[ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
Hello, all. I am receiving an Access Denied error when attempting to add a New Link into an existing DFS namespace. I am a DA/EA and I have checked the ACL's on the appropriate AD objects and they look correct. Any ideas would be appreciated. Thanks, James dfs-error.PNG Description: PNG image

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
I don't see any interesting event log entries. Not a big forest really, 5 domains, 120,000 users, 1 DFS site. The root has been around for 4 years. By look correct I mean that DA/EA have full rights on the DFS attributes in the domain. You are correct, R1 and existing DFS root. Thanks for the

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
I verified that DA/EA has Full Control both share and NTFS. James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
Domain root James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent: Wednesday, January 10, 2007 10:38 PM To: ActiveDir

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
It is within the structure already published James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent: Wednesday, January 10

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
I apologize for my DFS illiteracy, but I'm not sure what you mean by the FRS-Staging folder... James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
I'm trying to add a new link to a new share (call it Folder3) James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
: [ActiveDir] OT: DFS Access Denied Error I apologize for my DFS illiteracy, but I'm not sure what you mean by the FRS-Staging folder...James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
No problem - and yes, that is correct. I have created a separate DFS root, added a link to Folder3 and everything works fine. Think my existing DFS root is whacked? James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original

RE: [ActiveDir] OT: DFS Access Denied Error

2007-01-10 Thread james . masters
Will do - thanks much for your help. James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent: Thursday, January 11, 2007 12

[ActiveDir] Is ADAM free?

2007-01-02 Thread james . masters
Is ADAM free? If not, how much does it cost? Thanks! -James List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

RE: [ActiveDir] Is ADAM free?

2007-01-02 Thread james . masters
Great - thanks for the info. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jackson Shaw Sent: Tuesday, January 02, 2007 11:14 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Is ADAM free? Just as an additional fyi, ADAM also has a

RE: [ActiveDir] Quest Recovery Manager

2006-12-06 Thread james . masters
Sorry - refering to RM for AD James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wells, James Arthur Sent: Wednesday, December 06, 2006 2:44

RE: [ActiveDir] Quest Recovery Manager

2006-12-06 Thread james . masters
Todd, thanks for your insight. Good points to think about. James Masters Systems Architecture and Engineering The Kroger Co. Office: (859) 363-2346 Cell:(859) 653-8644 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DCRI) [E

[ActiveDir] ADUC - Simple question

2006-12-06 Thread james . masters
In ADUC, under Saved Queries/New/Query, why is the Query string: text box greyed out and uneditable? Thanks! -James List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

[ActiveDir] Quest Recovery Manager

2006-12-05 Thread james . masters
Does anybody have anything particularly good or bad to say about Quest's Recovery Manager product? We are evaluating it for an 2 forests, and 3 domains. As always, thanks for all of your insight and expertise. -James List info : http://www.activedir.org/List.aspx List FAQ:

[ActiveDir] BIND allow-update

2006-10-06 Thread james . masters
Easy question for the group - I have a forest rood domain: msroot.company I have a domain: company.com We use BIND. My question: do I need an allow-update entry for both zones or just the forest root zone for proper dynamic update operation? Thanks in advance, James List info :

RE: [ActiveDir] BIND allow-update

2006-10-06 Thread james . masters
Thanks for the replies - I think I have to revise my question. Upon DC promotion - does the DC need to dynamically update the forest root and the domain the DC is in? (e.g. I'm promoting a DC for company.com, does the DC need to do DDNS to both company.com AND msroot.company (the forest root

RE: [ActiveDir] BIND allow-update

2006-10-06 Thread james . masters
Very much - thanks everyone. James Masters Systems Architecture and Engineering The Kroger Co. (859) 363-2346 - Desk (859) 653-8644 - Cell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of itgeek Sent: Friday, October 06, 2006 12:00 PM To: ActiveDir

[ActiveDir] DFS - Null Server-Reference Attributes

2006-09-13 Thread james . masters
Hello, All. Im pretty sure that Im experiencing the Null Server-Reference Attributes issue as described in http://support.microsoft.com/default.aspx?scid=kb;EN-US;312862 My problem Im hitting a wall right out of the gate: In LDP or ADSIedit, copy the DN path of the NTDS Settings

RE: [ActiveDir] DFS - Null Server-Reference Attributes

2006-09-13 Thread james . masters
I have found the path to the NTDS Settings object. Please let me share the problem we are having with you, if anyone has any ideas or experience with this, please share. For some time now, we have been receiving 13508 errors in the event logs between ServerA and ServerB. Coincidently,

[ActiveDir] OT: Computer Account in Local Administrators Group

2006-07-06 Thread james . masters
Im definitely not wanting to do this but a vendor was saying to do it to allow one of their services to run as Local System and be able to interact with another machine. I am very skeptical, and not allowing it. Thanks, James From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT: Computer Account in Local Administrators Group

2006-07-06 Thread james . masters
Will do thank you very much for all of your responses. -James From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]om Sent: Thursday, July 06, 2006 12:40 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Computer Account in Local

[ActiveDir] OT: Computer Account in Local Administrators Group

2006-07-05 Thread james . masters
What is the net effect of placing a remote computer account (\\domain\computer_name) in the Local Administrators group? Thanks, James List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx

RE: [ActiveDir] Service time-out

2006-06-27 Thread james . masters
where the service timeout period is set for NT services? Also, is there a global setting for time outs for all services? Any help would be appreciated - thanks. James Masters Midrange Support The Kroger Co. (859) 363-2346 - Desk (859) 653-8644 - Cell List info : http://www.activedir.org

RE: [ActiveDir] Service time-out

2006-06-27 Thread james . masters
, June 26, 2006 10:27 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Service time-out Does anybody know where the service timeout period is set for NT services? Also, is there a global setting for time outs for all services? Any help would be appreciated - thanks. James Masters

[ActiveDir] Service time-out

2006-06-26 Thread james . masters
Does anybody know where the service timeout period is set for NT services? Also, is there a global setting for time outs for all services? Any help would be appreciated - thanks. James Masters Midrange Support The Kroger Co. (859) 363-2346 - Desk (859) 653-8644 - Cell List info : http

[ActiveDir] OT: Exchange alternate email address

2005-10-03 Thread james . masters
Hi, all. Quick question for you: I have a user who wishes to send/receive email as a different address than her own. We use Exchange 2003 and Outlook 2003. I am just inquiring as to the best practice for accomplishing this. Thanks in advance, James

RE: [ActiveDir] OT: Exchange alternate email address

2005-10-03 Thread james . masters
Thanks Brian. I will give this a shot. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Monday, October 03, 2005 4:58 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange alternate email address If I understand this

RE: [ActiveDir] OT: exchange max. dist. list size

2005-09-22 Thread james . masters
Thanks for the replies Michael is right, I believe looks like more of an outlook thing (were using Outlook 2003 and Exchange 2003 Std.) This sums it up: http://support.microsoft.com/default.aspx?scid=kb;en-us;238569Product=out From: [EMAIL PROTECTED] [mailto:[EMAIL

[ActiveDir] OT: exchange max. dist. list size

2005-09-21 Thread james . masters
Has anyone encountered the max distribution list size in exchange? Seems like its 8KB, or between 100-200 email addresses? Am I missing something? Thanks, James

[ActiveDir] OT: ADSI bind to eDirectory

2005-09-08 Thread james . masters
Has anyone here been able to successfully bind to eDirectory using ADSI over SSL/TLS? (if so.. code snippet please?) We can easily bind without SSL, but when throwing in the ADS_SECURE_AUTHENTICATION = 1 and ADS_USE_SSL = 2 into the mix, we get a The remote computer is not functioning properly.

[ActiveDir] Access Denied when adding machine into domain

2005-08-02 Thread james . masters
Hello, All. I am receiving Access Denied when attempting to join a Windows 2003 member server to our domain. I also receive this error when attempting to map \\dcname\ipc$ (I do not receive this error when mapping to other resources). I am in enterprise admins, so I have proper privileges. I

RE: [ActiveDir] OT: Virtual Server mailing lists?

2005-07-22 Thread james . masters
On a related OT, if anyone could point me in the direction of a good VMware ESX list, Id appreciate it. Ive searched around, to little avail. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet Sent: Friday, July 22, 2005 2:02 PM To: