RE: [ActiveDir] KCC

2002-10-07 Thread Rick Kingslan
bridgeheads - typically this would be a more powerful computer as it will now be responsible for more. Good article to review for this can be found here: http://www.mcpmag.com/Features/article.asp?EditorialsID=297 Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] Active Directory Operations Guide

2002-10-07 Thread Rick Kingslan
And, for those of you that have not had the opportunity to meet or listen to Levon - a smarter guy on DNS is hard to come by. A very knowledgeable, intelligent guy. Not a JUST good second choice - Levon is tops at his own game. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] Netlogon Service

2002-10-07 Thread Rick Kingslan
is where the computer objects ARE (i.e. the computer container) Thanks, Yusuf [RTK] You're welcome! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur

RE: [ActiveDir] Start TLS on LDAP (389)

2002-10-04 Thread Rick Kingslan
Frank, Unless you have a particular need to use TLS, I'd forego it and use SSL over LDAP. It's easy to set up and manage. Here's a Q Article to guide you step by step on implementation: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q247078 Rick Kingslan - Microsoft MVP [Windows NT

RE: [ActiveDir] Active Directory Operations Guide

2002-10-03 Thread Rick Kingslan
on your return, yes? ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED

RE: [ActiveDir] KCC Error

2002-09-27 Thread Rick Kingslan
Site Transports. And, in this would be the Default-First-Site-Name (again, great name). If you confirm that you have complete coverage of the link topology (enough for the KCC to create the entire spanning tree) the erros will resolve and the replication topology will be restored. Rick Kingslan

RE: [ActiveDir] Active Desktop Configuration via a Group Policy Object

2002-09-26 Thread Rick Kingslan
this (generically - I'm not going to hunt down the keys to solve this one issue) I can provide guidance on how to create entries to the ADM files to create these 'tatoos' of the registry. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] Two questions

2002-09-26 Thread Rick Kingslan
Title: Message Vladmir, H. Yep - blew that one. samDomainBase is a class - not an attribute. Many pardons, but it's apparently not what I though it was. Thanks for clearing this up. I'll look into it further later. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0

RE: [ActiveDir] Restricting the ability to create Universal Groups

2002-09-26 Thread Rick Kingslan
- in place to control the creation of Universal groups without change control or justification. Maybe someone else will have more light to shed on this. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced

RE: [ActiveDir] Help.....

2002-09-26 Thread Rick Kingslan
domains in a forest. A forest is more synonomous to a Windows NT 4.0 domain when viewed from a autonomous security context) Hope this helps - and gets the discussion going Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] Two questions

2002-09-25 Thread Rick Kingslan
, (the second to the last perm - whatever that is don't remember), and Associate External Account. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from

RE: [ActiveDir] Two questions

2002-09-25 Thread Rick Kingslan
Title: Message blush Thanks! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-From:

RE: [ActiveDir] .Net Server KCC intersite replication

2002-09-25 Thread Rick Kingslan
to the right questions to ask. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL

RE: [ActiveDir] Active Directory Client talking to DC's over Port 445/TCP (SMB)

2002-09-25 Thread Rick Kingslan
Justin, You'll find that clients keep an open channel, if you will, to DCs for SYSVOl, etc. This is done over Port 445. HTH! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology

RE: [ActiveDir] DR of a DC

2002-09-24 Thread Rick Kingslan
Marc, Are you also backing up the system state data when you do this full backup? And, restoring it, for that matter? Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable

RE: [ActiveDir] DR of a DC

2002-09-24 Thread Rick Kingslan
Marc, Are you doing a System State Backup as well (is System State checked)? Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] DR of a DC

2002-09-24 Thread Rick Kingslan
Marc, Are you also backing up the system state data when you do this full backup? Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] Allowed windows applications

2002-09-20 Thread Rick Kingslan
Have you tried removing the RUN command from the Start Menu via Group Policy? Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] setting/restricting permissions on objects in OU tree

2002-09-20 Thread Rick Kingslan
Richard, Sure, I build a fire and you come throw water on it. Damn you! :-) Thanks for this. I do now remember this. Thanks for the correction. I do, somehow, think that we've strayed from the original requstors needs. :-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] setting/restricting permissions on objects in OU tree

2002-09-20 Thread Rick Kingslan
will be along around 2005 - 2006. Thanks for the input, Brian. And keep up the good work down there in Fla. I'm taking a serious look at AA, Sec Reporter and Sec Disc. Looking PRETTY good. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000

RE: [ActiveDir] Admin Account Trouble

2002-09-20 Thread Rick Kingslan
. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Terminal Services OU Group Policy Question

2002-09-19 Thread Rick Kingslan
Title: Message You're very welcome, and thanks for the thanks! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur

RE: [ActiveDir] netdiag results

2002-09-19 Thread Rick Kingslan
Lori, Is there a problem you're trying to correct, or is this just an error that you're concerned about? Many times, the Trust Relationship erros can be ignored - unless you are having a particular problem. Then, I'd suggest further diagnosis with either NLTEST or NETDOM. Rick Kingslan

RE: [ActiveDir] Lockout after X invalid login attemps

2002-09-19 Thread Rick Kingslan
Ernesto, Help me to understand what you're doing. You say that 'After defining it at the domain level' you go back and change the settings on each container. What container are you changing settings on and what settings are you changing? The reason that I'm asking is because the Lockout

RE: [ActiveDir] Customizing the MMC...

2002-09-18 Thread Rick Kingslan
Kevin, You're spot on with the .dll. It's DSAdmin.dll that does the primary work in AD UC with a CLSID of {E355E538-1C2E-11D0-8C37-00C04FD8FE93}. This would have been the CLSID of the interface missing from Daniel's post. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] Question about Terminal Svcs

2002-09-17 Thread Rick Kingslan
. IIRC, there is no way to capute the Console session absolutely with TS - but then I could be wrong. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur

RE: [ActiveDir] OT: Exchange Std to ENT

2002-09-17 Thread Rick Kingslan
Errr, check that. If you have more than 4GB - (and want to USE it). Server - 4 Procs, 4GB of RAM Adv Serv - 8 Procs, 8GB of RAM Data Center - 32 Procs, 64GB of RAM Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] OT: Exchange Std to ENT

2002-09-17 Thread Rick Kingslan
Kevin - Point taken. In this context, you are correct. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message

RE: [ActiveDir] Native mode and NT4 trusts

2002-07-12 Thread Rick Kingslan
Title: Message Yep. It will be an external trust based on NTLM. External trusts are not affected by a seitch to native mode. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technol

RE: [ActiveDir] Active Directory Question

2002-07-12 Thread Rick Kingslan
Gil and Joanna, I've created, as a demo for an MS class that I taught over a year ago, an ASP page that used ADSI calls to do much of this. Not too tough. I'll see if I can dig it up, if you would forward me your e-mail [EMAIL PROTECTED] Rick Kingslan - Microsoft MVP [Windows NT/2000

RE: [ActiveDir] Trusts between AD and NT4 - HELP!!

2002-07-07 Thread Rick Kingslan
tring MUST BE EXACTLY 20 characters in length, including the \0x1b, and muct be in double quotes. Take a look at this Q for more: http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q245172 Good luck! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Window

RE: [ActiveDir] Trusts between AD and NT4 - HELP!!

2002-07-07 Thread Rick Kingslan
prompted during the verification for credentials to verify the trust - cancel out. These are the notes that I found after being pinged by Diane's post. Hope this helps! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any

RE: [ActiveDir] Dcpromo Fun and Games

2002-07-05 Thread Rick Kingslan
. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Group Policies are killing me (infact, the users are)

2002-07-04 Thread Rick Kingslan
as a second acquisition is Jeremy Moskowitz's book on Windows 2000 Group Policy, Profiles and IntelliMirror. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic

RE: [ActiveDir] FRS synchronization

2002-07-04 Thread Rick Kingslan
other tool. It might be easier to come up with a solution if we understood the need. Is there a particular application or problem that is being posed? Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently adv

RE: [ActiveDir] folder permissions

2002-07-04 Thread Rick Kingslan
- not the user. This is not a currently very popular belief. If you don't do it this way, you willhave to go back as a Domain Admin group member and take ownership of the folder the first time a user needs help with their stuff. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] Broke NTFRS

2002-07-02 Thread Rick Kingslan
Kevin, What ARE the errors that you're getting with NTFRS? FRS log? What are the errors that are showing up in th DS log, system log? These will go a long way to helping us help you. Otherwise, MHO, we're shooting in the dark. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] Can you isolate a virus to an OU?

2002-06-30 Thread Rick Kingslan
, for that clarification. I would like to carry on this conversation outside the list, so if you would forward me you e-mail address, I'd appreciate it. mailto:[EMAIL PROTECTED] Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] Can you isolate a virus to an OU?

2002-06-30 Thread Rick Kingslan
- From: Rick Kingslan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, June 30, 2002 7:07 PM Subject: RE: [ActiveDir] Can you isolate a virus to an OU? Gil, Thanks for this clarification. I'll have to get ahold of Stuart and get a further insight on this. As to that article

RE: [ActiveDir] GC Placements

2002-06-26 Thread Rick Kingslan
to talk to. :-) Here'a link to this book - this is one of the few books that has earned a permanent place in my traveling library. http://btobshop.barnesandnoble.com/booksearch/isbnInquiry.asp?userid=2MO 3BBOVELbtob=Yisbn=1578702429 Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] Hotfixes and IIS

2002-06-18 Thread Rick Kingslan
a classic memory leak, but again, I haven't been able to find where/what it is. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur

RE: [ActiveDir] authenticating dc

2002-06-18 Thread Rick Kingslan
Title: Message Eric, It might be easier to answer this one if you help narrow down the scope. Why are the current methods not acceptable? Are you looking for a scripted or a programmed solution? A bit of detail and we'll gladly offer an opinion, at the very least! :-) Rick Kingslan

RE: [ActiveDir] Where should DNS point? (Clarification)

2002-06-10 Thread Rick Kingslan
Title: Message Marvin, Going to Linux is not going to solve the problem. Linux uses the same basic DNS methodology, so learning DNS would resolve it, and prevent you from having to go to Linux. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP

RE: [ActiveDir] NTDS.pat

2002-06-10 Thread Rick Kingslan
this helps! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-From: [EMAIL PROTECTED] [mai

RE: [ActiveDir] DC removal via metadata cleanup...

2002-06-08 Thread Rick Kingslan
of AD) is the only way to make this happen. Removing stale records or attempting to remove a server from the 'gone server' once it's already been removed is like closing the barn door once the horse is already out. You're a bit late to prevent the problem. Rick Kingslan - Microsoft MVP [Windows NT

RE: [ActiveDir] DC removal via metadata cleanup...

2002-06-08 Thread Rick Kingslan
, no - it won't. Hope this helps - I apologize for any misunderstanding I might have created (or, panic - for that matter!). Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from

RE: [ActiveDir] Removing Trust

2002-06-07 Thread Rick Kingslan
Strange, yes. But, this given the fact that in Windows NT 4.0 I had an impossible time making them STAY! ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic

RE: [ActiveDir] Where should DNS point?

2002-06-06 Thread Rick Kingslan
, allow the client to KNOW which DC to authenticate with. Everyone else gave you great advice on the DNS stuff, so I'll let that stand. Good luck! Rick Kingslan - MVP [Windows NT/2000 Server] Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000"Any sufficiently adv

RE: [ActiveDir] Changing DNS

2002-06-03 Thread Rick Kingslan
Joshua, Ummm Can't add much here. The domain and records are hosted on your DNS, so the redirection of the name server records at NetSol should be it. You have a minimum of two DNS for this purpose, right? Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] NT Clients with Native Mode

2002-06-03 Thread Rick Kingslan
of a few other things. You won't get, in addition to bunches of other stuff, Group Policy application, Kerberos authentication (though you'll get NTLM v2), etc. As to Native mode - I can't think of any reason that you must be on SP6a. Though, I could be wrong. :-) Hope this helps. Rick

RE: [ActiveDir] 2 AD DCs but only one accepting authentication

2002-05-31 Thread Rick Kingslan
. Not, however for mixed mode logon. GC's are nice to have, especially if you want to use UPNs for logon. In fact, if EN is using UPN's, the user will be denied. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently

RE: [ActiveDir] authentication with AD

2002-05-31 Thread Rick Kingslan
IIRC, that will require anonymous access as an interorgperson is not an authenticated (via the trusting system). Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from

RE: [ActiveDir] 2 AD DCs but only one accepting authentication

2002-05-31 Thread Rick Kingslan
in the fact that LMHOSTS *DOES* still matter! :-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL

RE: [ActiveDir] DNS zones issues...woes...

2002-05-30 Thread Rick Kingslan
?ArticleID=23565 http://www.winnetmag.com/Articles/Index.cfm?ArticleID=21128 Enjoy! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] Persistent Replication

2002-05-28 Thread Rick Kingslan
Marvin, Look at this Q article: http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q216498ID=KB;EN -US;Q216498 Common problem... HTH! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology

RE: [ActiveDir] Restoring System State

2002-05-26 Thread Rick Kingslan
reliabilty solution with Exchange, where another DC is the reliability solution with Domain Controllers. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic

RE: [ActiveDir] Partial AD Restore

2002-05-23 Thread Rick Kingslan
! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Partial AD Restore

2002-05-23 Thread Rick Kingslan
460. Detailed explanation of both Authoritative and Non-authoritative. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur

RE: [ActiveDir] Global Catalog question.

2002-05-19 Thread Rick Kingslan
' Jedi...) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] DNS Setup questions

2002-05-19 Thread Rick Kingslan
Kevin, Good redirect. Good article, too! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL

RE: [ActiveDir] Bulk updates.

2002-05-16 Thread Rick Kingslan
new records, no modify or delete), it is somewhat of an onerous process. Though, I have used LDIFDE in the past, but wrote the script to preapre the LDIFDE input file. Let me know if you require specific code snippets on how to make this happen. Rick Kingslan - Microsoft MVP [Windows NT/2000

RE: [ActiveDir] SOA?

2002-05-16 Thread Rick Kingslan
Title: Message Brian, AD-integrated is going to point to itself. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur

RE: [ActiveDir] Scenario...

2002-05-15 Thread Rick Kingslan
well in the test environment with a copy of our current forest. My .02 worth... Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] Forest-wide DNS records

2002-05-15 Thread Rick Kingslan
in the other domains should become cut off from the forest DNS, then it makes it kind of hard for the locals to locate the GC and, in some cases, other DC replication partners. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently

RE: [ActiveDir] domain name

2002-05-14 Thread Rick Kingslan
a commitment to a direction and securing itthat is the hard part. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Origin

RE: [ActiveDir] Setting up a secondary DNS Server

2002-05-06 Thread Rick Kingslan
information. Notify from the Primary is a good thing to have as well. Now, if the Unix DNS is set up to recognize any and all comers that request, well - that's a potential security problem. ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows

RE: [ActiveDir] OT: MS Exchange 2000

2002-05-04 Thread Rick Kingslan
Eric, Good call - another good book. Bill English does a fine job with this book. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke

RE: [ActiveDir] OT: MS Exchange 2000

2002-05-04 Thread Rick Kingslan
, especially in this case where it has already been conceded that the requester is a newbie? Just interested in your opinion. What am *I* missing? Thanks! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced

RE: [ActiveDir] OT: MS Exchange 2000

2002-05-04 Thread Rick Kingslan
in the trenches where all the FUN is!). The ResKit have their place, and I appreciate MS making this information available. My personal fav in ResKit is about 20 pounds and 7000 pages - the CD tools alone for W2K server are worth the price of admission! Rick Kingslan - Microsoft MVP [Windows NT/2000

RE: [ActiveDir] OT: MS Exchange 2000

2002-05-04 Thread Rick Kingslan
learn it anyway. ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Log on Interactivly

2002-05-01 Thread Rick Kingslan
. This is opposite of the way that GPO works, as the farther from the Local settings we get, the less effect local settings can impose. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology

RE: [ActiveDir] Log on Interactivly

2002-04-30 Thread Rick Kingslan
, as the Local would take precedence in this case. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL

RE: [ActiveDir] Bible Found:

2002-04-30 Thread Rick Kingslan
/exec/obidos/ASIN/0072129484/qid=1020227433/sunbeltunivers0c/002-7561459-5001646 Enjoy! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur

RE: [ActiveDir] Disconnecting currently logged on users

2002-04-26 Thread Rick Kingslan
With all due respect, that is what the active sessions do indicate - not LOCAL sessions at the DC console, but the sessions established via network connections. Dirk is 100% correct. It can be controlled via that interface. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] Microsoft Baseline Security Analyser:

2002-04-23 Thread Rick Kingslan
Title: Message James, Thanks for tossing this out there. Yes, there are some great features to this, and it puts a GREAT face on HFNetchk. There are a few folks that have complained of inconsistent results, but I haven't experienced it yet. Overall, great tool. Rick Kingslan - Microsoft

RE: [ActiveDir] Error message database site?

2002-04-22 Thread Rick Kingslan
Wade, There are three that are a 'must have' http://support.microsoft.com http://www.microsoft.com/technet http://www.eventid.net -- I suspect this is the one that you're looking for. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I

RE: [ActiveDir] Sanity check please!

2002-04-18 Thread Rick Kingslan
Masters MUST be on different DC's in a multi-domain environment. And, having all your eggs in one basket (all FSMO's on one box will work) is not best practice by any means. Good luck, Rob! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT

RE: [ActiveDir] Event ID NET www.eventid.net

2002-04-17 Thread Rick Kingslan
It was there yesterday. In fact, it's there right now. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message

RE: [ActiveDir] Service Packs

2002-04-17 Thread Rick Kingslan
True, you can build (RBFG) a RIS floppy boot disk, but only if it's a supported NIC. Not all can be emulated through the floppy PXE routine. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology

RE: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Rick Kingslan
point for how you want to design a domain structure. But, unless you have differing security requirements, keep it simple to a single domain with OU's and delegation of authority at the OU level. Just my .02 worth. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Rick Kingslan
Eric, Tell me I'm reading this wrong - two different forests - one for each company - each forest with two domains? Or, is this a new forest with two trees (tree root domains)? Thanks! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT

RE: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Rick Kingslan
root. Political or namespace issues, separate trees. Don't get along or lack of trust - separate forests. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic

RE: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Rick Kingslan
events. These things never play out as we even plan, as you well know from your experiences. That's why the lists and newsgroups can be so much fun. We get to speculate and surmise, without ever having to really gather information about the other side ;-) Rick Kingslan - Microsoft MVP [Windows

RE: [ActiveDir] a licenses question

2002-04-16 Thread Rick Kingslan
understand it (unless there are two in the same room, and then their interpretation will differ) and their word is marginally binding. Get it? OK - then explain it to me back, because I've so confused myself AGGGH! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified

RE: [ActiveDir] a licenses question

2002-04-16 Thread Rick Kingslan
you get above, say, 100. They do have some newer programs associated with License 6.0 (yes, MS DOES version their license programs!) for the Small Office / Home Office segment. Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] reinstalling domain controller

2002-04-15 Thread Rick Kingslan
Then, you'll need to access this link and follow the directions carefully. This procedure is very successful in the many cases where I have used it. http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q216498ID=KB;EN -US;Q216498 Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft

RE: [ActiveDir] A Question of 2 Domains

2002-04-13 Thread Rick Kingslan
in Forest B? Or, vice versa? Consider this the same (in very high altitude terms) the Domain Admin in DomainCorp.local and the Domain Admin sales.corp.local. Does the Domain Admin in either domain have any administrative permission in the other? Rick Kingslan - Microsoft Certified Trainer

RE: [ActiveDir] AD Sites with no DC

2002-04-07 Thread Rick Kingslan
/ no site. But, at a cost of no autonomy for the locations with no DCs. Hmmm. It's a six of one, half-dozen of another, I suppose. But, I don't know your business requirements and technical policy, either. ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA

RE: [ActiveDir] Registry setting

2002-04-01 Thread Rick Kingslan
Joseph, True. I wouldn't recommend turning this setting of in an AD environment - unless this was an outward facing connection to the Internet. Not everyone is interested in hearing our machine's pleas for a DNS that will kindly do DDNS updates... ;-) Rick Kingslan - Microsoft MVP [Windows

RE: [ActiveDir] Directory Replicator service

2002-03-13 Thread Rick Kingslan
of the PDC emulator in Win2k to a BDC. From there, a BDC can replicate it to the rest of the BDCs using LMRepl. As I said, not pretty, but it does get the job done. Good luck! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any

RE: [ActiveDir] Rsource Kit

2002-03-04 Thread Rick Kingslan
Joshua, Yep, sure is. Check here - http://www.bookpool.com/.x/reasw5jj8m/ss/1?qs=windows+XP+resource+kit HTH! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from

RE: [ActiveDir] Group add to AD

2002-02-21 Thread Rick Kingslan
folks end up anyway ;-) Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is indistinguishable from magic. --- Arthur C. Clarke -Original Message- From: [EMAIL PROTECTED

RE: [ActiveDir] Problems removing Active Directory

2002-02-20 Thread Rick Kingslan
missing something? Also, do you get an opprtunity to look at the event logs to get a picture of what events are associated with the failure? Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any sufficiently advanced

RE: [ActiveDir] ldap interface going to sleep

2002-02-13 Thread Rick Kingslan
, (possibly answered above) if another machine with the Admin tools on the net attempts to access using AD Users and Computers, what happens? Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any sufficiently advanced

RE: [ActiveDir] Automatic configuration of proxy clients

2002-02-12 Thread Rick Kingslan
This is for our less experienced Group Policy readers, as I know that David is well versed in this You will not be able to assign the Group Policy settings to the default Users container - it must be assigned at the OU, Domain, or Site object to be of any use. Good luck! Rick Kingslan

RE: [ActiveDir] Rollback from the big bang

2002-01-23 Thread Rick Kingslan
migration plan is of some value as well. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-Fro

RE: [ActiveDir] OT: Data Recovery

2002-01-22 Thread Rick Kingslan
/repairandrecovery/filerestore.asp Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-From: [EMAIL

RE: [ActiveDir] Changing case of domain name

2002-01-20 Thread Rick Kingslan
. It will, however, not allow you to modify the NetBIOS domain name. You're stuck with the downlevel name. Again, until .Net. Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any sufficiently advanced technology

RE: [ActiveDir] Active Directory Design

2002-01-18 Thread Rick Kingslan
, and all domains in a forest share schema and configuration partitions. Hence, no autonomy. Good luck! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any sufficiently advanced technology is indistinguishable from

RE: [ActiveDir] RPC Server weird error

2002-01-17 Thread Rick Kingslan
Yeah, yeah - would be like you to jump in and take the EASY one! How goes, Dean? Drop me a note - mailto:[EMAIL PROTECTED] Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server] Any sufficiently advanced technology

<    5   6   7   8   9   10   11   >