Quick question,
Some time ago, MSFT was beta testing a tool to collect server event logs and
dump them into a SQL database. Is there any updated information?
Thanks,
Todd
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://labmice.techtarget.com/windows2000/Clustering/admin.htm
Has several articles on clustering.
http://labmice.techtarget.com/windows2000/Clustering/troubleshoot.htm
This section covers troubleshooting.
Also the Cluster.exe is a good place to look as well.
Toddler (Newbee to clustering!)
a corporate environment. Thanks
again.
steve
- Original Message -
From: Myrick, Todd (NIH/CIT) [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Monday, December 27, 2004 7:15 AM
Subject: RE: [ActiveDir] AD and ISP deployment
MCIS was MS's platform for hosting Exchange and Web
http://www.answertool.com/
;
Toddler
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
know if the 3rd part tools are
supported in the virtual environment?
-- nme
-Original Message-
From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Monday, December 20, 2004 3:34 AM
To: ActiveDir@mail.activedir.org
Subject: RE: Exchange in VM (was RE: [ActiveDir] Running DCs
In AD Users and Computers, under View Filter, you have the option to filter
the number of responses by the object picker in both AD tools. In windows
2000 does the NTFS security have that same ability? If so where do you set
it?
Thanks,
Todd
List info : http://www.activedir.org/mail_list.htm
Nltest from the support tools is also good at listing the DC's.
Nltest /dclist:domain
You can also do a NSLOOKUP on the domains A record to get IP's.
Todd
-Original Message-
From: Dan Boghici [mailto:[EMAIL PROTECTED]
Sent: Sunday, December 26, 2004 9:20 AM
To:
I would just follow the instructions
listed in the KBs. You might have gotten the error when the domain
controller was serviced packed.
Todd Myrick
From: Noah Eiger
[mailto:[EMAIL PROTECTED]
Sent: Monday, December 27, 2004
1:55 AM
To: ActiveDir@mail.activedir.org
Subject:
MCIS was MS's platform for hosting Exchange and Web, but they have since
retired that initiative.
I would start here in your search. I would also look at the AD planning
site.
http://www.microsoft.com/serviceproviders/
What objectives are you trying to accomplish?
Todd Myrick
How many day's are they off. There is a known issue with accounts migrated
from Windows NT to Windows 2000. NT 4 didn't handle the Daylight savings
time the same as 2K and 2K3.
Todd
-Original Message-
From: Rogers, James [mailto:[EMAIL PROTECTED]
Sent: Monday, December 27, 2004 11:04
Have you tried performance monitor and alerts?
You can create a script that runs when your threshold is met to email you,
etc.
You might want a CLI tool to actually send the email.
Todd
-Original Message-
From: rubix cube [mailto:[EMAIL PROTECTED]
Sent: Monday, December 27, 2004
Not sure if you are aware of it or not but there is a list dedicated to
CITRIX and Windows TS Issues. http://www.thin.net It is pretty active, and
I am sure there has to be someone who has had your pain.
Here are a few KB's to be aware of that point to Well Known KBs about TS
One other point to be made, a lot of the third-party tools for migration
have this issue solved and automated.
Not that this would help you now, but you might review their websites and
review how they approach migrations to get an idea of what you might run
into in the future.
I am familiar with
Man this sucks, I didn't know this White Paper existed. I have been working
on documenting AD on VM's for both VS2005 and VMware ESX.
You might be experiencing the fragmentation due to using the feature that
dynamically expands the volume as it uses disk space. You might try just
mapping raw
While we are at it,
I will audit your changes personally for $200,000.00 a year.. personally.
No software to buy or upgrade. I just need two bathroom breaks a day, 1 30
minute lunch, and 8 hours of sleep (6 if you really are pushing.)
;
Happy Holiday's
Toddler
-Original Message-
: 12/7/2004 8:09 PM
Subject: Re: [ActiveDir] Got an honorable Mention...
Myrick, Todd (NIH/CIT) wrote:
http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite
http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite
I would have won at least an IPOD if I could
http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite
I would have won at least an IPOD if I
could have figured out Lab 2. I think that Lab was bugged though.
Todd
Sorry All,
I was sending this message to a friend on
the list, and I used my inbox to send, so it went out to the list instead.
My apologizes.
Todd
From: Myrick, Todd
(NIH/CIT)
Sent: Thursday, December 02, 2004
9:14 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Got
Without knowing what service you are trying to fail, I think the best thing
to do is kill the process, or try setting the password on the account to
something incorrect.
Here is a good source I found that identified many different ways to
simulate failures.
against the Canadians since the next DEC is
scheduled for Vancouver B.C.
Dan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Tuesday, November 30, 2004 4:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] IT PrOlympics
Depends on the size of your forest and how many domains; I am partial to
Directory Analyzer for monitoring and alerting for forest with multiple
domains. They have a stand alone monitor that is web enabled, or they can
integrate with MOM and HP Openview.
HP Openview has a set of AD tools.
You
if I won so I didn't
bother figuring it was just a bunch of multiple choice questions. Too bad - the
labs would've been fun.
--Brian Desmond
[EMAIL PROTECTED]
Payton on the web!
www.wpcp.org
v - 773.534.0034
x135
f - 773.534.8101
From: Myrick,
Todd (NIH/CIT)
Sent: Mon
Well maybe at the Next DEC Gil will have another AD Set of AD challenges for
the Americans verses the Europeans.
What do you think Gil?
Toddler
-Original Message-
From: Ulf B. Simon-Weidner [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 30, 2004 5:05 AM
To: [EMAIL PROTECTED]
How about this take.
1. Network service used for identifying, provisioning, securing, and
presenting network resources. (Users, Groups, Computers, Printers, Shares,
Contacts, Physical Networks, and Subnets)
2. Platform for implementing policy based management of Microsoft Windows
2000 or
Greetings,
So who here took the Windows IT Pro challenge? What did you all think? The
challenge ended yesterday. So I figure it is a safe topic to talk about
now.
My impressions are as follows.
Overall I had a good time taking the challenge. I think the overall concept
is very good, and I
1265 Errors can happen for a variety of reasons. How about sending the
results of a DCDIAG, NETDIAG, REPADMIN /SHOWREPS from each machine.
You might also look at trying some of the newer tools made available this
month. NETPRO's Directory Troubleshooter is really slick, and also Quest's
new AD
Edwin,
It is not recommended to store user
profiles on DFS volumes. The reason is because there could be a
replication issue that could corrupt the volume. Here are two good
articles that cover profiles. The last one has a best practice guide.
You want to use Robocopy to copy the
profiles to a DFS Share, or between the two DC and the file server?
Todd
From: Edwin
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 24, 2004
8:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Roaming
Profiles and DFS
Than
We had a similar situation in my organization where we when the user presses
Control+Alt+Del They get the GPO that sets the Legal Notice, but we also
needed the notice to pop up after the user logged in. Our solution was to
use the GPO, plus a small C program that created a window with the text
I got the tool,
Pretty slick, takes some getting used to,
and I havent done any live modifications yet, but could be quite useful
for bulk updates, etc.
Todd
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 02, 2004
2:02 PM
To: [EMAIL PROTECTED]
Title: [ActiveDir] Remote DSL link
We started seeing strange problems with our
Directory replication recently when bringing up new Windows 2003 DC in our Hub
and Spoke Site design. Our network has a lot of firewalls, domains, and business
units, and we have managed to coordinate most of
topology, the DCs within
those sites and which of those DCs are or were running 2003's DNS service would
be most useful?
--
Dean Wells
MSEtechnology
* Email: [EMAIL PROTECTED]
http://msetechnology.com
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
Check these two sources and see if they answer your questions.
http://www.chicagotech.net/neterrors.htm
http://hidev.com/Technical/neterrors.asp
Todd Myrick
-Original Message-
From: Jacob Walker [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 4:34 PM
To: [EMAIL PROTECTED]
You forgot, comes with rubber chicken to beat Admins who change FSMO roles
without telling AD Admin...
Hehe
Todd
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 27, 2004 2:27 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] What attribute
Title: [ActiveDir] Trusting Domain SIDs
Here are some sources to reference in your
design process.
http://www.microsoft.com/technet/security/topics/identity/idmanage/P1Plat_4.mspx
Couple of points to Raise,
To support this infrastructure you
will require DNS and Additional
Title: Re: Exchange OT:
I agree with Joe on this one. I attended
a meeting with Microsoft in regards to Exchange and AD Disaster recovery. They
had EMC, and a Business continuity planning company that specialized in developing
plans for crisis. This ½ day meeting educated me a lot on
Extension to hook into the existing
admin tools, or write an addin that extended the right-click menus etc. In
either case it's a fair bit of work.
Glenn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, 30 September
Greetings,
We have a requirement for encoding an entry on our AD groups with an ID code
in an attribute. I have been asked to look into ways to best accomplish the
requirement.
I have reviewed the AD schema, and there doesn't appear to be an attribute
dedicated to this function already. (We
] Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Wednesday, September 29, 2004 11:16 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Group ID Code Attribute
Greetings,
We have a requirement for encoding an entry on our AD groups with an ID
code
in an attribute. I have been asked to look into ways
Is it possible to configure a GC to
perform GC functions, but to disable the ability to process authentication
request? I was asked this question and figured this would be an interesting
topic here. I know it is possible to mess with the SRV records to lower the
priority of the server,
. Day
Active Directory Core Team
Office of the Chief Information Officer
National Park Service
(202) 354-1464 (direct)
(202) 371-1549 (fax)
[EMAIL PROTECTED]
|-+--
| | Myrick, Todd |
| | (NIH/CIT
://msetechnology.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, September 09, 2004 2:46 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Stopping a GC from doing Authentications
There just isn't
-1464 (direct)
(202) 371-1549 (fax)
[EMAIL PROTECTED]
|-+--
| | Myrick, Todd |
| | (NIH/CIT) |
| | [EMAIL PROTECTED] |
| | Sent
I have a Question about adding people to a Universal Group.
I have some Admins that own a Universal Security Group, and have added users
from a child domain to the group. When they look at the Universal Group
members, they see the user is a member of the group. But when they look at
the users
resides in the
same forest and you are connected to a global catalog server in the
local domain.
A hotfix is available.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Monday, August 23, 2004 8:22 AM
To: [EMAIL PROTECTED]
Subject
http://www.sysadminday.com/
Just a FYI.
Todd
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Title: RE: [ActiveDir] DeForestation
You might check with Quest. They have an
Exchange Migration tool that is supposed to be able to sync free/busy info. You
have to go ORG to ORG I think though.
Todd
From: Kern, Tom
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 13, 2004
Where is STEWART KWAN when you need him to
chime in about this. Trying to see if the key word notification system
works.
Joe, I am running one more scan, I will
send you the results and we can discuss it more. I will share with the rest
once I am complete my analysis.
Thanks,
Todd
Joe,
Thanks a Bunch!
Todd
From: joe
[mailto:[EMAIL PROTECTED]
Sent: Sunday, July 11, 2004 5:14
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Another new
joeware tool - GCChk
Ok, those of you who have been following Todd's recent
adventures may have come to the
will chime in or someone else will say something though I am
surprised I see no responses to this post and it was sent a couple of weeks
ago...
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, June 24, 2004 9:58 AM
]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, June 24, 2004 9:58 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 2003 DC Promo Question
Greetings,
I have a Windows 2000 forest that has been Forest Prepped and had the root
domain of the forest domain prepped as well
Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, June 24, 2004 9:58 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 2003 DC Promo Question
Greetings,
I have a Windows 2000 forest that has been Forest Prepped and had the root
domain of the forest domain prepped as well as another domain tree root
domain
PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Thursday, June 24, 2004 9:58 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 2003 DC Promo Question
Greetings,
I have a Windows 2000 forest that has been Forest Prepped and had the root
domain of the forest domain prepped as well as another domain
I have a quick question. In Windows 2000. If AD-Integrated storage is used
for DNS zone data. Is the data indexed in GC's or is it just the zone info?
I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS. When it came to looking at the data
Thanks for the second set of eyes.
I have an Exchange guy that is trying to argue against the inclusion of AD
Integrated DNS zones, because in his POV the number of changes to DNS
records would incur would cause the GC's replicate like crazy.
I haven't heard anyone really complain to loudly
Man after reading my response, I am starting to thing I regressed in my
ability to communicate clearly.
I apologize for all the bad grammar.
Todd
-Original Message-
From: Myrick, Todd (NIH/CIT)
Sent: Monday, June 28, 2004 2:28 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
Greetings,
I have a Windows 2000 forest that has been Forest Prepped and had the root
domain of the forest domain prepped as well as another domain tree root
domain prepped.
I plan to follow the recommendations outlined in the article below in order
to upgrade to 2003. My plan is to transfer
Title: DNS Issues - ipconfig /flushdns
I just want to verify a behavior of
DDNS registration.
AD integrated, and Primary Zones will
register dynamic registrations directly when requested, with AD integrated DDNS
offering the ability to require that the registration be secured.
is ntMixedDomain on the NC head root of each domain
DC=Mydomain, DC=ForestRootDom, DC=tld object.
Value of 0=Native level domain
Value of 1=Mixed level domain
al
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Wednesday, June 16
Does anyone have this information handy?
I am researching it now...
Thanks,
Todd
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
We have seen a number of SRV record
registrations for hosts for LDAP that arent DCs. Has anyone
experienced this before?
Thanks,
Todd
Greetings all,
I have a quick question about indexing attributes in GC's. If you select an
attribute to be indexed in a GC. Then decide later to not want the
attribute indexed any longer, so you deselect the attribute for indexing in
a GC. Will the GC's automatically remove the attribute, or do
Sorry, I meant to say replicated to the GC... not Indexing
-Original Message-
From: Myrick, Todd (NIH/CIT)
Sent: Wednesday, June 02, 2004 12:35 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Indexing attributes in GC's
Greetings all,
I have a quick question about indexing attributes
;EN-US;232517
--Doug
-Original Message-
Wrom: YOQKEDOTWFAOBUZXUWLSZLKBRNVWWCUFPE
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Wednesday, June 02, 2004 9:35 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Indexing attributes in GC's
Greetings all,
I have a quick
GC will not do a full sync in
either case.)
--Doug
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Wednesday, June 02, 2004 10:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Indexing attributes in GC's
Thanks Guys,
I
I think this thread has been on here before, but I just wanted to verify it
once more.
In order to use LDAPS on DC's Microsoft Documentation says a CA needs to be
installed on the DC.
Does anyone have any information on other methods to do LDAPS without the CA
requirement?
Thanks,
Todd
List
I think most people know my position on Aelita/Quest (Man it is funny to say
that in the same sentence).
We are currently using EMM and I believe it has done everything promised
without issue. I highly recommend getting On-site support if your migration
is large.
Also ARM (ERD) for AD and
in the forest.
Todd
From: Myrick, Todd
(NIH/CIT)
Sent: Thursday, May 13, 2004 1:22
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Orphaned
GC Entry... How do I clean it up?
Okay, I will double check
Todd
From: joe
[mailto:[EMAIL PROTECTED]
Sent: Thursday, May 13, 2004
: Myrick,
Todd (NIH/CIT)
Sent: Mon 5/17/2004 10:52 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Orphaned
GC Entry... How do I clean it up?
I finally had Success in removing Read Only Lingering
Object after using the script outlined in KB 314282 verses LDP.
http://support.microsoft.com/?id
it something like
alldc domain.com adfind -h
server -default -f \name=idname\ -dn
joe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)
Sent: Wednesday, May 12, 2004 7:37
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Orphaned
GC Entry... How do I
) the displayName. You can easily have an object with the
displayname of Myrick, Todd (NIH/CIT) yet have the username be
something like TODDISCOOL.
I just wanted to be really sure before
sending you down the lingering objects direction because that means other bad
things like Al says, something
Lets say I my organization has a Class B network.
129.169.0.0/16
So I create a subnet object for 129.169.0.0/16 and associate it site A.
Then my organization starts to subnet the 129.169 network, and I now have a
network that needs its own site. So I create a subnet object 129.169.1.0/24
and
Greetings all, we are seeing an entry appear in our GCs
that is not in the original location. It appears after it was deleted, it did
not replicate out the deleted item, and now us causing ADC issues.
http://support.microsoft.com/default.aspx?scid=kb;en-us;293474
The recommended MS
to be there, but I'm not sure I
follow completely.
From: Myrick,
Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 12, 2004 3:09
PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Orphaned GC
Entry... How do I clean it up?
Greetings all, we are seeing an entry appear in our GC's
that should
be gone anyway.
Al
From: Myrick,
Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 12, 2004 4:12
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Orphaned
GC Entry... How do I clean it up?
There appears to be two entries for User
in the AD Global Catalogues. The one
or so; this is the tail end http://www.mail-archive.com/[EMAIL PROTECTED]/msg13088.htmland
you can do alternate searches to get the full discussion. Good luck...
Hunter
From: Myrick,
Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 12, 2004 2:12
PM
To: [EMAIL
I am searching for an article that identifies the behavior that
of how authentication DCs are selected based on AD sites.
Here is why.
Our default site cost for all our sites in the hub and spoke
architecture is 10.
We had a situation where we have a BDC Domain H that
is in Mixed
g.com/Article/ArticleID/37935/37935.html
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick,
Todd (NIH/CIT)
Sent: Friday, May 07, 2004 6:51 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Need to
confirm a behavior in AD Sites as it pertains to authenti cation.
I
Does anyone have a ADM script or know how to set the From Event Logs from
allowing Guest access?
Directory Service Event Log
File Replication Event Log
DNS Event Logs
Thanks,
Todd
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List
Message-
From: [EMAIL PROTECTED] on behalf of Myrick, Todd
(NIH/CIT)
Sent: Fri 07/05/2004 14:50
To: [EMAIL PROTECTED]
Cc:
Subject: [ActiveDir] Need to confirm a behavior in AD Sites as it
pertains to authenti cation.
I am
whether a
client computer is gaining access to a domain controller over a slow link to
apply Group Policy or to download a roaming user profile.
Todd Myrick
From: Myrick, Todd (NIH/CIT)
Sent: Tuesday, April 06, 2004 9:42 AM
To: [EMAIL PROTECTED]
Subject
I highly recommend Dean as well..
Todd
From: joe
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 06, 2004 2:26
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD
Consultants
http://www.msetechnology.com/
This is where Dean Wells works, they are
out of Florida
but go
.
This might help
http://support.microsoft.com/default.aspx?scid=kb;en-us;832017
Santhosh
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)
Sent: Monday, April 05, 2004 9:26
AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Joining
computer to a domain
http://www.microsoft.com/downloads/details.aspx?FamilyID=7dfeb015-6043-47db-8238-dc7af89c93f1DisplayLang=en
Microsoft just published a Kerberos Troubleshooting White
Paper It is pretty good.
Todd
From: Eric Fleischman
[mailto:[EMAIL PROTECTED]
Sent: Saturday, April 03,
Title: Message
Greetings all...
I just had someone stop by my office asking what ports need to be open
to allow a machine to join a domain. It appears these security experts
feel that they need to limit the communication both inbound and
outbound. (Dont get me started on the outbound
Title: Message
You mean like MIIS
Marchitecture.. Strikes
again.
Todd
From: Rick Kingslan
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 17, 2004
12:03 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Microsoft
Patch
Ahhh geez. Deal with it, Smart
Ass. They like
Title: OT: Exchange 5.5 SMTP Log Parser
Hey gang,
I am doing some quick research about the
effects of allowing Windows 200x and clients that support dynamic updates
effect on wireless networks, and VPNs.
What seems to be happening now is that we
have host that are enabled for
Some of the articles I have seen related
to your issue point to possible Virus corruption. Have you checked that?
Todd
From: Brad Martin
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 10, 2004
11:50 AM
To: Active Directory Mailing List
Subject: [ActiveDir] ADPREP
problems
Good point Lynden,
Must run the ADPREP /Forestprep first,
Then run the ADPREP /Domainprep on each
Domain.
Todd
From: Philadelphia,
Lynden - Revios Toronto [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 10, 2004
1:40 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir]
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADPREP
problems
Isnt it
SETUP.EXE /forestprep
SETUP.EXE /domainprep
SETUP.EXE /adprep
-Original
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On
Behalf Of Myrick, Todd (NIH/CIT)
Sent: Wednesday, March 10, 2004
1:58 PM
If you have firewalls protecting networks, I recommend isolating them as
sites, and setting up preferred bridgehead servers and site link bridges.
Todd
-Original Message-
From: Rick Kingslan [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 06, 2004 4:03 PM
To: [EMAIL PROTECTED]
Subject:
Thanks Joe,
Below are the pre SP1 AD hotfixes we are testing with our deployment. These
are only the ones for DC's... we also apply about 15 pre SP1 hotfixes that
deal with security issues as well.
E2K3 and 2K GC's Upgraded to 2K3GC's
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Monday, March 08, 2004 9:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] [Lessons Learned]: Schema Mismatch promoting firs t
K3 DC to GC in production forest... Several new experiences.
Thanks
SP 4 is pretty stable; there is one post SP4 hot fixes that should be
applied to AD DC's specifically.(KB828297) (Updates LSASS and components
related to it.
http://itc.uncc.edu/steve/weblog/archives/001757.html
Here is a weblog post that is a pretty good synthesis.
KB Article 828297:
Title: Message
I have a situation that just arose here
dealing with a third-party meta-directory product and access to our AD.
It appears that the connection agent needs the ability to read our AD deleted
item container. The vendor not being experienced with AD delegation doesnt
know if
Have you tried standing up a server in the DMZ next to the Schema Master
Server (IE. New server in the DMZ). Then transfer the FSMO role to new
server.
Just an Idea,
Todd
-Original Message-
From: Frank Buechler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 04, 2004 12:46 PM
To:
Greetings all, I am looking for the best way to update the default ADM
templates to support XP and 2003 servers.
According to all the documentation I can find and some of my own testing, I
have been able to update existing GPO's to use the newer XP ADM templates
without a problem. I am concern
Title: Message
Does the NT4
machine have the DS Client installed?
Todd
-Original Message-From: Stuart, Cory G.
[mailto:[EMAIL PROTECTED] Sent: Friday, January 30, 2004 2:44
PMTo: [EMAIL PROTECTED]Subject: [ActiveDir]
Have any of you had success joining a Windows NT 4
Yes and I also made sure that SMB signing was
enabled.
Cory
---Cory G.
StuartNetwork AdministratorNuclear Engineering DivisionArgonne
National Laboratory---
From: Myrick, Todd (NIH/CIT)
[mailto:[EMAIL
Restriction Policy) that is
not supported in Win2K, if you edit GPOs that have been upgraded on
Win2K, you won't see these policy areas. Not useful.
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Friday, January 30, 2004 11
1 - 100 of 258 matches
Mail list logo
