Re: [ActiveDir] R2 Schema..

2006-04-04 Thread Umer Y
Adprep /forestprep, as said by Brian will upgrade your entire forest. Not just your child domain. So keeping that in mind, the change would be visible to all your domains, not just that particular child domain. On 4/3/06, James Carter [EMAIL PROTECTED] wrote: Hi, I have a root domain with

Re: [ActiveDir] Windows R2 - Extending the schema

2006-04-01 Thread Umer Y
Just make sure you update the schema using the 2nd cd of the R2 set. Good Luck. On 3/31/06, Mike Hogenauer [EMAIL PROTECTED] wrote: Thanks all I do plan to test in lab first but I had to ask! Thanks, Mike From: [EMAIL PROTECTED]

Re: [ActiveDir] DNS Server will not Start

2006-03-19 Thread Umer Y
Add the following key. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters Type = DWORD Key = Repl Perform Initial Synchronizations Value = 0 This will take care of your issue. :) On 3/19/06, Mark Parris [EMAIL PROTECTED] wrote: I have since discovered it is a 4015 error

Re: [ActiveDir] DNS Server will not Start

2006-03-19 Thread Umer Y
this a go. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Umer Y Sent: 19 March 2006 23:08 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] DNS Server will not Start Add the following key. HKEY_LOCAL_MACHINE\SYSTEM

Re: [ActiveDir] Migrating AD to a lab

2006-03-11 Thread Umer Y
For system state to work correctly, you need to have identical hardware on the lab machine as to the machine the system state was taken on. Different hardware will definately create difficulty in restoring the system state and possibly fail. So imo, promoting a dc in the domain, forcing

Re: [ActiveDir] 1025/tcp open NFS-or-IIS

2006-03-09 Thread Umer Y
Marcus, I have tested that with 2003 SP1 dc's. Works like a charm. I used the following KB: http://support.microsoft.com/kb/154596/ Cheers. On 3/10/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Al, do you have success with that rpc port limitation? With win2k, it did not work as

Re: [ActiveDir] There must be an easier way...

2006-03-06 Thread Umer Y
Hello Larry, Unfortunately there is no way around doing a metadata cleanup against those 2 DCs that have been removed from your domain and are not going to come back. You would want to figure out the machines in that particular subnet where the 2 DCs were, have connectivity to an existing and

Re: [ActiveDir] SBS 2003 Domain/Forest Rename

2006-03-01 Thread Umer Y
What about migration to a new domain then ? Maybe that would be the way around renaming? I am not sure of the implications it might have on exchange or share point. On 3/1/06, Susan Bradley [EMAIL PROTECTED] wrote: And remember we are a single DC/Forest... so we're more like a tree than a

Re: [ActiveDir] Limiting a computer account to specific workstations?

2006-02-27 Thread Umer Y
It seems that there is an upper limit of 1024 characters even in AD2K3 using ADUC. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/adschema/a_userworkstations.asp But, I am told that you can use adsiedit to edit userWorkstations value to add more than 63 machines,

Re: [ActiveDir] Big problem with member of attribute

2006-02-26 Thread Umer Y
Try to see if it works when you open ADUC on a GC. I do believe it was a reported bug in 2000, and was fixed in 2003. On 2/25/06, Al Mulnick [EMAIL PROTECTED] wrote: Best bet? If you can't upgrade, call your local Microsoft support and see if they have this in a W2K version. If not, ask if this

Re: [ActiveDir] (off topi) Sound problem

2006-02-20 Thread Umer Y
Install a new sound card? On 2/20/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I apologize if this question isn't exactly about ACTIVE DIR, but I have this problem in a member workstation and I need help One of our users has a sound card installed in his computer. It was

Re: [ActiveDir] Computer Policies based on User Logon?

2006-02-17 Thread Umer Y
=policyreporter.shtml - Original Message - From: Umer Y. [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: Saturday, February 11, 2006 1:55 PM Subject: RE: [ActiveDir] Computer Policies based on User Logon? If it was user policies, then it wouldn't be a problem. But these are settings

Re: [ActiveDir] Ntfrs Errors

2006-02-15 Thread Umer Y
Justin, you wouldn't lose your AD data by deleting NTFRS Jet database. AD data is stored in ntds.dit file under Systemroot\Ntds\ folder. What you would want to do is to copy everything fromSYSTEMROOT\SYSVOL\SYSVOL\DOMAIN.com\ to another folder forbackup measures, before you perform that action.

RE: [ActiveDir] Computer Policies based on User Logon?

2006-02-10 Thread Umer Y.
] [mailto:[EMAIL PROTECTED] On Behalf Of Umer Y. Sent: Friday, February 10, 2006 4:25 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Computer Policies based on User Logon? Hello All, I was wondering if there is a way to have a user logon to the machine and not have the computer policies

RE: [ActiveDir] Computer Policies based on User Logon?

2006-02-10 Thread Umer Y.
] on behalf of Umer Y. Sent: Fri 2/10/2006 6:21 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Computer Policies based on User Logon? Thanks for responding Nuo. Loopback policy will merge/replace the logging on user's User Configuration with its User Configuration. That is the opposite

RE: [ActiveDir] configure port exceptions in windows xp firewall via gpo

2006-01-16 Thread Umer Y.
Shouldn't the UDP ports be opened for netbios name resolution? System service name: Browser Application protocol Protocol Ports NetBIOS Datagram Service UDP 138 NetBIOS Name Resolution UDP 137 NetBIOS Session Service TCP 139 Ref: http://support.microsoft.com/default.aspx?scid=kb;en-us;832017

RE: [ActiveDir] Restore twice in Disaster Recovery?

2005-11-13 Thread Umer Y.
are restoring the first DC in a certain domain you need to restore AD non-auth. and SYSVOL auth. (for the latter in other words as PRIMARY) Hope this helps you! Cheers, Jorge From: [EMAIL PROTECTED] on behalf of Umer Y. Sent: Sun 11/13/2005 2:36 AM To: ActiveDir

RE: [ActiveDir] Restore twice in Disaster Recovery?

2005-11-13 Thread Umer Y.
From: [EMAIL PROTECTED] on behalf of Umer Y. Sent: Sun 11/13/2005 4:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Restore twice in Disaster Recovery? Thanks a bunch Joge. I am doing W2K3 restore. I didn't know about the bit about SYSVOL restore, but I assumed it would

Re: [ActiveDir] Restore twice in Disaster Recovery?

2005-11-13 Thread Umer Y.
, but you should be able to restore both in one job. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Umer Y. Sent: Sunday, November 13, 2005 12:39

[ActiveDir] Restore twice in Disaster Recovery?

2005-11-12 Thread Umer Y.
Hello All! I have researched this question quite a bit, but have not found a solid answer as to why or how this would be done. I am doing a disaster recovery test on VMs, to eliminate the part of 'dissimilar hardware' or to simulate 'Identical hardware' in real life scenario. But I am

[ActiveDir] Website Restriction through group policy

2005-02-21 Thread Umer Y.
Hello, I want to restrict a computer from accessing any website other than two web domains of my choice. Is there a way to accomplish that with Group Policy? Thanks! ... you don't know what you've got 'till it's gone.. - Joni Mitchell List info : http://www.activedir.org/List.aspx List FAQ

Re: [ActiveDir] Question: AD Group Policy not taking effect

2005-02-14 Thread Umer Y.
ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedirf=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedirf=policyreporter.shtml - Original Message - From: Umer Y. [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: Sunday

RE: [ActiveDir] Question: AD Group Policy not taking effect

2005-02-12 Thread Umer Y.
PROTECTED] Behalf Of Umer Y. Sent: 11 February 2005 21:38 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Question: AD Group Policy not taking effect Hello, I added an OU. Added a test user. I added a group policy by clicking 'add' under 'group policy' in OU's properties. Changed a couple

RE: [ActiveDir] Question: AD Group Policy not taking effect

2005-02-12 Thread Umer Y.
DSN: 276-4597 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Umer Y. Sent: Friday, February 11, 2005 13:38 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Question: AD Group Policy not taking effect

[ActiveDir] Question: AD Group Policy not taking effect

2005-02-11 Thread Umer Y.
Hello, I added an OU. Added a test user. I added a group policy by clicking 'add' under 'group policy' in OU's properties. Changed a couple of things around. Logged onto a test client. Group policy wouldn't take effect. What am I missing? I will appreciate your help in this regard. Thanks. ...

RE: [ActiveDir] Question: AD Group Policy not taking effect

2005-02-11 Thread Umer Y.
will not be applied. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Umer Y. Sent: Freitag, 11. Februar 2005 22:38 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Question: AD Group Policy not taking effect Hello, I added an OU. Added a test user. I added