[ActiveDir] How long can I keep a DC off-line before it has issues?

2005-09-14 Thread Jason B
We are setting up some servers for a remote office. The servers include another Win 2003 domain controller (this will be the 4th DC for that domain) and 2003 exchange box (3rd Exchange box) and a couple others (file server, phone server, etc). This office should be ready to accept the

Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL...

2005-09-09 Thread Jason B
g to SQL, for example). Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jason B Sent: Thursday, September 08, 2005 4:37 PM To: ActiveDir@mail.activedir.org Subje

Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL...

2005-09-08 Thread Jason B
to support AD communication. http://support.microsoft.com/kb/q179442/ Phil On 9/7/05, Jason B [EMAIL PROTECTED] wrote: Because this will be a sharepoint server for clients. Regardless, that decision has already been made and I don't have any input into it. Any info on the ports I'd need open

Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL...

2005-09-08 Thread Jason B
cting to SQL, for example). Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B Sent: Thursday, September 08, 2005 4:37 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Which ports

Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL...

2005-09-07 Thread Jason B
07, 2005 8:45 AM Subject: Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL... Why did you decide to put it in the DMZ? -ASB On 9/7/05, Jason B [EMAIL PROTECTED] wrote: We are putting a MS sharepoint server in the DMZ and need to have it on the domain

Re: [ActiveDir] Which ports to open in the DMZ to communicate with AD SQL...

2005-09-07 Thread Jason B
to support Lightweight Directory Access Protocol (LDAP) TCP port 445 to support server message block (SMB) From: [EMAIL PROTECTED] on behalf of Jason B Sent: Wed 9/7/2005 12:05 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Which ports to open in the DMZ

[ActiveDir] IP Schema

2005-08-17 Thread Jason B
Just wondering what IP schema people on this list like to use... we just outgrew our class C and spent a few hours on Saturday supernetting. We're now using a 13 bit subnet mask (255.255.255.248) and debating the best and most efficient way to organize our IP addressing schema. Previously,

[ActiveDir] Push out a test (hosts) file to clients

2005-06-24 Thread Jason B
Looking for the easiest way to copy a new hosts file to ~200 workstations - all on a singleAD domain. Would it be best just to use a copy command in abatch file in a startup script in GP?

Re: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 coming

2005-06-07 Thread Jason B
I thought that the 75GB was in reference to the limit on mailboxes, not the entire Information Store. - Original Message - From: Crawford, Scott [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: Tuesday, June 07, 2005 11:08 AM Subject: RE: [ActiveDir] FYI---WSUS released,

[ActiveDir] How can I see which processes an XP machine is running?

2005-04-22 Thread Jason B
We have an XP machine on our network that is running automated queries on a search engine. Is there a way that I can see which processes/programs this PC is running without the user knowing?

[ActiveDir] OT: Limited or no connectivity - Win2K SP2

2005-04-11 Thread Jason B
Recently - the past week - we have begun to get this notification on workstations on a random basis. We have applied NO updates, hotfixes or service packs to workstations or servers since this message started occuring. Workstations then cannot get to a DC to authenticate. I know that this

[ActiveDir] OT: Anyone installed Windows 2003 (Server) SP1 yet?

2005-04-06 Thread Jason B
Service Pack 1 for Windows 2003 server came out on the 1st of this month... it's a behemoth download at ~325MB and supposedly has a lot of improvements and new features. Has anyone had the fortitude to install it on production servers yet? If so, how's it working out?

Re: [ActiveDir] Logging changes made to GPOs

2005-03-25 Thread Jason B
Anyone have the general price-range on these products? Web sites don't seem to list it, and after contacting sales, they want all kinds of info just to get a price. I am just looking for aGENERAL price. I don't know if they are $99, $99 per client, $1000 or $10,000. - Original

Re: [ActiveDir] (l)user login auditing

2005-03-09 Thread Jason B
This is where Ed should chime in with his famous line - something to the extent of it being a bad idea to try to address/fix behavioral problems using technology. I wish I had an answer for you, but would be curious to hear what others say about the situation. - Original Message

[ActiveDir] Can I set power options through Group Policy?

2005-03-09 Thread Jason B
We have a lot of computers that have (apparently) had the power options set to turn the computers to "standby" mode after a few hours. This is problematic for off-hours processes. All these machines run WinXP Pro SP2. Is there a setting in a GPO that can change this to turn off

Re: [ActiveDir] Can I set power options through Group Policy?

2005-03-09 Thread Jason B
Desktop Standard has one. You might also check out Quest’s and Full-Armor / NetIQ’s offerings. What you are looking for is a client side extension that allows you to manage these settings. Todd Myrick From: Jason B [mailto:[EMAIL PROTECTED] Sent: Wednesday,

Re: [ActiveDir] worm/bot issues

2005-03-02 Thread Jason B
Good question - and one I've thought about often myself. It would stand to reason though, that there's a lag between the time that a virus/explot is released and the time it takes Symantec/Microsoft/etc, to release a fix/update for it - especially since many of the AV companies depend on

[ActiveDir] OT: Recovering deleted calendar items (Outlook 2003/Exchange 2003)

2005-03-02 Thread Jason B
We had a user try to synch his new pocket PC and in doing so, he lost ALL his calendar items. Everything else (email, tasks, etc) is fine, but all his appointments and everything is gone. We are on Exchange 2003, Outlook 2003 and have deleted item retention set to 60 days. Ive never

Re: [ActiveDir] The missing fields

2005-03-01 Thread Jason B
Tell me about it... when one user constantly pushes software, and does it in a non-chalant manner, I usually steer clear. If any software is valuable, it will have a lot more than one user lauding it. - Original Message - From: joe [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org

[ActiveDir] MSI package assigned through GPO keeps reinstalling itself

2005-02-25 Thread Jason B
I create an MSI package and had is assigned to an OU through a GPO. It installs itself upon login. That all works well, and the user can run the program just finebut the issue I am having is that when a user who has the package installed clicks on a file that that program opens, it always

Re: [ActiveDir] MSI package assigned through GPO keeps reinstalling itself

2005-02-25 Thread Jason B
Thank you VERY much... that was exactly it. I use a "clean" install of XP SP2 for the MIS creation, but for some reason, McAfee has been installed on this machine and it created a temp file in the user profile. Anyway, got it out of there and it works like a charm now - thanks! -

[ActiveDir] Not installing MSI package from GPO

2005-02-24 Thread Jason B
We have some of our users that need the eFax viewer installed. To install it requires admin privs, which (of course) none of our users have. Enough users need it that it's justified installing it by GPO. eFax doesn't have it as an MSI file, so I downloaded the exe and created an MSI package

Re: [ActiveDir] Change the Computer container in a real OU

2005-02-22 Thread Jason B
Is there a reason that you don't just create a newOU and move the computers there? - Original Message - From: Francis Ouellet To: ActiveDir@mail.activedir.org Sent: Tuesday, February 22, 2005 11:36 AM Subject: [ActiveDir] Change the Computer container in a

[ActiveDir] Backups...

2005-02-17 Thread Jason B
Slightly OT for an AD forum, but since I've seen so much great advice flow through this list, and we're populated with Sys Admins (who are frequently in charge of backups) I figured I'd throw it out there. We have two Dell Tape autoloaders that have 8 slots (7 DLT IV + 1 cleaning tape).

Re: [ActiveDir] Startup Scripts?

2005-02-17 Thread Jason B
net localgroup Users /add"consulting temp1234" - Original Message - From: Harding, Devon To: ActiveDir@mail.activedir.org Sent: Thursday, February 17, 2005 3:02 PM Subject: [ActiveDir] Startup Scripts? I can’t seem to get a startup script to create

Re: [ActiveDir] Using GPO to install an MSI package - Slightly Off Topic

2005-02-16 Thread Jason B
James - this little program (EPAL.exe) is GREAT! Even though I had it resolved, I tried this program and it worked as well: very cool "fix" for the issue, and the fact that it's integrated with AD makes it all the better. Anyone else who has similar permissions issues for apps, EPAL.exe

[ActiveDir] Using GPO to install an MSI package

2005-02-15 Thread Jason B
Okay, our environment is that all our clients are running Windows XP SP2, and our servers are Windows 2003. The situation is that our Accounting department uses Quickbooks, and about 70 of our employees need to use an application that comes with Quickbooks called "QB Timer". It's free for

Re: [ActiveDir] Using GPO to install an MSI package

2005-02-15 Thread Jason B
e test GPO permissions, I got it to work. I think it took longer to enter the registry keys in the GPO than it did to find out what was needed as far as permissions go (sigh). Did I mention how much I hate Intuit products? - Original Message - From: Jason B To:

Re: [ActiveDir] remote control users desktop

2005-02-14 Thread Jason B
You'll need a third party app to do *exactly* what you're asking. VNC does it, and it's free. http://www.realvnc.com/ - Original Message - From: Ben D. Kusa [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: Monday, February 14, 2005 12:34 PM Subject: RE: [ActiveDir] remote

Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager

2005-02-08 Thread Jason B
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B Sent: Monday, February 07, 2005 6:37 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager I think this may work... I'll try it and get back with the list. Thanks

[ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

2005-02-08 Thread Jason B
In this example, I want to exclude our CEO from having a forced IE start page through GPO, while the remainder of our domain keeps a forced homepage. Is the best way to go about this, to write a WMI filter to exclude that specific user, or is there some better way to do it, as we have this

Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

2005-02-08 Thread Jason B
ity filter as opposed to a WMI filter. see http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/Default.asp?url=""> steve patrick - Original Message - From: Jason B To: ActiveDir@mail.activedir.org Sent: Tuesd

[ActiveDir] Does disabling offline files through GPO affect Outlook 2003 offline or cached mode?

2005-02-08 Thread Jason B
Does disabling offline files through GPO affect Outlook 2003 "offline" or "cached" mode?

Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

2005-02-08 Thread Jason B
I was just using that as an example - I apologize for having chosen a poor one. I would never exclude anyone from the "Default Domain Policy" as it applies at the domain level - only our "Domain Controllers" GPO and "Servers" GPO block inheritance ofthe "Default Domain Policy"GPO - it

[ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager

2005-02-07 Thread Jason B
Objective: Use Group Policy to force workstations to lock after 60 minutes of inactivity. Well, I know that there's no way to easily do this by using a GPO. Most admins just use the GPO settings to enable a screensaver and password for it, however, I really want to lock the workstation

Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager

2005-02-07 Thread Jason B
screen saver option, but I'm curious as to why you want to do that actual LockWorkStation function. Is it an academic exercise, or is there something more to it? Just simply curious... -rtk -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B Sent: Monday

Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager

2005-02-07 Thread Jason B
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B Sent: Monday, February 07, 2005 5:01 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager The problem is that I am adding arguments to the rundll.exe that tell

Re: [ActiveDir] Using GPO's to force a Lock Workstation in conjunction with task manager

2005-02-07 Thread Jason B
with task manager When I've used scheduler to run an exe that needs arguments, I put the command in a batch file and schedule that to run. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B Sent: Monday, February 07, 2005 4:01 PM To: ActiveDir