We are setting up some servers for a remote
office. The servers include another Win 2003 domain controller (this will
be the 4th DC for that domain) and 2003 exchange box (3rd Exchange box) and a
couple others (file server, phone server, etc). This office should be
ready to accept the
g to SQL, for example).
Thanks, Brian Desmond [EMAIL PROTECTED]
c - 312.731.3132 -Original
Message- From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Jason B Sent: Thursday, September 08, 2005 4:37
PM To: ActiveDir@mail.activedir.org
Subje
to
support AD communication.
http://support.microsoft.com/kb/q179442/
Phil
On 9/7/05, Jason B [EMAIL PROTECTED] wrote:
Because this will be a sharepoint server for clients. Regardless, that
decision has already been made and I don't have any input into it.
Any info on the ports I'd need open
cting to SQL, for example).
Thanks, Brian Desmond [EMAIL PROTECTED] c -
312.731.3132 -Original
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason
B Sent: Thursday, September 08, 2005 4:37 PM To:
ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Which ports
07, 2005 8:45 AM
Subject: Re: [ActiveDir] Which ports to open in the DMZ to communicate with
AD SQL...
Why did you decide to put it in the DMZ?
-ASB
On 9/7/05, Jason B [EMAIL PROTECTED] wrote:
We are putting a MS sharepoint server in the DMZ and need to have it on
the
domain
to support Lightweight Directory Access
Protocol (LDAP)
TCP port 445 to support server message block (SMB)
From: [EMAIL PROTECTED] on behalf of Jason B
Sent: Wed 9/7/2005 12:05 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Which ports to open in the DMZ
Just wondering what IP schema people on this list like to use... we just
outgrew our class C and spent a few hours on Saturday supernetting. We're
now using a 13 bit subnet mask (255.255.255.248) and debating the best and
most efficient way to organize our IP addressing schema. Previously,
Looking for the easiest way to copy a new hosts
file to ~200 workstations - all on a singleAD domain. Would it be
best just to use a copy command in abatch file in a startup script in
GP?
I thought that the 75GB was in reference to the limit on mailboxes, not the
entire Information Store.
- Original Message -
From: Crawford, Scott [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Tuesday, June 07, 2005 11:08 AM
Subject: RE: [ActiveDir] FYI---WSUS released,
We have an XP machine on our network that is
running automated queries on a search engine. Is there a way that I can
see which processes/programs this PC is running without the user
knowing?
Recently - the past week - we have begun to get
this notification on workstations on a random basis. We have applied NO
updates, hotfixes or service packs to workstations or servers since this message
started occuring. Workstations then cannot get to a DC to
authenticate. I know that this
Service Pack 1 for Windows 2003 server came out on
the 1st of this month... it's a behemoth download at ~325MB and supposedly
has a lot of improvements and new features. Has anyone had the fortitude
to install it on production servers yet? If so, how's it working
out?
Anyone have the general price-range on these
products? Web sites don't seem to list it, and after contacting sales,
they want all kinds of info just to get a price. I am just looking for
aGENERAL price. I don't know if they are $99, $99 per client, $1000
or $10,000.
- Original
This is where Ed should chime in with his famous
line - something to the extent of it being a bad idea to try to address/fix
behavioral problems using technology.
I wish I had an answer for you, but would be
curious to hear what others say about the situation.
- Original Message
We have a lot of computers that have (apparently)
had the power options set to turn the computers to "standby" mode after a few
hours. This is problematic for off-hours processes. All these
machines run WinXP Pro SP2. Is there a setting in a GPO that can change
this to turn off
Desktop Standard has one. You might
also check out Quests and Full-Armor / NetIQs offerings. What you are
looking for is a client side extension that allows you to manage these
settings.
Todd
Myrick
From: Jason B
[mailto:[EMAIL PROTECTED] Sent: Wednesday,
Good question - and one I've thought about often myself. It would stand to
reason though, that there's a lag between the time that a virus/explot is
released and the time it takes Symantec/Microsoft/etc, to release a
fix/update for it - especially since many of the AV companies depend on
We had a user try to synch his new pocket
PC and in doing so, he lost ALL his calendar items. Everything else
(email, tasks, etc) is fine, but all his appointments and everything is
gone. We are on Exchange 2003, Outlook 2003 and have deleted item retention
set to 60 days. Ive never
Tell me about it... when one user constantly pushes software, and does it
in a non-chalant manner, I usually steer clear. If any software is
valuable, it will have a lot more than one user lauding it.
- Original Message -
From: joe [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
I create an MSI package and had is assigned to an
OU through a GPO. It installs itself upon login. That all works
well, and the user can run the program just finebut the issue I am having
is that when a user who has the package installed clicks on a file that that
program opens, it always
Thank you VERY much... that was exactly
it. I use a "clean" install of XP SP2 for the MIS creation, but for some
reason, McAfee has been installed on this machine and it created a temp file in
the user profile.
Anyway, got it out of there and it works like a
charm now - thanks!
-
We have some of our users that need the eFax viewer
installed. To install it requires admin privs, which (of course) none of
our users have. Enough users need it that it's justified installing it by
GPO. eFax doesn't have it as an MSI file, so I downloaded the exe and
created an MSI package
Is there a reason that you don't just create a
newOU and move the computers there?
- Original Message -
From:
Francis Ouellet
To: ActiveDir@mail.activedir.org
Sent: Tuesday, February 22, 2005 11:36
AM
Subject: [ActiveDir] Change the Computer
container in a
Slightly OT for an AD forum, but since I've seen so
much great advice flow through this list, and we're populated with Sys Admins
(who are frequently in charge of backups) I figured I'd throw it out
there.
We have two Dell Tape autoloaders that have 8 slots
(7 DLT IV + 1 cleaning tape).
net localgroup Users /add"consulting
temp1234"
- Original Message -
From:
Harding, Devon
To: ActiveDir@mail.activedir.org
Sent: Thursday, February 17, 2005 3:02
PM
Subject: [ActiveDir] Startup
Scripts?
I cant seem to get a startup
script to create
James - this little program (EPAL.exe) is
GREAT!
Even though I had it resolved, I tried this program
and it worked as well: very cool "fix" for the issue, and the fact that
it's integrated with AD makes it all the better.
Anyone else who has similar permissions issues for
apps, EPAL.exe
Okay, our environment is that all our clients are
running Windows XP SP2, and our servers are Windows 2003. The situation is
that our Accounting department uses Quickbooks, and about 70 of our employees
need to use an application that comes with Quickbooks called "QB Timer".
It's free for
e test GPO
permissions, I got it to work. I think it took longer to enter the
registry keys in the GPO than it did to find out what was needed as far as
permissions go (sigh). Did I mention how much I hate Intuit
products?
- Original Message -
From:
Jason B
To:
You'll need a third party app to do *exactly* what you're asking. VNC does
it, and it's free. http://www.realvnc.com/
- Original Message -
From: Ben D. Kusa [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Monday, February 14, 2005 12:34 PM
Subject: RE: [ActiveDir] remote
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason B
Sent: Monday, February 07, 2005 6:37 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Using GPO's to force a Lock
Workstation in conjunction with task manager
I think this may work... I'll try it and get back with the list.
Thanks
In this example, I want to exclude our CEO from
having a forced IE start page through GPO, while the remainder of our domain
keeps a forced homepage. Is the best way to go about this, to write a WMI
filter to exclude that specific user, or is there some better way to do it, as
we have this
ity filter as
opposed to a WMI filter.
see http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/Default.asp?url="">
steve patrick
- Original Message -
From:
Jason B
To: ActiveDir@mail.activedir.org
Sent: Tuesd
Does disabling offline files through GPO affect Outlook 2003 "offline" or
"cached" mode?
I was just using that as an example - I apologize
for having chosen a poor one.
I would never exclude anyone from the "Default
Domain Policy" as it applies at the domain level - only our "Domain Controllers"
GPO and "Servers" GPO block inheritance ofthe "Default Domain
Policy"GPO - it
Objective: Use Group Policy to force workstations to lock after 60 minutes
of inactivity.
Well, I know that there's no way to easily do this by using a GPO. Most
admins just use the GPO settings to enable a screensaver and password for
it, however, I really want to lock the workstation
screen
saver option, but I'm curious as to why you want to do that actual
LockWorkStation function. Is it an academic exercise, or is there
something
more to it?
Just simply curious...
-rtk
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason B
Sent: Monday
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason B
Sent: Monday, February 07, 2005 5:01 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Using GPO's to force a Lock Workstation in
conjunction with task manager
The problem is that I am adding arguments to the rundll.exe that tell
with task manager
When I've used scheduler to run an exe that needs arguments, I put the
command in a batch file and schedule that to run.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason B
Sent: Monday, February 07, 2005 4:01 PM
To: ActiveDir
38 matches
Mail list logo