[ActiveDir] Users Logged In

2003-07-29 Thread Richard Sumilang
How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Milind Patil
You can use the Server Manager for the same.. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:59 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users Logged In How do I know what users are currently logged in? They are all logging into

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Carlos Magalhaes
Title: RE: [ActiveDir] Users Logged In Do you only want to see the information or do you want to log it as well? Regards, Carlos Magalhaes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 29, 2003 8:29 AM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] Do you allow users to add computers to AD themselves?

2003-07-29 Thread Wilkinson, Stephen
Guys, You have managed to confuse me! Why don't you just delegate the permission on the computers to container to your Technical Services and Lan Admin groups - so they can create computer objects and are not bound by the quota, as it does not apply if you have the create computer object

RE: [ActiveDir] Do you allow users to add computers to AD themselves?

2003-07-29 Thread Roger Seielstad
You too, eh? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Friday, July 25, 2003 11:59 PM To: [EMAIL PROTECTED]

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Joe
This is a UNIX or Mainframe mindset. Logons are a more nebulous concept in Windows. There isn't anything keeping a running tally of who has logged into the domain and who has logged out. Doing something like that is difficult at best in a distributed system like the Windows domain structure is.

RE: [ActiveDir] [OT] Do you allow users to add computers to AD themselves?

2003-07-29 Thread Joe
No offense taken, I'm not average. I'm one of the worst users you know. :oP Heh. Couldn't resist. Happy Tuesday. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Monday, July 28, 2003 10:44 PM To: [EMAIL PROTECTED] Subject: RE:

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Thommes, Michael M.
One way to do this is to go to the Computer Management mmc, go to System Tools/Shared Folders/Sessions. You can export the data. You will have to do this on each of your domain controllers to get a complete picture. Mike Thommes -Original Message- From: Richard

RE: [ActiveDir] DNS zones for domains in same forest

2003-07-29 Thread Roger Seielstad
You'd be wrong, mostly. Within a tree, the parent/child domains all know about each other by nature of the delegation process. Across trees, you'd need to pull secondaries. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems

RE: [ActiveDir] Why not allow users to add computers to AD?

2003-07-29 Thread Roger Seielstad
The reset computer account passwd idea is interesting. Maybe building an OU tree for dev machines would make sense there. Fortunately, much of our dev work is done on Unix boxen, so that makes this a lot more hands off for AD. But the kids doing work on Windows are the ones I trust the least

[ActiveDir] Windows server 2003 group policy in a Windows 2000 AD

2003-07-29 Thread Jason Benway
I would love the have the wireless configuration policy shown here http://www.microsoft.com/technet/treeview/default.asp?url=/technet/columns/c ableguy/cg0703.asp in my windows 2000 domain. All of our workstations are windows XP SP1. I'm using a Windows XP SP1 workstation to create, edit, etc my

[ActiveDir] Windows Server 2003 authoritative Restore

2003-07-29 Thread Joe Baird
I had heard some where that you no longer had to perform authoritative restores using ntdsutil with Windows Server 2003. I was under the impression that there was now a recycle bin concept that would basically keep object in a hidden status for a designated amount of time before the object

Re: [ActiveDir] Users Logged In

2003-07-29 Thread Richard Sumilang
Initially just to see them but both sound good :-) On Tuesday, July 29, 2003, at 02:13 AM, Carlos Magalhaes wrote: Do you only want to see the information or do you want to log it as well? Regards, Carlos Magalhaes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED]

[ActiveDir] Cached password policy

2003-07-29 Thread Jennifer Fountain
After Evaluation, we made the cached password policy for desktops to 0 (we will change to 1 in case th) domain controller is down.eand laptops to 2. a user just received a laptop and they were not moved but now they have been moved to the laptops OU .but still have 0 paswords saved and on the

Re: [ActiveDir] Users Logged In

2003-07-29 Thread Richard Sumilang
Not to sound like an absolute n00b or anything, but where is Server Manager? On Tuesday, July 29, 2003, at 01:06 AM, Milind Patil wrote: You can use the Server Manager for the same.. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:59

Re: [ActiveDir] Windows 2000 VPN

2003-07-29 Thread Richard Sumilang
Rick, Thanks for assuring me that what I did is a good way to handle the situation :-] On Monday, July 28, 2003, at 07:30 PM, Rick Kingslan wrote: Richard, I think that you used the proper approach to the solution. Doesn't really matter what IP range you use, as long as you are using a

RE: [ActiveDir] dcdiag error when joining a new child domain

2003-07-29 Thread Craig Cerino
I VAUGELY recall seeing this somewhere before - -- if memory serves it has something to do with DNS failure (resolution) and your DNS server(s) not being set to allow Dynamic Updates. I will look around in my notes/journal/logs to see if I can dig anything up dude. -Original

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Free, Bob
Not to sound like an absolute n00b or anything, Too late :-] start|run|svrmgr -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Users Logged In Not to sound like an absolute n00b or

Re: [ActiveDir] Users Logged In

2003-07-29 Thread Richard Sumilang
When I go to start, run, svrmgr it says that the program does not exist. How do I install it? On Tuesday, July 29, 2003, at 11:06 AM, Free, Bob wrote: Not to sound like an absolute n00b or anything, Too late :-] start|run|svrmgr -Original Message- From: Richard Sumilang

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Celone, Mike
Title: RE: [ActiveDir] Users Logged In Actually mine was included in the Win2k Resource Kit and it's srvmgr.exe. Mike -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 29, 2003 2:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Users Logged In

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Thommes, Michael M.
Not too late...I believe it is only available under NT 4. Mike Thommes -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 1:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Users Logged In Not to sound like an absolute n00b or anything, Too

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Hutchins, Mike
heh -Original Message- From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 12:19 PM To: [EMAIL PROTECTED] Not too late...I believe it is only available under NT 4. Mike Thommes -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent:

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Kitchens Arthur E
Title: RE: [ActiveDir] Users Logged In The version for XP works on all of them I believe (NT 4.0,2000,2003). It's on the install cd's in the I386 folder adminpak.msi, or available for download from microsoft. I don't have the URL handy, sorry. -Original Message- From: Thommes,

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Shawn.Hayes
Title: Message srvmgr is out of the box an available application Windows 2000 server located in the system32 directory srvmgr from NT4 will also work. just copy the .exe to your local machine or run it from the server, it is up to you. Shawn -Original Message-From:

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Free, Bob
If you are running XP, my copy's from the 2003 ResKit. It should already be on a 2K box in %windir%\system32 Caveat emptor- From 2003 RK help Warning Using this tool on Active Directory domains or Windows 2000, Windows XP or Windows Server 2003 computers may cause corruption, or the tool may

RE: [ActiveDir] Users Logged In

2003-07-29 Thread Shawn.Hayes
I just read the initial thread .. Server manager is not what you want to use, but will work! Use Computer Manager and 'connect to' the machine you would like to investigate or open Computer Manager on the machine in question. Expand Shared Folders \ Sessions and you will see who is

RE: [ActiveDir] Cached password

2003-07-29 Thread Jennifer Fountain
Title: RE: [ActiveDir] Cached password Logging into ras and waiting (long enough) for the policy to update resolved the issue. I didn't wait long enough for the policy to update so i thought i did something wrong. (i stayed logged into ras for 15 mins) Thanks Jenn

RE: [ActiveDir] Windows Server 2003 authoritative Restore

2003-07-29 Thread Hazelman, Doug
Title: Message Joe, Windows Server 2003 only allows for objects to be "untombstoned", but there is no recycle bin. You can still perform an offline authoritative restore from a system state backup. More information about how to untombstone through scripting can be found here:

RE: [ActiveDir] Local Admin

2003-07-29 Thread Fuller, Stuart
For a vbs script sample to do this see http://www.microsoft.com/technet/treeview/default.asp?url=/technet/ScriptCen ter/user/ScrUG69.asp Should work for both NT and 2000/XP. -Stuart -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003

RE: [ActiveDir] Local Admin

2003-07-29 Thread Salandra, Justin A.
How? What about Windows NT 4 machines? -Original Message- From: Kevin Miller [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 1:21 PM To: [EMAIL PROTECTED] Subject:Re: [ActiveDir] Local Admin you can do that with the GPO - Original Message - From: Bond,

Re: [ActiveDir] Users Logged In

2003-07-29 Thread Richard Sumilang
Ok thats a cool little tool, shows me all the computers and their services but for some reason when i click on the user button when looking at a computer's properties, it only shows up my user name. Shouldn't it show the user who is currently logged in on that computer? Thanks btw Mike On

RE: [ActiveDir] Windows Server 2003 authoritative Restore

2003-07-29 Thread Darren Mar-Elia
Title: Message I think what you're referring to here is the new tombstone reanimation (cute name, huh?) API that has been added to Server 2003. This allows you to programmatically retrieve deleted AD objects from the Deleted Objects container before their tombstone interval has expired and

Re: [ActiveDir] Local Admin

2003-07-29 Thread Kevin Gent
don't care about NT 4, only have W2K Pro/XP Pro stations, thanks for all the responses - Original Message - From: Salandra, Justin A. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 2:07 PM Subject: RE: [ActiveDir] Local Admin How? What about Windows NT 4

RE: [ActiveDir] dcdiag error when joining a new child domain

2003-07-29 Thread Chianese, David P.
I just checked for the Allow Dynamic updates on all DNS servers. They are all configured to allow. I have taken a netmon trace too as I thought RPC failures could be a contributing factor, but the netmon trace disproved that as I see them being acknowledged. DNS seems to configured correctly,

RE: [ActiveDir] Local Admin

2003-07-29 Thread Joe
You can do it with a computer start up script GPO option that executes a simple net localgroup command; it will work fine because that script executes as local system. The restricted groups GPO option will definitely overwrite though. -Original Message- From: [EMAIL PROTECTED]