RE: [ActiveDir] Active Directory Tools on XP Clients

2003-06-12 Thread Rick Kingslan
Title: Message Cool - no worries. Have you upgraded to Hyena 5.0? That's working like a charm for me Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-12 Thread Rick Kingslan
Title: Message Todd, Are you aware that NetPro has now introduced what I would call a Management Pack for AD for MOM? I haven't had time to look at it in depth yet, but am looking forward to it possibly this weekend. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-12 Thread Rick Kingslan
. All I see here is the Global Mobility. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jan WilsonSent: Friday, June 13, 2003 12:09 AMTo

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2 000 Domain

2003-06-12 Thread Rick Kingslan
for that, but, well... Damn. Nevermind. ;P Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of deji Sent: Thursday

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-11 Thread Rick Kingslan
Title: Message Add to that, if you would - NetPro (Gil Kirkpatrick and DEC fame..) also makes a Management pack for MOM. Hopefully, I can tell you more on it shortly.. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com

RE: [ActiveDir] Active Directory Tools on XP Clients

2003-06-11 Thread Rick Kingslan
in a pure Windows 2000 environment, or my mixed 2k /2k3 environment at home. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raymond

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-11 Thread Rick Kingslan
Title: Message You're right - we've never met ;-) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrara, Sandra SYNETICS (PKI)Sent

RE: [ActiveDir] Possibly OT - DFS vs 3rd party DR

2003-06-11 Thread Rick Kingslan
with Windows Server 2003 might justify itself with Volume Shadow Services. I've been working closely with VSS and primarily, Volume Shadow Copy, and IMHO, it Rocks! Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
Title: Message Mr. Richards. welcome to the party. ;-) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of JoeSent: Wednesday, June 11

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
CTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick KingslanSent: Wednesday, June 11, 2003 10:28 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Installing Windows 2003 servers to Windows 2000 Domain Mr. Richards. welcome to the party. ;-)

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
results (successful or not - many time successful results tell me a lot) please run them as follows: dcdiag /fix netdiag /fix dcdiag /v /f:dcdiag.log netdiag /debug /l (this will automatically create a netdiag.log) Good luck - we'll be waiting to here what you have found. Rick Kingslan MCSE

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
! Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Diane AyersSent: Tuesday, June 10, 2003 10:31 PMTo: [EMAIL PROTECTED] Not being there, it hard

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
you want to. Regardless - I'm back to reviewing Robbie Allen's new book. Just a few days left on the review cycle and then it's copy edit time. :-D Take care! Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] OU and GPO Design Comments

2003-06-09 Thread Rick Kingslan
by group. You will find that this can be very successful, and to manage it I would recommend grabbing a copy of the Group Policy Management Console - it will make things MUCH easier! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-08 Thread Rick Kingslan
, NTFRS? Everything look good? Anything out of the ordinary in the System or App logs? Let us know what you find out! Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-08 Thread Rick Kingslan
See comments inline below. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of steveSent: Sunday, June 08, 2003 6:21 PMTo: [EMAIL PROTECTED

RE: [ActiveDir] Mirror Sets

2003-06-07 Thread Rick Kingslan
of the PRIMARY DRIVE, the boot.ini would need to be pointed to disk 1. I suspect that this is what was being referenced - but I haven't set up a software mirror in years. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp

RE: [ActiveDir] WinPE and RIS

2003-06-06 Thread Rick Kingslan
Title: Message The one that I have from my MCS folks is CLI only - no GUI. FWIW. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] sidhistory of well known groups

2003-06-06 Thread Rick Kingslan
desktops, 25k users. Lots of groups. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner Sent: Friday, June 06

RE: [ActiveDir] sidhistory of well known groups

2003-06-06 Thread Rick Kingslan
Correct - and I support what is being said by MS - that it will only migrate to the exact SID on the receiving end. However, maybe someone else can shed some light - I'm not sure what the setting is to allow it in ADMT at the moment. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active

RE: [ActiveDir] Replication Problems...

2003-06-05 Thread Rick Kingslan
I do think you should have your network engineer fired, then shot, hung, and sent to the Russian Front! ROTFLMAO! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL

RE: [ActiveDir] Single sign-on

2003-06-05 Thread Rick Kingslan
ADAM is intended AFAIK, to be free. MMS 3.0 Standard is free, too - but it will only synch MS data. E.g Forest GAL to Forest GAL. If you want to bring other directories into the mix (iPlanet, NDS, etc) you will need MS 3.0 Enterprise. That one is gonna cost ya. ;-) Rick Kingslan MCSE, MCSA

RE: [ActiveDir] Adding new objects to AD

2003-06-04 Thread Rick Kingslan
Marcus, Right you are. The employeeid field does exist - it's just not tied to a class that would allow it to be effectivley used. Here's an article that will shed some light, and show how it can be used: http://www.ntfaq.com/Articles/Index.cfm?ArticleID=21588 Good catch! Rick Kingslan MCSE

RE: [ActiveDir] WinPE and RIS

2003-06-02 Thread Rick Kingslan
avenue. IOW - if you can get your hands on WinPE - do so. It's hot, flexible, and the real wave of what will be the next step in deployments. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL

RE: [ActiveDir] w2k / nt4 trust -possible fix

2003-06-02 Thread Rick Kingslan
that there are things that are too strong and too weak for your environment - then adjust accordingly. Ain't security fun? ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From

RE: [ActiveDir] delegation of root domain admin

2003-05-29 Thread Rick Kingslan
won't assume. Make your own decision, Graham. But, Roger does have a point. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

Re: [ActiveDir] OT:other vendor's stuff

2003-05-28 Thread Rick Kingslan
a great service. But, they aren't the authority on other people's products. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] AD Backup - death of the off-topic spinoff

2003-05-28 Thread Rick Kingslan
header - which I should not have replied at all) so if he replies, let's let this one die. I'll take it off line if such things dictate. Thanks! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original

RE: [ActiveDir] how can i add the value of the SchemIDGUID when I create a schemd object?

2003-05-28 Thread Rick Kingslan
manipulation with C++? ;-) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of zhaohuSent: Wednesday, May 28, 2003 2:29 AMTo: [EMAIL PROTECTED] this is some

RE: [ActiveDir] AD Backup

2003-05-27 Thread Rick Kingslan
But, David - why not : http://www.smallwonders.com/activedirsolutions.htm Or, as suggested here in the past, do you get kickbacks from Sunbelt?? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] DC Problem

2003-04-06 Thread Rick Kingslan
. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Sunday, April 06, 2003 9:40 PM To: [EMAIL

RE: [ActiveDir] Can't access Default Domain Controller Security policy

2003-04-05 Thread Rick Kingslan
to another DC - in this case, your DC with the PDC-E role missing the GP. See the GPMC help, if you can get your hands on the tool. It should be avaiable at the same time that Win2k3 is released, but works just fine on Windows 2000. Hope this all helps. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP

RE: [ActiveDir] Removing sites and servers from AD

2003-04-01 Thread Rick Kingslan
be determining if the USN for DC A is still what it has recorded. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike NewellSent: Tuesday, April

RE: [ActiveDir] downlevel client authentication

2003-04-01 Thread Rick Kingslan
. Fortunately, this isn't necessary, as authentication is possible at any DC. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-03-31 Thread Rick Kingslan
been done - it's scrubbed and put in place as the next 'clean, pristine' server for the next mailbox move. The porcess continues until you're completed - leaving you with one extra box (usually to be the new box in your Exchange front or back end). Good luck! Rick Kingslan MCSE, MCSA, MCT

RE: [ActiveDir] GPO effect on Admin

2003-03-26 Thread Rick Kingslan
if there is a way to affect user settings, but this is typicaly used to apply user settings to a computer startup, not computer settings to user logon - by then it's much too late. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com

RE: [ActiveDir] changing the Pre-Windows 2000 computer name

2003-03-25 Thread Rick Kingslan
-Windows 2000 name (or, the NetBIOS name) right-click on My Computer - Properties - Network Identification - Properties The NetBIOS name is the box at the top with your current computer name. Change at will, click OK a couple of times, restart. That should do it! Rick Kingslan MCSE, MCSA

RE: [ActiveDir] changing the Pre-Windows 2000 computer name

2003-03-25 Thread Rick Kingslan
Title: Message Richard, Could you expand? Seems to be using a sledge hammer to kill a gnat. What might I be missing? Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] What Services/Server's can be combined with Activ e Directory.

2003-03-25 Thread Rick Kingslan
to coexist, I'd expect that to be the much more likely scenario. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Monday, March 24, 2003 10:34 PM

RE: [ActiveDir] What Services/Server's can be combined with Activ e Directory.

2003-03-25 Thread Rick Kingslan
-- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2003 9:20 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] What Services/Server's can be combined with Activ e Directory

RE: [ActiveDir] Admt 2.0 roaming profile migration

2003-03-24 Thread Rick Kingslan
of the profile, or manually join it to the new domain without migrating it. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] changing the Pre-Windows 2000 computer name

2003-03-24 Thread Rick Kingslan
). As to changing the NetBIOS name - that's another story all together. I've never seen that done, and would be interested in seeing detail from someone who has successfully done it. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp

RE: [ActiveDir] Different password policy

2003-03-24 Thread Rick Kingslan
domain for that new class of user. Hope this helps Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ole Thomsen Sent

RE: [ActiveDir] changing the Pre-Windows 2000 computer name

2003-03-24 Thread Rick Kingslan
Pardons to all! I re-read the originalmessage from Mark, and I may have read WAAAY too much into this. If you're only looking to change the name of a member server, it's a bit easier - DCs however, are pretty touch to change. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] Different password policy

2003-03-24 Thread Rick Kingslan
to guarantee true security autonomy, the forest is the model to use. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Missy

RE: [ActiveDir] What Services/Server's can be combined with Active Directory.

2003-03-24 Thread Rick Kingslan
- true? Good to have you here! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Missy Koslosky Sent: Monday, March 24, 2003

RE: [ActiveDir] OT Password Policy:

2003-03-24 Thread Rick Kingslan
to a sufficient level. And, if they can't get it immediately, they can chip away a little bit at a time until they do in a very quiet and clandestine way. This is why we change passwords frequently - because you just don't know who is using your user's username and password. Rick Kingslan MCSE, MCSA

RE: [ActiveDir] Anybody see Gil's article?

2003-03-18 Thread Rick Kingslan
Title: Message Yep - did see it. It's not too bad ;-) Good job, Gil. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bjelke John

RE: [ActiveDir] Kerberos Vulnerability

2003-03-18 Thread Rick Kingslan
Given the high visibility of ANYTHING Microsoft, they have to review these issues - even though there is likely no connection - other than name Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] Force password length problem

2003-03-18 Thread Rick Kingslan
Domain Contoller policy level. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gasper, RickSent: Tuesday, March 18, 2003 3:25 PMTo: [EMAIL

RE: [ActiveDir] Force password length problem

2003-03-18 Thread Rick Kingslan
was trying to set it at the OU level. Once I set it at the domain level it worked. Thanks for the assist. Rick Gasper Manager of Network Services King's College Wilkes-Barre PA 18711 Phone: 570-208-5845 Fax: 570-208-5989 [EMAIL PROTECTED] -Original Message-From: Rick Kingslan

RE: [ActiveDir] Group Policies Help (Win2k Server)

2003-03-16 Thread Rick Kingslan
. Put the computers in the group and do same. On ocassion, I have seen this fail to affect some users IF they have been using a roaming profile. Deleting the profile from the machine has solved this in those cases. What does GPRESULT show? Does it show the settings are applied? Rick Kingslan

RE: [ActiveDir] ADMT 2.0

2003-03-16 Thread Rick Kingslan
Title: Message Windows Server 2003 RC2 is the current one that is available to general public. That's where it is Can be gotten from Microsoft (small fee) or from any of the Tech-Net or MSDN events coming to an area near you anytime. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] Group Policies Help (Win2k Server)

2003-03-16 Thread Rick Kingslan
Jeremy, If you could find and cite that article, I have about 20k workstations that I have to show it to. GP shouldn't be working on them ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] Group Policies Help (Win2k Server)

2003-03-16 Thread Rick Kingslan
. Me, I'm chalking it up to just living right! ;-) Thanks for the information! Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy

RE: [ActiveDir] DC will not demote....

2003-03-15 Thread Rick Kingslan
there was to implemet our plans for changing that). So, just as an emphasis that your somewhat lesser known method is very accepted in some situations - I've done it, it works, and life is all good in Huntsville with two DCs and two new FPs. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] Native Mode Switch

2003-03-14 Thread Rick Kingslan
Title: Message Nope. Any of them will make it permanent. ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Murawski (Lenox)Sent: Friday, March 14, 2003 7:15 AMTo: [EMAIL PROTECTED] Switching to native

RE: [ActiveDir] AD users question

2003-03-14 Thread Rick Kingslan
to AD. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Balos Sent: Friday, March 14, 2003 10:34 AM To: [EMAIL PROTECTED] I have two domain controllers. One exchange server which

RE: [ActiveDir] back the default valeue of password policy

2003-03-13 Thread Rick Kingslan
Typically, password policy is going to be applied at the Domain level. If you are dealing with a server that is a domain controller or a member of a domain, look at the domain GP level. If it's a standalone system, look to the Local Security policy. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP

RE: [ActiveDir] TACACS support

2003-03-12 Thread Rick Kingslan
of a deal. Actually, it was quite straight forward. Frightening - I know. This is one implementation that really had a minimal impact on our AD, as it worked as advertised - the FIRST time. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone

RE: [ActiveDir] DC can't see the AD Domain

2003-03-11 Thread Rick Kingslan
Title: Message I'd set it up as follows: Primary - Other DC DNS Secondary - Self Tertiary - Your DNS server (as I fully don't understand what these are doing, it might be best handled through forwarding as well) Let Forwarding handle the ISP DNS resolutions. Rick Kingslan MCSE, MCSA

RE: [ActiveDir] DNS replication question

2003-03-10 Thread Rick Kingslan
appropriately on each side of the transfer. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cariglia, DanielSent: Monday, March 10

RE: [ActiveDir] AD DMZ's

2003-03-09 Thread Rick Kingslan
not really addressing the larger problems. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark KelsaySent: Sunday, March 09, 2003 1:33

RE: [ActiveDir] Domain Names and Netbios

2003-03-07 Thread Rick Kingslan
it for the NetBIOS name. However, in your example you would for DNS, as the total namespace is different (root to domain). Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From

RE: [ActiveDir] Remove a Local Security Template

2003-03-07 Thread Rick Kingslan
(basicsv, basicws, basicdc). Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Friday, March 07, 2003 12:50 PMTo

RE: [ActiveDir] AD Design Guidance

2003-03-07 Thread Rick Kingslan
Title: Message They'll start to listen to you once they see you're not half baked Not if they are the arrogant pricks I work with ;-) No way to shut them up. They have upper management absolutely snowed. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate

RE: [ActiveDir] Remove a Local Security Template

2003-03-07 Thread Rick Kingslan
know anything about them. The only way to reverse them is to track your changes with a change control procedure. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Rick Kingslan
about the utilization, as it seems that they have what they need - they aren't griping about speed, apparently. If they were, the line would likely have been provisioned for upgrade. Casey, I think you're fighting a partly political battle, too. :-) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP

RE: [ActiveDir] AD Design Guidance

2003-03-03 Thread Rick Kingslan
line. The only way to truly know how large is to run some baselines and find the highwater mark - then plan well above that for the upgrade. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] AD Design Guidance

2003-03-03 Thread Rick Kingslan
that they are missing (not likely) I'll pop in. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Friese, CaseySent: Monday, March 03, 2003 11:01

RE: [ActiveDir] AD Design Guidance

2003-02-28 Thread Rick Kingslan
be if it is misconfigured. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Robinson Sent: Saturday, March 01

RE: [ActiveDir] AD Design Guidance

2003-02-28 Thread Rick Kingslan
. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Chuck Robinson Sent: Saturday, March 01, 2003 5:28

RE: [ActiveDir] Grant Permissions to Add a Computer to a Domain

2003-02-28 Thread Rick Kingslan
echnol/windows2000pro/deploy/depopt/ris.asp The last third of the article answers the issue. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED

RE: [ActiveDir] Dual Administration of partially migrated NT 4 domains

2003-02-27 Thread Rick Kingslan
and keep plugging along. Hope this helps. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martinez, NefSent: Thursday, February 27

RE: [ActiveDir] Connection Agreement

2003-02-26 Thread Rick Kingslan
/default.aspx?scid=KB;en-us;q253286 Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent

RE: [ActiveDir] Connection Agreement

2003-02-26 Thread Rick Kingslan
Oh, BTW - Your need for High Importance = very Subjective. IOW, doesn't mean it's important or urgent to anyone else. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From

RE: [ActiveDir] Time stamp format in your Active Directory

2003-02-26 Thread Rick Kingslan
me! ;o) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isham, Alan ASent: Wednesday, February 26, 2003 5:19 PMTo: [EMAIL PROTECTED

RE: [ActiveDir] AD Sites and Services Error

2003-02-24 Thread Rick Kingslan
the site, associate subnets and protocols / transports with the site, then move a DC to that site. As to the issues that you're having with MMC - yes - I've seen it often. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp

RE: [ActiveDir] AD Sites and Services Error

2003-02-24 Thread Rick Kingslan
Title: Message Yep - OK - I can understand that then. Can you install AdminPak on a Win2kPro orWinXP, and then do the maint from there? An MMC issue can be very tough to track down, and it sounds like you need to get this done now. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] OT: Cannot send mail to/from e5.5 to/from e2k an d 2way CA

2003-02-24 Thread Rick Kingslan
Title: Message Shout from the peanut gallery, Joe. Active/ Passive is the way to go. And, on the "Geee, I WAS labbing it until the Director said, 'Uhhh, no time to lab - customer wants it now!'" You're living my life, pal. I feel your pain....... Rick Kingslan MCSE, MCSA, MC

RE: [ActiveDir] security templates

2003-02-23 Thread Rick Kingslan
?scid=kb;en-us;243330 Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner Sent: Sunday, February 23

RE: [ActiveDir] SUS?

2003-02-21 Thread Rick Kingslan
everything that I wanted was to write my own. I don't have that kind of time. The problem is a very 'yesterday' thing. But, it's biting me in the butt today. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] Group Policy

2003-02-21 Thread Rick Kingslan
Title: Message More in jest, Craig - not being completely serious - about the flaming, at least! ;o) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] MS changes certifications

2003-02-20 Thread Rick Kingslan
Ahhh! But some of us took 1. For free. ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra

RE: [ActiveDir] SUS?

2003-02-20 Thread Rick Kingslan
John, I can't tell you anything more other than the next version should greatly please and satisfy. Look for it Q4. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From

RE: [ActiveDir] AD Visio Mapping Tool

2003-02-20 Thread Rick Kingslan
David, Maybe you can be a bit more precise as to which of the Sunbelt tools is going to help Gene generate a Visio drawing. I don't see anything there that is going to do what he wants. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone

RE: [ActiveDir] SUS?

2003-02-20 Thread Rick Kingslan
It might be more precise to say SUS 2.0. What is SUS-SA? Software Assurance??? SUS 2.0 I have seen in it's development bits, and it is a huge step forward for the tool to do real patch management. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone

RE: [ActiveDir] Redirect Policy not being updated

2003-02-20 Thread Rick Kingslan
is no longer available, everything gets quite confused. Check this: http://support.microsoft.com/default.aspx?scid=kb;en-us;274789 Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message

RE: [ActiveDir] Empty root domain benefits?

2003-02-19 Thread Rick Kingslan
? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray Sent: Wednesday, February 19, 2003 8:58 AM To: [EMAIL

RE: [ActiveDir] .net RC2

2003-02-19 Thread Rick Kingslan
None that I've experienced to date. I have a few RC@ servers installed with no problems. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] security templates

2003-02-18 Thread Rick Kingslan
for your Security Configuration guidelines, in conjunction with the SecOps guides. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] security templates

2003-02-18 Thread Rick Kingslan
Thanks, Bob! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Free, Bob Sent: Tuesday, February 18, 2003 5

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Rick Kingslan
And, absolutely correct this is. A DC in this group is a known security problem. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OU Limits

2003-02-15 Thread Rick Kingslan
through Administraative templates, etc. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig GainesSent: Friday

[ActiveDir] DSAcls /getsddl /setsddl

2003-02-07 Thread Rick Kingslan
project. Can anyone get them to work, as I can find no documentation on these switches at all. Thanks in advance! (If I don't get an answer over the next two days, I'll ask the folks in Redmond personally next week while I'm there. One way or the other - I'm getting an answer! ;o) ) Rick Kingslan

RE: [ActiveDir] ADMT v2.0

2003-02-01 Thread Rick Kingslan
Allan, Thanks for your assistance in this, and for the link. Unfortunately, Microsoft included ADMT as a sub-directory in the i386 folder and it is not considered an Admin tool, per se. Thanks again! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone

RE: [ActiveDir] ADMT v2.0

2003-01-31 Thread Rick Kingslan
Mark, ADMT itself does not have a facility to do this. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Abbiss

RE: [ActiveDir] ADMT v2.0

2003-01-31 Thread Rick Kingslan
Mode 2. Password key server designated on the source domain - the PDC Emulator is the right choice. It's really the creation of a 'certificate' to allow migration of the password. All of this is clearly documented in the ADMT doc's. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] ADMT v2.0

2003-01-31 Thread Rick Kingslan
Yes - but it's a move, not a migrate. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra, Justin

RE: [ActiveDir] NT SUPPORT extended

2003-01-30 Thread Rick Kingslan
f the same extremes that we accuse Microsoft of. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Barry Pat

<    3   4   5   6   7   8   9   10   11   >