[ActiveDir] AD Restore

2006-06-21 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] AD Restore

2006-06-21 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] AD Restore

2006-06-21 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

[ActiveDir] Deny Read Permissions to Group Policy

2006-06-01 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread chris . ryan
mimics the legacy Control/SA Workflow tool. Chris Ryan The Kroger Company Corporate Information Security [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 Blodgett

RE: [ActiveDir] LDAP filters

2005-09-27 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] Transfer GPO between domains

2005-09-06 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

[ActiveDir] OT-Exchange 2003 Site Folder Server

2005-08-23 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] OT-Exchange 2003 Site Folder Server

2005-08-23 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] OT-Exchange 2003 Site Folder Server

2005-08-23 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] export to csv

2005-08-22 Thread chris . ryan
: wasChris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] AD attribute

2005-08-19 Thread chris . ryan
: was Chris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] Setting the default UPN when migrating accounts u sing ADMT

2005-08-12 Thread chris . ryan
: was Chris Ryan/MIS/CORP/KrogerCo received

RE: [ActiveDir] Merging two domains

2005-08-08 Thread chris . ryan
Migration Manager for Active Directory from Quest will allow you to migrate objects from the external domain without setting up a trust. I believe you do need to be running 2003 in the source domain as it stores information in ADAM during the migration. Check out the URL below.

[ActiveDir] Chris Ryan is out of the office.

2005-08-01 Thread chris . ryan
I will be out of the office starting 07/28/2005 and will not return until 08/02/2005. I will be out of the office 7/28 - 8/1, I will respond to your message when I return. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

RE: [ActiveDir] ADMT Group SID History

2005-07-13 Thread chris . ryan
Thanks Mark and Guido, that was the problem. Everything is working great now. Chris Grillenmeier, Guido

[ActiveDir] ADMT Group SID History

2005-07-12 Thread chris . ryan
All, I've been following the Sybex book, Mastering Windows 2003, to test an inter-forest migration from external.dev to development.dev using the ADMT. I have not received any errors during the migration and everything appears to be setup correctly, however, I do not think the SID

Re: [ActiveDir] Can a 2003 server be a domain controller in a 2000 domain?

2005-07-08 Thread chris . ryan
I believe you would still have to prep the forest and the domain in order to even promote a 2003 DC in a 2000 domain. Antonio Aranda [EMAIL

RE: [ActiveDir] Effect of change to MaxValRange

2005-06-17 Thread chris . ryan
Thanks for the feedback. I thought some of the experts would be able to better articulate the consequences of changing that value. I read about it in Eric's Blog and based on the information I had come up with this response to changing the value. Performance issues include increased processor

[ActiveDir] Virtual Domain Controllers

2005-06-16 Thread chris . ryan
All, Is anybody currently running Domain Controllers in VMware of Virtual Server? Have there been any problems with this environment? There is a big push at my company to virtualize every environment but, I am sure Domain Controllers should be virtualized. One of my biggest

RE: [ActiveDir] Virtual Domain Controllers

2005-06-16 Thread chris . ryan
Thanks for all of the responses. I had a chance to look at the KB article on USN rollback and found it very informative. I will get to the white paper when I have a little time. I am still concerned about the Snapshot feature. How do others handle this? Is it possible to turn it off or apply

RE: [ActiveDir] Security settings not Inheriting

2005-06-02 Thread chris . ryan
That was exactly right. Thanks for the help! Chris Ryan The Kroger Company [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 Tony Murray

[ActiveDir] Security settings not Inheriting

2005-05-27 Thread chris . ryan
All, I am attempting to delegate full control of one OU to a particular group of Admins. I have run the Delegation Wizard, selected the group, customized a task to delegate permissions to the folder, all existing objects in the folder and the creation of new objects and then selected

[ActiveDir] OT DNS Entries Disappear

2005-05-20 Thread chris . ryan
All, We had a situation yesterday where random A records would disappear from DNS. All of these records were static so should not be affected by scavenging. I do not know why records would disappear other than the restoration of an old backup that did not contain those records. This is a

RE: [ActiveDir] Citrix

2005-05-17 Thread chris . ryan
server. Chris Ryan The Kroger Company [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 Christine Allen christine.easton

Re: [ActiveDir] delegation not working on Win2k AD

2005-05-17 Thread chris . ryan
will allow the user to move computer objects between OU's but not join computers to the domain. Chris Ryan The Kroger Company [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 Mark Parris

[ActiveDir] Tracking OU Deletion

2005-05-03 Thread chris . ryan
system events|Success, Failure | |---+-| Chris Ryan The Kroger Company [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 List info : http://www.activedir.org/List.aspx List FAQ

Re: [ActiveDir] Time Sync between Forest Root and Child Domains

2005-04-07 Thread chris . ryan
Set the time source on your Root PDC with net time /setsntp:SERVERNAME On all other DC's do not set a time source with net time /setsntp: By not setting a time source the DC's should all default to the Forest Root PDC. Or you can manually set the other DC's to sync with your forest PDC with

Re: [ActiveDir] OT: Anyone installed Windows 2003 (Server) SP1 yet?

2005-04-06 Thread chris . ryan
I have installed it on some production domain Controllers and have only had one minor problem with McAfee 7.1. I received Event ID 1002 in my system log from DCOM. The launch and activation security descriptor for the COM Server application with CLSID {2A6D72F1-6E7E-4702-B99C-E40D3DED33C3} is

RE: [ActiveDir] [Active Dir] Handling Duplicate Accounts During d omain Migration

2005-03-24 Thread chris . ryan
Thanks for the explanation, I really appreciate it. This is the first time I have attempted a domain consolidation so I want to be sure I have all the background information. I have a VMware lab environment with production data in it for testing and I will begin testing the products.

Re: [ActiveDir] Enabling Password must meet complexity requirements

2005-03-23 Thread chris . ryan
Your users will not be immediately prompted to change their password to meet the complexity requirements. They will be forced to use a complex password the next time a password change is required. Greg

[ActiveDir] [Active Dir] Handling Duplicate Accounts During domain Migration

2005-03-23 Thread chris . ryan
We are currently trying to migrate all of our child domains into one single domain. There are 3 child domains, 2 of which are Windows 2000 native and 1 is Windows 2000 Mixed. The target domain is Windows 2003 Native. We plan to use ADMT v2 for the planned migrations. There were

Re: [ActiveDir] [Active Dir] Handling Duplicate Accounts During domain Migration

2005-03-23 Thread chris . ryan
Yes, all of these domain are in the same forest. We have an empty root domain, MSROOT.domain and one tree in the forest, DOMAIN.com and 3 child domains, FM.domain.com, MI.domain.com and RA.domain.com. The forest functional level is Windows 2000 while the domain functional level of

RE: [ActiveDir] [Active Dir] Handling Duplicate Accounts During d omain Migration

2005-03-23 Thread chris . ryan
These are the same users in the same forest, but in different domains. Mulnick, Al [EMAIL PROTECTED]

RE: [ActiveDir] Handling Duplicate Accounts During domain Migration

2005-03-23 Thread chris . ryan
I have checked the help files in the ADMT and it appears that it will only replace the account in the target domain with the account in the source domain. As a result, the users will be removed from the groups in the target domain and they will loose access to their applications. I want to

Re: [ActiveDir] [Active Dir] Handling Duplicate Accounts During d omain Migration

2005-03-23 Thread chris . ryan
I think during an intraforest migration it is a copy, as the source user accounts are left intact and the users can continue to use them. This makes for an easy roll back if something goes wrong. I have not yet looked at using other tools as they, of course, will cost money and this tool is