Re: [ActiveDir] Add or Remove Programs GPO

2007-01-26 Thread Matheesha Weerasinghe
might it be worth running something like filemon and regmon and checking whats happening? On 1/26/07, Bart Van den Wyngaert [EMAIL PROTECTED] wrote: That opens the snap-in... So through the Control Panel it doesn't work, directly running the .cpl it does. Still don't understand it totally

Re: [ActiveDir] OT: Network latency on VBScript-mapped drive letters.

2007-01-24 Thread Matheesha Weerasinghe
Just curious. Are you sure its not something like AV scanning network files on access? Generally once scanned they add them to a temp db of known good list to prevent scanning when accessed later. If so, that would explain slow performance when first accessing the files but better responses when

Re: [ActiveDir] OT: Who needs that much ram anyway?

2007-01-16 Thread Matheesha Weerasinghe
All Put your hands up if you are using this hotfix to its full potential ;-) http://support.microsoft.com/kb/918844 On 1/16/07, Martin Tuip [EMAIL PROTECTED] wrote: I can think of quite a few situations. RAM is cheap aswell compared to the early days. Martin Tuip Exchange MVP -

[ActiveDir] OT: Vista BSOD with more than 2GB of RAM

2007-01-10 Thread Matheesha Weerasinghe
All Sorry for the OT topic. I have a PC I use as my lab with VMs. It has Vista Ultimate and only has 2GB of RAM and was working fine. However I tried to upgrade the memory by using a 512MB module and the PC wont boot now. It blue screens with a message similar to KB 929777. I tried getting the

Re: [ActiveDir] OT: Vista BSOD with more than 2GB of RAM

2007-01-10 Thread Matheesha Weerasinghe
Sorry! I meant to ask is there anyone with a Vista RTM X86 PC with more than 2GB of RAM. Thanks M@ On 1/11/07, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: All Sorry for the OT topic. I have a PC I use as my lab with VMs. It has Vista Ultimate and only has 2GB of RAM and was working fine

Re: [ActiveDir] OT: Vista BSOD with more than 2GB of RAM

2007-01-10 Thread Matheesha Weerasinghe
From: [EMAIL PROTECTED] on behalf of Matheesha Weerasinghe Sent: Thu 11/01/2007 12:22 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: Vista BSOD with more than 2GB of RAM Sorry! I meant to ask is there anyone with a Vista RTM X86 PC with more than 2GB of RAM. Thanks M@ On 1/11

Re: [ActiveDir] OT: Vista BSOD with more than 2GB of RAM

2007-01-10 Thread Matheesha Weerasinghe
if that is enough to solve the problem :-) Cheers Ken From: [EMAIL PROTECTED] on behalf of Matheesha Weerasinghe Sent: Thu 11/01/2007 12:49 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: Vista BSOD with more than 2GB of RAM I didnt configure the memory

[ActiveDir] OT: Vista Resource Monitor blank

2006-12-15 Thread Matheesha Weerasinghe
Has anyone ever seen the resource monitor of Vista RTM blank with no CPU/Mem/Disk etc... details at all? Last night I noticed when I used resource monitor it didnt display anything. Task Manager showed activity as expected but not the resource monitor. I assumed it was possibly due to the machine

Re: [ActiveDir] OT: Vista Resource Monitor blank

2006-12-15 Thread Matheesha Weerasinghe
Monitor? If so, that's normal. You have to pick the objects and counters that you want to watch. Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Friday, December 15, 2006 5:34 AM To: ActiveDir@mail.activedir.org Subject

Re: [ActiveDir] DFS vs Robocopy question

2006-12-06 Thread Matheesha Weerasinghe
How much data do you want to keep in sync between the distribution points? Cheers M@ On 12/6/06, Condra, Jerry W Mr HP [EMAIL PROTECTED] wrote: Hi all I'm looking for feedback on a couple of scenarios for our environment. We have three W2K3 SP1 domains and WAN separated regions in a couple

Re: [ActiveDir] BIND allow-update

2006-10-06 Thread Matheesha Weerasinghe
http://research.microsoft.com/programs/up_content/bind.doc might be of use.On 10/6/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Easy question for the group -I have a forest rood domain: msroot.companyI have a domain: company.comWe use BIND. My question: do I need an allow-update entry for both

Re: [ActiveDir] ADSI programming

2006-09-15 Thread Matheesha Weerasinghe
I wonder whether ironpython http://www.ironpython.com/ is worth looking into in that case. I am no programmer but I have a hunch it might be to your liking. CheersM@ On 9/15/06, Ramon Linan [EMAIL PROTECTED] wrote: Hi,I want to start programming in AD.I have experience programming with Python, PHP

Re: [ActiveDir] Completely OT: Maroons

2006-09-04 Thread Matheesha Weerasinghe
I've received blank posts here.M@On 9/4/06, Laura A. Robinson [EMAIL PROTECTED] wrote: Has anybody figured out what's causing the blank posts, or is it just me whogot blank replies from Mark and Neil? Thanks,Laura -Original Message- From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On

Re: [ActiveDir] Moving user accounts.

2006-08-30 Thread Matheesha Weerasinghe
http://blog.joeware.net/2005/07/17/48/M@On 8/30/06, David Cliffe [EMAIL PROTECTED] wrote: Hi Jim, Yes, I have found this to be true...there is no move object delegation.We have to use the create and delete. I wonder if that will change in future (I have a feeling it's been mentioned

Re: [ActiveDir] Agents on Domain Controllers

2006-08-25 Thread Matheesha Weerasinghe
I see your point but unfortunately it doesn't seem so practical these days. For example any AV software you use these days will have an agent to get updates. Any software distribution mechanism and hardware health checking software, enterprise management software all require agents. The thing is

Re: [ActiveDir] Agents on Domain Controllers

2006-08-25 Thread Matheesha Weerasinghe
Somehow I read that and got an entirely different meaning. It may be due to the mood I am in right now. Then again a quick look at some of joe's blog comments will show how often I misread things. Hmm...Sorry Deji. M@On 8/25/06, Akomolafe, Deji [EMAIL PROTECTED] wrote: You seem to think I

Re: [ActiveDir] disable 200 users

2006-08-25 Thread Matheesha Weerasinghe
To add to Deji's, you would then use the same list to get a FOR /F %i IN (mylistofnames.txt) DO dsquery user forestroot -scope subtree -name %i -o dn|dsmove -newparent OU=NEWDEST,DC=FQDN where OU=NEWDEST,DC=FQDN is the FQDN of the new OU you want to move to.please note your list of names must be

Re: [ActiveDir] Problem in AD

2006-08-23 Thread Matheesha Weerasinghe
I'm afraid you need to give a little more detail than that. What do you mean not able to communicate with AD? M@ On 8/23/06, Pankaj Verma [EMAIL PROTECTED] wrote: Hi AllI have 3 domain controllers.I transfer all the FSMO roles from DC03to DC02 after that I shutdown D03 I restarted D02 dC01 but

Re: [ActiveDir] Secure LDAP queries from the outside

2006-08-22 Thread Matheesha Weerasinghe
Check the firewall rules to ensure they are correct. Are the packets even getting to the DC? Personally I doubt it. M@ On 8/22/06, Thommes, Michael M. [EMAIL PROTECTED] wrote: Hi, We are trying to set up secure LDAP queries from the outside to AD for pulling email addresses but are

Re: [ActiveDir] LDAP Logon Name

2006-08-17 Thread Matheesha Weerasinghe
Subject: RE: [ActiveDir] LDAP Logon Name That was exactly the same as HP documentation. I'll try your filter and will post the result. Thanks Alex From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14

Re: [ActiveDir] [OT] Longhorn Beta

2006-08-17 Thread Matheesha Weerasinghe
Technet Plus On 8/17/06, WATSON, BEN [EMAIL PROTECTED] wrote: Outside of my MSDN account is there a preferred way to obtain Longhorn Beta's for testing? ~Ben List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

Re: [ActiveDir] ADFind Query

2006-08-15 Thread Matheesha Weerasinghe
http://unxutils.sourceforge.net/ On 8/15/06, WATSON, BEN [EMAIL PROTECTED] wrote: I'm familiar with grep on *nix, but didn't realize it was available on Windows. Where did you get your port of grep for Windows at? From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
I dont think so. objectsid attribute is a systemonly attribute. Personally I am impressed of that smart co-worker that managed to delete it. According to the AD Delegation appendices http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642DisplayLang=en its

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
if I look at the security of the domain object in ADUC Incoming Forest Trust Builders is there. -Original Message- From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 10:22 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
Builders is there. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 10:22 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders I dont think so

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
By the way you are looking for this on the forest root right? M@ On 8/14/06, Han Valk [EMAIL PROTECTED] wrote: Yep logged in as Domain Admin. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 13:00

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
)right are you? M@ On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: By the way you are looking for this on the forest root right? M@ On 8/14/06, Han Valk [EMAIL PROTECTED] wrote: Yep logged in as Domain Admin. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [ActiveDir] Recreate BUILTIN\Incoming Forest Trust Builders

2006-08-14 Thread Matheesha Weerasinghe
Its only in the forest domain IIRC ;-) M@ On 8/14/06, Han Valk [EMAIL PROTECTED] wrote: No??? Child domain. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 17:38 To: ActiveDir@mail.activedir.org

Re: [ActiveDir] LDAP Logon Name

2006-08-14 Thread Matheesha Weerasinghe
Your ldap filter doesnt look correct. M@ On 8/14/06, Alex Alborzfard [EMAIL PROTECTED] wrote: According to product documentation, I have to configure embedded ldapauthentication. Apparently this printer has an Embedded Web Server (EWS).However, when I follow the documentation, using ldp tool, it

Re: [ActiveDir] LDAP Logon Name

2006-08-14 Thread Matheesha Weerasinghe
I assume you need a filter such as ((objectcategory=person)(objectclass=user)(displayname=phelps,k*)) I optimised the user object search and put a opening bracket when specifying the displayname. M@ On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: Your ldap filter doesnt look

Re: [ActiveDir]

2006-08-14 Thread Matheesha Weerasinghe
http://searchwinit.techtarget.com/originalContent/0,289142,sid1_gci1192821,00.html?track=NL-463ad=554811USCAad=554808 I dont care what anyone says. Thats a damn fine article. I couldnt possibly thank Dean enough for that info.M@ On 8/14/06, Graham Turner [EMAIL PROTECTED] wrote: Alter ego !my

Re: [ActiveDir]

2006-08-14 Thread Matheesha Weerasinghe
) --Dean WellsMSE technology* Email: [EMAIL PROTECTED] http://msetechnology.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 2:35 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] http

Re: [ActiveDir]

2006-08-14 Thread Matheesha Weerasinghe
I am still waiting for the other 5 parts! M@ On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: joe said pretty decent http://blog.joeware.net/2006/06/08/400/ I think thats an understatement ;-) However, my profuse thanks to joe too. I wasnt aware of the article until he blogged

Re: [ActiveDir] LDAP Logon Name

2006-08-14 Thread Matheesha Weerasinghe
from there. To see that information, use ldp, and rather than search, use the tree view and navigate to it. (note: when the tree asks you for a dn value, leave it blank and press OK.) Al On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: Your ldap filter doesnt look

Re: [ActiveDir] ADFind Query

2006-08-14 Thread Matheesha Weerasinghe
I get the error Ben got with W2K. W2k3 doesnt give that error. The VM I have here is W2k3 with SP3. M@ On 8/14/06, joe [EMAIL PROTECTED] wrote: You shouldn't be getting that error with that command... Even if the attribute name was incorrect you wouldn't get that error, you would get 0

Re: [ActiveDir] ADFind Query

2006-08-14 Thread Matheesha Weerasinghe
The wildcard char is stripped according to the network trace for W2K. Hence the nosuchattribute result. M@ On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: I get the error Ben got with W2K. W2k3 doesnt give that error. The VM I have here is W2k3 with SP3. M@ On 8/14/06, joe [EMAIL

Re: [ActiveDir] ADFind Query

2006-08-14 Thread Matheesha Weerasinghe
scratch the previous comment. Here is the trace output. DSID-0C0905A4. Error 0x0057 (87) error processing filter. M@ On 8/14/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: The wildcard char is stripped according to the network trace for W2K. Hence the nosuchattribute result. M@ On 8

Re: [ActiveDir] LDAP Logon Name

2006-08-14 Thread Matheesha Weerasinghe
! Thanks Alex -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 3:47 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] LDAP Logon Name All I did was fix your query. It seemed like you were trying

Re: [ActiveDir] ADFind Query

2006-08-14 Thread Matheesha Weerasinghe
that unusual. joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, August 14, 2006 6:29 PM To: ActiveDir@mail.activedir.org Subject: Re

Re: [ActiveDir] Netlogon and SYSVOL after Restore

2006-08-10 Thread Matheesha Weerasinghe
Check the File replication Service event log for more details. This is a non authoritative restore of FRS. So it is trying to sync with a replica to ensure the sysvol content is up to date. I assume you have more than one domain controller in this domain. Once it syncs, it will bring it online.

Re: [ActiveDir] OT: Enterprise Terminal Server Licensing Server question

2006-08-07 Thread Matheesha Weerasinghe
If you look in the AD Delegation document http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3DisplayLang=en it shows the adminsdholder has permissions defined for the terminal server license servers group. Its allowed to view a terminalserver attribute

Re: [ActiveDir] LDAP Ping

2006-08-06 Thread Matheesha Weerasinghe
Nope. Me too. I know Tony said no me too posts but I cant help it here.M@On 8/6/06, Al Mulnick [EMAIL PROTECTED] wrote:Am I the only one receiving blank messages from Mark? On 8/4/06, Mark Parris [EMAIL PROTECTED] wrote:

Re: [ActiveDir] LDAP Ping

2006-08-04 Thread Matheesha Weerasinghe
Why not use ldp.exe and just try connecting? Or you could also use adfind and doing a rootdse lookup when you want at regular intervals and check the output? Well, Its what I'd do. But someone may have a better suggestion. I'd run a netmon/ethereal/wireshark session as well to see what happens

Re: [ActiveDir] LDAP Ping

2006-08-04 Thread Matheesha Weerasinghe
But you are troubleshooting it right? ;-) Cheers M@ On 8/4/06, Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED] wrote: Its not for troubleshooting, its so we can tell when the DC is hung, you cant tell when its hung because our monitoring software only pings by ip and it responds.

Re: [ActiveDir] Using a secret administrator account

2006-08-04 Thread Matheesha Weerasinghe
Well from what I've understood, I dont think your secret administrator is going to be useful in scenarios where you get issues with token limits. In those instances, the only account that is guaranteed to work is the default built-in administrator account. Even if its disabled, you can still use

Re: [ActiveDir] OT: NTLM troubleshooting info

2006-08-02 Thread Matheesha Weerasinghe
: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Tuesday, August 01, 2006 12:11 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: NTLM troubleshooting info Thanks. It probably will help to some extent at least to see what traffic happens between

Re: [ActiveDir] DNS oddities?

2006-08-01 Thread Matheesha Weerasinghe
asking for the moon ;o) -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Monday, July 31, 2006 7:10 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] DNS

Re: [ActiveDir] DNS oddities?

2006-08-01 Thread Matheesha Weerasinghe
PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Sunday, July 30, 2006 3:07 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] DNS oddities? AllCan someone please explain the following observation?Installed a new R2 DC forest with one DC/DNS.created a new dns zone for use by a child domain (yet

[ActiveDir] OT: NTLM troubleshooting info

2006-08-01 Thread Matheesha Weerasinghe
Guys Does anyone have any good resources on troubleshooting NTLM?. I've emailed technet mag as they posted the recent article by Jesper. I've also asked a couple of MSFT bloggers but havent heard a peep yet. I would appreciate if you guys can help. Basically I am looking at an issue where NTLM

Re: [ActiveDir] OT: NTLM troubleshooting info

2006-08-01 Thread Matheesha Weerasinghe
Thanks. It probably will help to some extent at least to see what traffic happens between a client and a server.I was hoping for some nice reading material too. Cheers M@ On 8/1/06, Kitchens Arthur E [EMAIL PROTECTED] wrote: might sspi_workbench (from technet) be useful for this? From:

Re: [ActiveDir] DNS suffix resolution..

2006-07-31 Thread Matheesha Weerasinghe
I assume you are using WINS and the DCs of child and parent domainsare registered there. Therefore the netbios names are resolving. What happens when you try to ping the FQDN of the child domain server? Does that work? I think your issue is you want the child domain suffix to be appended

Re: [ActiveDir] DNS oddities?

2006-07-31 Thread Matheesha Weerasinghe
ipconfig /registerdns or restart the DHCP client HTH -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Sunday, July 30, 2006 3:07 PM To: ActiveDir

Re: [ActiveDir] [OT] Can I add an index in AD using an LDIF file?

2006-07-30 Thread Matheesha Weerasinghe
I hear Bill and Melinda are very charitable. Not sure if they'd wanna adopt a 6 foot 1 uber geek though. ;-)M@On 7/29/06, joe [EMAIL PROTECTED] wrote: LOL. This was catch up week. I took it off from work and ran around the house getting stuff fixed up etc and was only so so watching email.

[ActiveDir] DNS oddities?

2006-07-30 Thread Matheesha Weerasinghe
AllCan someone please explain the following observation?Installed a new R2 DC forest with one DC/DNS.created a new dns zone for use by a child domain (yet to be created). The zone is replicated to all domain controllers of the root domain. Enabled secure dynamic update only. Installed a new child

Re: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Matheesha Weerasinghe
So it works while its W2k3-SP1 but then breaks once upgraded to R2?What did you mean by incoming connections? Did you just mean ICMP? or actual connections like to certain services? Are the other DCs allowing incoming ICMP echo requests and allowing replies out? Are they also W2K3 -SP1? I assume

Re: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Matheesha Weerasinghe
I dont think its SCW anymore. Admittedly I havent used SCW but I am aware of it. If policies were applied, the change logs will be in %windir%\security\msscw\ChangeConfigurationLogs. if I understand correctly, Port 445 must be open because your file shares and the like are accessible. According to

Re: [ActiveDir] cn=meetings

2006-07-28 Thread Matheesha Weerasinghe
Thanks On 7/27/06, Free, Bob [EMAIL PROTECTED] wrote: MS NetMeeting uses the Meetings container to publish network meetingobjects. From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha WeerasingheSent: Thursday, July 27, 2006 12:31 AMTo:

[ActiveDir] cn=meetings

2006-07-27 Thread Matheesha Weerasinghe
AllJust a quick query. Does anyone know what cn=meetings,cn=system,dc=domainfqdn is for? CheersM@

Re: [ActiveDir] ldp in ADAM-SP1

2006-07-26 Thread Matheesha Weerasinghe
in branch offices). /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Tuesday, July 25, 2006 9:18 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ldp in ADAM-SP1 Thanks to Al and Guido for your further input

Re: [ActiveDir] ldp in ADAM-SP1

2006-07-25 Thread Matheesha Weerasinghe
/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, July 24, 2006 11:32 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ldp in ADAM-SP1 I dunno about you guys but I am very disappointed

Re: [ActiveDir] ldp in ADAM-SP1

2006-07-25 Thread Matheesha Weerasinghe
wetware issues with software or hardware. 2) Complexity is the anti-security. Best of luck. On 7/25/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: Wow, Thanks you so much for the detailed info guys. Basically my goal is quite simple. At least it is in my head. What I want to do, is to go

[ActiveDir] ldp in ADAM-SP1

2006-07-24 Thread Matheesha Weerasinghe
All Could someone with more experience with ldp provided with ADAM-SP1 tell me how I would go about configuring inherit-only Full Control permissions on nTDSDSA objects in the CN=Sites,CN=Configuration,DC=ForestFQDN ? The inherit-only perms options is grayed out here and I dont know how to do

Re: [ActiveDir] ldp in ADAM-SP1

2006-07-24 Thread Matheesha Weerasinghe
the the additional ACE created by bug 2. I will alert MSFT. joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, July 24, 2006 8:12 AM

Re: [ActiveDir] ldp in ADAM-SP1

2006-07-24 Thread Matheesha Weerasinghe
:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Monday, July 24, 2006 8:12 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] ldp in ADAM-SP1 All Could someone with more experience with ldp provided with ADAM-SP1 tell me how I would go about configuring inherit-only Full Control

[ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matheesha Weerasinghe
All I am currently in the process of interviewing job candidates who if successful will become my boss ;-) Basically the manager who will be his boss has asked me to do the technical side of the interview and check if the candidates are OK. I've had the pleasure of interviewing 2 so far and they

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matheesha Weerasinghe
and discontent. My $0.04 worth anyway. Al On 7/23/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: All I am currently in the process of interviewing job candidates who if successful will become my boss ;-) Basically the manager who will be his boss has asked me to do the technical side

Re: [ActiveDir] Replmon vs. dssite.msc

2006-07-22 Thread Matheesha Weerasinghe
If I understand correctly, replmon shows connection object info that was retrieved from the dc itself. dssite.msc shows the connection object info from the dc the snap-in is focused on. please correct me if i've misunderstood M@ On 7/19/06, Noah Eiger [EMAIL PROTECTED] wrote: Hi – I am

Re: [ActiveDir] Using non-standard TLDs within Active Directory

2006-07-21 Thread Matheesha Weerasinghe
Well it would be a good idea as long as no one thinks crikey thats a great idea and people start making corp.ad or corp.ads as their forest name ;-) As I understand it, the forest names need to be unique DNS names. If you have two corp.local's, how would you do conditional forwarding and the

Re: [ActiveDir] root admin account able to be locked out?

2006-07-18 Thread Matheesha Weerasinghe
Well, I've seen in our AD when it was W2K, the administrator account was showing as locked in dsa.msc if you try too may incorrect auth attempts. But I was still able to logon with it as expected. I didnt check to see if any events were logged to indicate that it was. I cannot repro your setup

Re: [ActiveDir] Forestprep Failure

2006-07-18 Thread Matheesha Weerasinghe
adfind -sc scontainsl:uid is the easiest. Or use dsquery or ldp with the base set to the schema and pass the following filter. ((objectcategory=classschema)(maycontain=uid)) The above tries to do a search for classes where the maycontain attribute contains uid. HTH M@ On 7/19/06, WATSON, BEN

OT: Re:[ActiveDir] Regarding printer configure through web

2006-07-10 Thread Matheesha Weerasinghe
If you want a web based view of what printers are available on a print server, then installing IIS should do it. This will install a virtual directory called printers so you could then browse http://printserver/printers to get a list of printers. Users could then browse and choose a printer and

[ActiveDir] Fwd: Redirect Application Data

2006-07-08 Thread Matheesha Weerasinghe
Sorry for the repost but it doesnt appear in the archives as been ever posted. I would appreciate a reply ;-) ta! M@ -- Forwarded message -- From: Matheesha Weerasinghe [EMAIL PROTECTED] Date: Jul 3, 2006 11:46 PM Subject: Redirect Application Data To: ActiveDir

Re: [ActiveDir] Fwd: Redirect Application Data

2006-07-08 Thread Matheesha Weerasinghe
Basically the reason I am inquiring this is because of performance issues which were blamed on application redirection. The appdata was on a cluster in this particular instance. Siting the fact that there are more components involved in the data path when appdata is accessed from a cluster , the

Re: [ActiveDir] Fwd: Redirect Application Data

2006-07-08 Thread Matheesha Weerasinghe
versus auto-sense on the nic. Just reading that laundry list of what that app is having to go through.. each possibly needing a little tweak here or there...sounds to me that a test, perf mon and other such monitoring is needed to determine if he's right? Matheesha Weerasinghe wrote: Basically

Re: [ActiveDir] Fwd: Redirect Application Data

2006-07-08 Thread Matheesha Weerasinghe
only be downloading changed files. Of course, all bets are off if you're deleting the cached profile at each logoff (as may be the case on a TS). Darren -Original Message- Wrom: MHAALPTCXLYRWTQTIPWIGYOKSTTZRCLBDX [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha Weerasinghe Sent: Saturday

Re: [ActiveDir] Can't find anyting on this [NTDS warning]

2006-07-07 Thread Matheesha Weerasinghe
Going by the ESE error codes it appears to not find the record. Some DB corruption may be? Source is http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ese/ese/extensible_storage_engine_errors.asp JET_errNoCurrentRecord -1603 There is no current record. I guess someone like

Re: [ActiveDir] Question on rightsguid

2006-06-20 Thread Matheesha Weerasinghe
/ joe [1] http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/contr ol_access_rights.asp -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matheesha

[ActiveDir] Question on rightsguid

2006-06-19 Thread Matheesha Weerasinghe
All I've been doing a little digging into AD and was wondering why the rightsguid for the validated-spn and the self-membership validated rights doesn't have objects in the schema with matching attributesecurityguid values. Is it correct to assume that there should be objects in the schema with

Re: [ActiveDir] bitwise filters

2006-06-15 Thread Matheesha Weerasinghe
Thanks joe! List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx

Re: [ActiveDir] bitwise filters

2006-06-13 Thread Matheesha Weerasinghe
Thanks for replying Tony. Unfortunately gmail couldnt read your reply so I resorted to the archive. In my example for searching universal groups, I wasnt distinguishing between security and distribution groups. Therefore the 2nd filter is correct too isnt it? As for the 3rd question, I am sure

[ActiveDir] bitwise filters

2006-06-12 Thread Matheesha Weerasinghe
Guys, I have a few questions on bitwise filters. 1. I just wanna make sure I've understood bitwise filters correctly. Basically if I want to check if all bits are set, I should use the Bitwise AND operator. If I need to check if any number of the bits I am interested in are set, I should use

Re: RE : RE: RE : RE: [ActiveDir] AD LDAP Logging.

2006-06-10 Thread Matheesha Weerasinghe
Check out the TechNet Webcast: Active Directory Performance Measurement and Troubleshooting—Level 300 at http://www.microsoft.com/events/series/adaug.mspx. On 6/10/06, Yann [EMAIL PROTECTED] wrote: Hello, Gil, very very very usefull informations that u provided at DEC ad performance session.

Re: [ActiveDir] Rights to move an object from one OU to another

2006-06-07 Thread Matheesha Weerasinghe
http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642DisplayLang=en and http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3DisplayLang=en On 6/8/06, Figueroa, Johnny [EMAIL PROTECTED] wrote: What rights does a

Re: [ActiveDir] Logged in user

2006-06-06 Thread Matheesha Weerasinghe
psloggedon from sysinternals.com On 6/6/06, Harding, Devon [EMAIL PROTECTED] wrote: Is there a Command line util., to remotely tell what user is logged into a PC? -Devon --- This message (including any attachments)

Re: [ActiveDir] DSID-020A06F3 error from French platform AD

2006-06-05 Thread Matheesha Weerasinghe
Whats the version of ldp? Are there any issues using ADAM sp1's ldp from the english version? I assume other ldap cliients are fine? other than this ldp? Wire traces show anything weird?Just my $0.02M@ On 6/5/06, Gil Kirkpatrick [EMAIL PROTECTED] wrote: I'm receiving this error on subtree

Re: [ActiveDir] DSID-020A06F3 error from French platform AD

2006-06-05 Thread Matheesha Weerasinghe
Man I regret trying to even answer that. I didnt look at the name of the poster for crying out loud! Note to self a fool is not known until he opens his mouth /Note to self Sorry Gil. Wont happen again. M@ On 6/5/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Start your own thread :) Joe

Re: [ActiveDir] DHCP migration(OT)

2006-05-16 Thread Matheesha Weerasinghe
look into netsh. might be of use. On 5/12/06, Tom Kern [EMAIL PROTECTED] wrote: I want to migrate DHCP(scopes,scope options,leases) from one win2k box to another. My issue is, the target server is running DHCP with scopes,etc already configured. Is there anyway to migrate the source DHCP

Re: [ActiveDir] DHCP migration(OT)

2006-05-16 Thread Matheesha Weerasinghe
the scope and scope options? Thanks On 5/16/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: look into netsh. might be of use. On 5/12/06, Tom Kern [EMAIL PROTECTED] wrote: I want to migrate DHCP(scopes,scope options,leases) from one win2k box to another. My issue is, the target

Re: [ActiveDir] [OT] GMAIL encoding

2006-05-10 Thread Matheesha Weerasinghe
Thanks for that. My question is why doesnt the mail sent by Al viewable by other gmail users? I was also seen blank emails and I use gmail too. M@ On 5/10/06, AdamT [EMAIL PROTECTED] wrote: On 10/05/06, Lou Vega [EMAIL PROTECTED] wrote: I don't know exactly where it is off the top of my head

Re: Re: [ActiveDir] ADAM Management Tool REQs and Desires...... WAS: Internet Authentication Concepts: Pointers?

2006-05-03 Thread Matheesha Weerasinghe
personally, I'd like a command line tool thats interactive like ntdsutil or nslookup. I'd be able to use this to browse the ADAM instance from a command line. Have a prompt which allows me to navigate the hierachy. Execute commands such as create/delete objecttype etc... M@ On 4/28/06, Stewart,

Re: [ActiveDir] GC Promotion

2006-04-28 Thread Matheesha Weerasinghe
I've got a parent-child domain setup here and I have child domain GCs which repls the parent domain NC from another child domain NC. Now I dont know if its possible to make a GC using a DC of the other domain thats not a GC. In a hypothetical setup where all sites were not fully routed this could

Re: [ActiveDir] Service Account Logging/Tracking

2006-04-22 Thread Matheesha Weerasinghe
eventcombmt is OK but logparser is better as it can parse saved logs. Eventcombmt is for active logs only. M@On 4/22/06, mike kline [EMAIL PROTECTED] wrote:You have to turn on auditing in order to track logon events. Once you turn auditing on you can then search your security event logs for that

Re: [ActiveDir] Service Account Logging/Tracking

2006-04-22 Thread Matheesha Weerasinghe
My bad. Just saw the option to check saved logs too . SorryM@On 4/22/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote:eventcombmt is OK but logparser is better as it can parse saved logs. Eventcombmt is for active logs only. M@On 4/22/06, mike kline [EMAIL PROTECTED] wrote:You have to turn

[ActiveDir] stupid ldap queries

2006-04-18 Thread Matheesha Weerasinghe
All Could someone please explain how Non-indexed queries (e.g. objectClass=user) fall in this category? I saw this mentioned in some slides by Gil and couldnt quite understand what he meant. Isn't objectclass indexed as part of the partial attribute set? Thanks M@ List info :

Re: [ActiveDir] stupid ldap queries

2006-04-18 Thread Matheesha Weerasinghe
: ((objectCategory=person)(objectClass=user)) Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Tuesday, April 18, 2006 1:00 PM To: ActiveDir

Re: [ActiveDir] stupid ldap queries

2006-04-18 Thread Matheesha Weerasinghe
sorry that was meant to be adfind -schema -f (objectclass=attributeschema)(ismemberofpartialattributeset=T RUE) ldapdisplayname -list On 4/18/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: Thanks for the reply. In that case why does adfind -schema -f (objectclass=attributeschema

Re: [ActiveDir] stupid ldap queries

2006-04-18 Thread Matheesha Weerasinghe
bummer! I meant adfind -schema -f (objectclass=attributeschema)(ismemberofpartialattributeset=TRUE) ldapdisplayname -list On 4/18/06, Matheesha Weerasinghe [EMAIL PROTECTED] wrote: sorry that was meant to be adfind -schema -f (objectclass=attributeschema)(ismemberofpartialattributeset=T RUE

Re: [ActiveDir] stupid ldap queries

2006-04-18 Thread Matheesha Weerasinghe
which says the attribute should be indexed in the database. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matheesha Weerasinghe Sent: Tuesday, April 18, 2006 2:15 PM To: ActiveDir@mail.activedir.org S

Re: [ActiveDir] how to report on scheduled jobs?

2006-04-17 Thread Matheesha Weerasinghe
http://www.microsoft.com/technet/scriptcenter/scripts/os/tasks/ostkvb04.mspx On 4/17/06, Thommes, Michael M. [EMAIL PROTECTED] wrote: Is there a script to output scheduled job information? Maybe something I could call in a for loop driven by a list of servers. Ideally, I would like to see

Re: [ActiveDir] Changing a users password

2006-04-12 Thread Matheesha Weerasinghe
How about using lockoutstatus.exe? its no script tool but is sure easy to use. M@ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

  1   2   >