are no

RE: [ActiveDir] Time Service

2005-12-28 Thread Douglas M. Long
: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Wed 2005-12-28 16:30 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Time Service I have Run w32tm /config /update /syncfromflags:MANUAL /manualpeerlist: navobs1.oar.net and also verified HKLM\System\CCS\Services\w32time\Parameters

RE: [ActiveDir] Time Service

2005-12-28 Thread Douglas M. Long
to what Ulf said: http://blogs.dirteam.com/blogs/jorge/archive/2005/11/20/111.aspx Cheers, Jorge _ From: [EMAIL PROTECTED] on behalf of Douglas M. Long Sent: Wed 2005-12-28 16:30 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Time Service I have Run w32tm /config /update

RE: [ActiveDir] OT: SFU download...R2

2005-12-20 Thread Douglas M. Long
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: 19 December 2005 21:44 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: SFU download...R2 Yeah, I tried last Friday, and just assumed that it would be working by today, but no, still the 404 error. From

[ActiveDir] OT: SFU download...R2

2005-12-19 Thread Douglas M. Long
Does anyone know why SFU is no longer available for download? I called Microsoft and all they would tell me is that it is no longer available for download but can be shipped via CD, which cost $6.95 shipping and handling. Ticks me off since I just deleted my downloaded instance off my HD about a

RE: [ActiveDir] Active Dir web based management

2005-12-19 Thread Douglas M. Long
Me also. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Klassen Sent: Monday, December 19, 2005 9:29 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Dir web based management Please add me to the list of those who wish a copy.

RE: [ActiveDir] OT: SFU download...R2

2005-12-19 Thread Douglas M. Long
/windowsserversystem/sfu/downloads/default.mspx Cheers - Stuart. On 12/20/05, Douglas M. Long [EMAIL PROTECTED] wrote: Does anyone know why SFU is no longer available for download? I called Microsoft and all they would tell me is that it is no longer available for download but can be shipped via CD, which

[ActiveDir] Delegate disable/enable user accounts

2005-12-06 Thread Douglas M. Long
Does anyone know off the top of their head the permissions required for delegation of disabling and enabling user accounts, or have a link? Google is failing meor rather me failing google

RE: [ActiveDir] Delegate disable/enable user accounts

2005-12-06 Thread Douglas M. Long
WP? Write permissions? Is that all the group would need? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Williams Sent: Tuesday, December 06, 2005 8:48 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Delegate disable/enable user accounts

RE: [ActiveDir] Delegate disable/enable user accounts

2005-12-06 Thread Douglas M. Long
delegate read/write permission on the useraccountcontrol, you delegate control on all of the bits/flags represented in that useraccountcontrol attribute. It may not be what you want Cheers, Jorge _ Van: [EMAIL PROTECTED] namens Douglas M. Long Verzonden: di 6-12-2005 14:19 Aan

RE: [ActiveDir] Delegate disable/enable user accounts

2005-12-06 Thread Douglas M. Long
better check the effective permissions. The user had all kinds of permissions. I then added another new user to the group that had been delegated rights and that user only had the specific rights that it should have. Does this sound bogus? _ From: Douglas M. Long [mailto:[EMAIL

RE: [ActiveDir] FSMO role transfer

2005-11-29 Thread Douglas M. Long
It probably depends on what youre doing during those 2 hours. If I were installing SP1 on a DC that had problems rebooting/booting in the past, or has known HW issues, or for some odd reason the machine is not on a UPS when installing a Service Pack, I think it would be easier to move the

RE: [ActiveDir] Outlook installed on a DC

2005-11-29 Thread Douglas M. Long
Well we knew he wasnt a good techie. How to you think he became your boss. You cant get rid of him, so promote him. J From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale Sent: Tuesday, November 29, 2005 11:49 AM To: ActiveDir@mail.activedir.org Subject:

[ActiveDir] DNS vs NETBIOS name? Or something else?

2005-11-14 Thread Douglas M. Long
I just started with a company running AD 2003 and am a little confused about something. The domain name is domain.com, but when logging in there are two domains to select from. The second domain name is totally different; lets call it domint. It seems that users can only log in with the

RE: [ActiveDir] BIND on Linux

2005-10-18 Thread Douglas M. Long
Are you talking AD integrated DNS? If so, I would ask why move to BIND (unless you are trying to get your DNS servers off of the same machine as the DC, in which case I guess you would be looking at the cost benefit of running a free OS)? Are there currently any problems? If not, then why switch?

RE: [ActiveDir] rebooting a patched, but stubborn DC

2005-10-16 Thread Douglas M. Long
I also have had this problem on a specific DC. It has an intel motherboard with integrated NIC and adaptec RAID controller. I don't know if that has anything to do with it, but it may. You have any similar HW in your machine? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Change AD Passwords

2005-10-04 Thread Douglas M. Long
Title: Change AD Passwords Iisadmpwd would be my solution. I wouldnt even expect IE on a Mac to work. Are these all OS X machines? Why not support Safari as the standard browser, or some other common browser that works. Seems crazy to support a browser that is no longer developed.

[ActiveDir] Password expire with admod

2005-09-23 Thread Douglas M. Long
Is possible to set a users password to expired with admod? I figured I would be able to set useraccount control to 8388608 but either that is not possible, or more likely I can't get the syntax correct. List info : http://www.activedir.org/List.aspx List FAQ:

RE: [ActiveDir] Attribute Documentation

2005-09-13 Thread Douglas M. Long
XADM: Requirements for Disabling the Recipient Update Service http://support.microsoft.com/?kbid=296479 Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, 13 September 2005 6:22 a.m. To: ActiveDir@mail.activedir.org Subject: [ActiveDir

[ActiveDir] Attribute Documentation

2005-09-12 Thread Douglas M. Long
Is there any good documentation on AD attributes. The stuff at msdn.microsoft.com seems pretty useless to me (or maybe I just dont have a clue what they are specifying). I need to know if attributes need to be specified, or if they are automatically populated (and if so, how or what

RE: [ActiveDir] Exchange issues again(ot)

2005-08-26 Thread Douglas M. Long
Do you just not have rights or do you not even have connectivity? There isnt much information about exactly what you are doing and what has been done, to have a good explanation. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Friday,

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat: Results

2005-08-22 Thread Douglas M. Long
Title: RE: [ActiveDir] OT:Exchange 2003 SP1 bloat Thought I would let you know how my experience with this went: Server 2003 SP1 Exchange 2003 SP1 2 x 2.8GHz HT Xeons 4GB RAM Direct attached 5 X 73.4GB hard drives, RAID5---IBM 6M controller Both ran with the following syntax:

RE: [ActiveDir] Kinda OT: Advice welcomed

2005-08-22 Thread Douglas M. Long
simply hired to push buttons. Our jobs as admins is tohelpour management make gooddecisions and recover from stupid ones as well as implement all of them, smart or stupid. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Friday, August 19, 2005 11:38 PM

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-19 Thread Douglas M. Long
didn't know that, eh? Maybe a good time to move on to ... 4. Space Usage ... Douglas M. Long quotes this anyone know where he got this information from? Run ESEUTIL with the /p switch to configure ESEUTIL to create the new defragmented database on an alternate location (for example

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-19 Thread Douglas M. Long
] on behalf of Douglas M. Long Sent: Fri 8/19/2005 12:55 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:Exchange 2003 SP1 bloat This is probably just me not comprehending this, but when you said The confusion is that, there is also a /p option that can be provided to defrag, like

[ActiveDir] Kinda OT: Advice welcomed

2005-08-19 Thread Douglas M. Long
Title: RE: [ActiveDir] OT:Exchange 2003 SP1 bloat Heres a question for everyone: Your CIO decides it is cheaper to host an application remotely at a site that you know nothing about (and for that reason do not trust). He then decides on his own that he will just tell the network guy

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-18 Thread Douglas M. Long
? (And thus theactual data...) Many MS folks will recommend that you consider splitting up stores when they hit the 35 - 50 GB range. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, August 17, 2005 7:21 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-18 Thread Douglas M. Long
defrag! Bet you didn't know that, eh? Maybe a good time to move on to ... 4. Space Usage ... Douglas M. Long quotes this anyone know where he got this information from? Run ESEUTIL with the /p switch to configure ESEUTIL to create the new defragmented database on an alternate location

[ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-17 Thread Douglas M. Long
OK, so I have scheduled a window this weekend to run an offline defrag of the mailbox store. Now I am looking for the best way to do this, and since this list seems to have more/better experience with Exchange than the Exchange list, I am looking for comments. Here are the steps I am planning on

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-17 Thread Douglas M. Long
to defrag you don't need the /p switch. Anyone got any comment? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: 17 August 2005 18:13 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT:Exchange 2003 SP1 bloat OK, so I have scheduled

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-17 Thread Douglas M. Long
] on behalf of Douglas M. Long Sent: Wed 8/17/2005 10:06 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:Exchange 2003 SP1 bloat I guess I was thinking of using the /p switch because of a paragraph Run ESEUTIL with the /p switch to configure ESEUTIL to create the new defragmented

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-17 Thread Douglas M. Long
that it will run much faster on the newer 3.0 GHZ Xeon's with Ultra 320 15,000 rpm Drives. While your at it you may want to also run ISINTEG which takes even longer. Jose :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Douglas M. Long Sent: Wednesday, August

RE: [ActiveDir] Weird issue going on

2005-08-15 Thread Douglas M. Long
What sort of DNS setup do you have? BIND? AD-integrated? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Monday, August 15, 2005 9:10 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Weird issue going on No not VPN,

RE: [ActiveDir] Single Sing-On IBM AS400

2005-08-15 Thread Douglas M. Long
They should have something here:http://www.redbooks.ibm.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, August 15, 2005 11:20 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Single Sing-On IBM

RE: [ActiveDir] OT:Exchange 2003 SP1 bloat

2005-08-12 Thread Douglas M. Long
with Entourage? There was an issue there once upon a time. http://blogs.msdn.com/jeremyk/archive/2004/11/11/255705.aspx http://www.e2ksecurity.com/archives/001308.html Ah, here's teh official one, I think: http://support.microsoft.com/?kbid=889525 Cheers, -BrettSh On Fri, 12 Aug 2005, Douglas M

RE: [ActiveDir] Windows 2000 VPN Server

2005-08-11 Thread Douglas M. Long
DNS? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Thursday, August 11, 2005 3:28 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Windows 2000 VPN Server I have a user using VPN on a Windows XP Box to VPN into a

RE: [ActiveDir] one more silly question(OT exchange)

2005-08-11 Thread Douglas M. Long
I believe he means: Right click on the mailbox-- Open other folder-- Other user's folder... With a user that you give review rights. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Thursday, August 11, 2005 6:40 PM To:

RE: [ActiveDir] one more silly question(OT exchange)

2005-08-11 Thread Douglas M. Long
in your mailbox. the user has reviewer rights on the new calender. i don't think thats what Hunter meant. if it were just the basic open other users folder, i wouldn't be so furstrated. thanks On 8/11/05, Douglas M. Long [EMAIL PROTECTED] wrote: I believe he means: Right click on the mailbox

[ActiveDir] Query-based DL

2005-08-10 Thread Douglas M. Long
Is there a way to exclude users and DLs from a query-based distribution list? Oris there a way to specify more than one mailbox store in a single query-based DL?

RE: [ActiveDir] Query-based DL

2005-08-10 Thread Douglas M. Long
of the correct way to specify a user. I didn't bug that because I am still waiting to hear anything at all on the other 15 or so Exchange bugs I have logged in the last year. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, August 10, 2005

[ActiveDir] OT: Change ownership

2005-08-08 Thread Douglas M. Long
Title: DC replicating with deleted DSA object Is there an easy way to change ownership on all files and folders in a directory owned by userA? I think I am having a stupid attack

RE: [ActiveDir] OT: Change ownership

2005-08-08 Thread Douglas M. Long
;) De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Douglas M. Long Envoyé: Monday, August 08, 2005 2:32 PM À: ActiveDir@mail.activedir.org Objet: [ActiveDir] OT: Change ownership Is there an easy way to change ownership on all files and folders in a directory

RE: [ActiveDir] OT: Change ownership

2005-08-08 Thread Douglas M. Long
, CHEAP, SECURE: Pick Any TWO http://www.ultratech-llc.com/KB/ On 8/8/05, Douglas M. Long [EMAIL PROTECTED] wrote: Is there an easy way to change ownership on all files and folders in a directory owned by userA? I think I am having a stupid attack

RE: [ActiveDir] OT - Biggest AD Gripes

2005-08-05 Thread Douglas M. Long
Were there any comments to Joe's question about large deployments of NDS? Are/were there any out there? I am just interested because I still hear comments about how scalable it is. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent:

[ActiveDir] OT: File properties

2005-07-14 Thread Douglas M. Long
Title: [ActiveDir] DFS Client for Mac and UNIX I feel pretty stupid asking this question because I know it is something very simple that I am overlooking. I have full control to a file or folder, am the owner, but still cant edit permissions. The buttons are all greyed out. It seems

RE: [ActiveDir] OT: File properties

2005-07-14 Thread Douglas M. Long
Subject: RE: [ActiveDir] OT: File properties you have to go up the tree and set the perms on the source of the inheritance or uncheck inheritance. -Original Message- From: Douglas M. Long [mailto:[EMAIL PROTECTED] Sent: Thursday, July 14, 2005 12:01 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] OT: File properties

2005-07-14 Thread Douglas M. Long
Title: [ActiveDir] DFS Client for Mac and UNIX I take that back. The files in the share are inherited. Nothing above that level in the tree is inheriting permissions though From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Thursday, July 14

RE: [ActiveDir] OT: File properties

2005-07-14 Thread Douglas M. Long
be causing this problem. Share Perms must be *FULL CONTROL* a *MODIFY* (or read obviously) Share Perm will override NTFS Write Permissions. Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Thursday, July 14, 2005 9:52 AM To: ActiveDir

RE: [ActiveDir] Slightly OT: Distributed Transaction Coordinator Service (MSDTC)

2005-07-13 Thread Douglas M. Long
2003 with SP1? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Blair, James Sent: Wednesday, July 13, 2005 11:16 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Slightly OT: Distributed Transaction Coordinator Service (MSDTC) All, On numerous of

RE: [ActiveDir] DMZ talking to your domain

2005-07-06 Thread Douglas M. Long
I would take a look at this for kicks. http://redmondmag.com/columns/article.asp?EditorialsID=1010 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Figueroa, Johnny Sent: Wednesday, July 06, 2005 2:14 PM To: ActiveDir@mail.activedir.org Subject:

[ActiveDir] OT: GPO undefined definition

2005-06-27 Thread Douglas M. Long
If something is set to undefined in group policy, does it get set to the Windows default all the time? The reason I ask is because I had Microsoft network server: Digitally sign communications (always) set to enabled, then changed it to undefined. I was thinking this would leave all

RE: [ActiveDir] Change password web interface

2005-06-14 Thread Douglas M. Long
. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Douglas M. Long

RE: [ActiveDir] Change password web interface

2005-06-13 Thread Douglas M. Long
Title: Change password web interface http://support.microsoft.com/default.aspx?scid=kb;en-us;297121 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacob Stabl Sent: Monday, June 13, 2005 3:35 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Change

RE: [ActiveDir] mstsc /console switch for non admins

2005-06-12 Thread Douglas M. Long
Hopefully this will change now that it seems there is a company a day releasing that customer information has been compromised. Here in Ohio, the state actually decided to sue DSW for such a thing (which is the first legal action in the states, I think). I know how politics works, so who

RE: [ActiveDir] OT: Cloned machine domain membership

2005-06-07 Thread Douglas M. Long
, consider the security implications of the domain accounts that are used and any possible password exposure. LMK if you need more detail, but this should get you going. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Monday, June 06

RE: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 coming

2005-06-07 Thread Douglas M. Long
At first I thought cool. Now I am thinking this needs looked into more. I just ran it on my XP machine (which I do manage my exchange servers from) and it shows: MS05-021: Vulnerability in Exchange Server 2003 and in Exchange 2000 Server can allow remote code execution as an available patch.

[ActiveDir] OT: Cloned machine domain membership

2005-06-06 Thread Douglas M. Long
I am trying to figure out the best way to re-image our labs (XP only) without any interaction. Currently we are using Ghost 7.5, and it will add the machine account to the domain, but doesn't actually join the machine to the domain. This would be fine if the machines only needed re-imaged twice a

[ActiveDir] OT:FYI---WSUS released, Exchange 2003 SP2 coming

2005-06-06 Thread Douglas M. Long
Looks like WSUS is ready for production http://www.microsoft.com/windowsserversystem/updateservices/default.mspx And here is some info for Exchange 2003 SP2 http://www.microsoft.com/exchange/downloads/2003/sp2/overview.mspx winmail.dat

RE: [ActiveDir] Permissions needed to modify UNIX attributes SFU 3.5

2005-06-06 Thread Douglas M. Long
This may be a stupid question, but did you make sure the NIS server was running (along with the mapping service and other SFU services)? The SFU 3.5 NIS service will not start automatically when I restart my server, just wondering if you might have the same problem and havent noticed it. I

RE: [ActiveDir] SFU and ADUC

2005-05-26 Thread Douglas M. Long
You just need to register the nisprop.dll DLL on the XP workstation. It will only work with a workstation/server that has the Admin Tools/AD Users and Computers MMC installed. The DLL is located in your SFU\common directory on your domain controller. Perform the following to get the

RE: [ActiveDir] Living without WINS

2005-05-11 Thread Douglas M. Long
I am beginning to wonder what functionality I am missing with Exchange 2003. I have been running a domain of 1200 users for over a year without a WINS server. Is it because we don't use Public folders? Any insight on what issues this may be causing that I am not noticing? I have wondered this for

RE: [ActiveDir] DHCP client(OT)

2005-05-06 Thread Douglas M. Long
Deji's link has the download that fixed problems like this that I have had. It was actually the winsoxfix.exe Option^Explicit Software Solutions if I remember correctly. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Burkes, Jeremy [Contractor] Sent:

RE: [ActiveDir] DNS vs. Hosts File

2005-05-05 Thread Douglas M. Long
Did you ask him if you could have the host file on his machine that he MUST be using to browse the web with? DNS untrustworthy vs host file bahaha From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan DeStefano Sent: Thursday, May 05, 2005 4:24 PM To:

RE: [ActiveDir] Solaris authentication

2005-05-04 Thread Douglas M. Long
a commercial product aimed at this problem vs. rolling your own solution. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, May 03, 2005 10:30 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Solaris

RE: [ActiveDir] Solaris authentication

2005-05-04 Thread Douglas M. Long
typically has a cost associated with it. That cost/benefit analysis might make it worth it to use a commercial product aimed at this problem vs. rolling your own solution. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, May 03

RE: [ActiveDir] Solaris authentication

2005-05-04 Thread Douglas M. Long
remember off hand. ~Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, May 04, 2005 11:13 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Solaris authentication Ignore this. I just did a little FAQ reading

RE: [ActiveDir] Solaris authentication

2005-05-03 Thread Douglas M. Long
Kerberos in production. I dont know how they are populating /etc/passwd but can find out. Ive never used NIS against AD so couldnt say whats going on here. ~Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Monday, May 02, 2005 7:26 PM To: ActiveDir

[ActiveDir] DC priority

2005-05-03 Thread Douglas M. Long
Title: RE: [ActiveDir] Ocra The majority of my outlook clients connect to our backup DC, and I am not sure why this is. Main DC GC all FSMO roles server class Backup DC GC desktop class They both have the same weight and priority in the DNS. The main DC is a much more

[ActiveDir] Solaris authentication

2005-05-02 Thread Douglas M. Long
Anyone know if this is passed in plain text? If so, i dont see any advantage to this versus the NIS server in SFU. Seems that the *nix community is making no progress in the secure authentication arena if this is the case. Any ideas or thoughts?

RE: [ActiveDir] SSL on OWA to change password

2005-04-15 Thread Douglas M. Long
Are you using this as your guide? http://support.microsoft.com/default.aspx?kbid=555126 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Friday, April 15, 2005 9:48 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] SSL on

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-15 Thread Douglas M. Long
 : [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] De la part de Douglas M. Long Envoyé : Tuesday, April 12, 2005 2:03 PM À : ActiveDir@mail.activedir.org Objet : RE: [ActiveDir] OT: Exchange Transaction logs I am using BackupExec 10. I believe Michel answered my specific question. I am

RE: [ActiveDir] Password complexity requirements

2005-04-15 Thread Douglas M. Long
I kind of thought the idea of only having one password policy per domain was that you are theoretically protecting the domain admin accounts (when enforcing complexity) from an escalation type attack from a user account. Or for that matter, protecting the whole domain with more complex

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-12 Thread Douglas M. Long
collection of transaction logs, that means you are not backing up Exchange. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, April 05, 2005 11:11 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Exchange

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-12 Thread Douglas M. Long
processes. As a start read the Exchange Server 2003 Disaster Recovery Operations Guide http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/disre copgde.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, April 12

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-12 Thread Douglas M. Long
to backup the Exchange store to file and then include this file in your regular backup. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: 12 April 2005 16:52 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange Transaction

RE: [ActiveDir] 1000 groups

2005-04-12 Thread Douglas M. Long
This is a question possibly related to this. I just created a global security group, added 871 users, and they all have grey hair as opposed to the black hair that I see in every other security group. What does this mean? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

  1   2   3   >