RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
Hey gang, I have a 2003 cluster and one of the nodes was rebuilt because it was failing. I cannot get the quorum resource to function correctly on the new node. Here is what I have done: Rebuilt and patched the failing node. Blocked all group policy I could and put it in a separate OU.

RE: [ActiveDir] OT: new job

2005-07-25 Thread Myrick, Todd (NIH/CC/DNA)
Since I work for the Government, I am all about not taking risk with my employment :) Since you are going to be entering into a sticky situation, I would ask myself the following questions. Why does the company want to cut their ties with outsourcer? Are they unhappy with the SLA? Is it costing

RE: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Ruston, Neil
Whilst not independent, I know Quest offer something along these lines. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: 25 July 2005 13:35 To: ActiveDir.org Subject: [ActiveDir] Disaster Recovery Training All, Does anyone know

RE: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Almeida Pinto, Jorge de
also take a look at: Active Directory Disaster Recovery http://www.netpro.com/events/adrecovery/index.cfm NetPro and HP invite you to join Active Directory experts Gil Kirkpatrick, CTO at NetPro, and Guido Grillenmeier, Senior Consultant of Enterprise Microsoft Services at Hewlett Packard, as

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Hunter, Laura E.
Have you explicitly added the cluster service account to the local Administrators group on the two nodes? I had a few bizarre niggling cluster issues that were resolved by doing that. Even though the service account was already a local admin on the box by virtue of group membership, the cluster

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
I did confirm that the cluster service account is a member of the local administrators account on both boxes and that the passwords I entered are correct and the account is not locked out and it has the correct user rights on the local node. I wish that were the answer!! -Original

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Al Mulnick
I'm confused. Why didn't you just evict the failing node and join the new one? Are you sure you don't have a naming issue or perhaps a storage config issue? I see nothing about either of those. Al From: [EMAIL PROTECTED] on behalf of Bahta Nathaniel V

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
Title: RE: [ActiveDir] OT: Windows 2003 Cluster I did evict the node, forcedcleanup, rebuilt a new member server, joined it to the domain, added it as a node to the existing cluster. This is the result of that. I dont see any way this could be a naming issue as the name resolution for DNS

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Al Mulnick
Ruled out storage issues? Can we assume this is a SAN configuration? And I assume that the new node has the appropriate zoning information configured correctly for its WWN? That would be a change of course, but... What do you see in the event log on that node and for the cluster?

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
Title: RE: [ActiveDir] OT: Windows 2003 Cluster You are correct, this is a SAN configuration with JNI FC HBA's. The node was configured and running for a long while before it failed. The SAN still has the configuration data for the WWN of the node, as it was already configured as a node

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Al Mulnick
It's this that gives me the heartache: The SAN still has the configuration data for the WWN of the node In my experience, whenever troubleshooting always assume nothing is correct and troubleshoot accordingly. Those errors indicate that it cannot talk to the disk properly. It's

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
Title: RE: [ActiveDir] OT: Windows 2003 Cluster It had WMI access denied errors that entailed ripping apart the repository of the WMI database and since WMI was not starting the cluster could not read the WMI information and did not see the other node properly. I used the resetquorum switch

RE: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Grillenmeier, Guido
thanks for the advertising Jorge - and I didn't even promise you any goodies :-) Mark, you might also want to have a look at John Craddock and Sally Storey's offering for a 1 day 400-level AD Disaster Recovery seminar: http://www.kimberry.co.uk/dotnetlectures/addr.aspx John and Sally are well

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Al Mulnick
Have you also verified that the HBA is functioning correctly? From: [EMAIL PROTECTED] on behalf of Bahta Nathaniel V Contr NASIC/SCNA Sent: Mon 7/25/2005 11:21 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Windows 2003 Cluster It had WMI

[ActiveDir] DNSAdmins security rights

2005-07-25 Thread Figueroa, Johnny
This looks to be different between 2000 and 2003 DNS servers. On 2000 DNSAdmins is granted full control to this object and all child objects. On 2003 DNS it was granted access to this object only. Does anyone know about this change and would it be o.k. to change the permissions to ...and all

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Bahta Nathaniel V Contr NASIC/SCNA
Title: RE: [ActiveDir] OT: Windows 2003 Cluster Yes, I pulled up the config gui and read the config and compared the functioning node's config with the failing nodes config and they are identical. The HBA sees all assigned LUNS as well. I dont think it is a storage issue. I have been on the

RE: [ActiveDir] OT: Windows 2003 Cluster

2005-07-25 Thread Al Mulnick
I'm interested to hear how it works out. When I mentioned the HBA, I was thinking more along the lines of ensuring that there are no issues with the physical hba. When an HBA goes, symptoms are often strange and not expected. Same for the ports and switches between the hba and the SAN.

Re: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Mark Parris
John and Sally are two of the best communicators in the business, I am looking forward to pre-conference presentation at Novembers IT Forum. I wonder if this year we will confirm if Sally has legs as in all the presentations, I have ever been to all I see is her head and torso behind her demo

RE: [ActiveDir] OT: new job

2005-07-25 Thread Kern, Tom
speaking of planning for the future- I'd like to plan for the past first. does anyone know of good examples for documenting your stuff when leaving a company? since i'm taking the job, i want to document all my changes and configs for my soon to be previous employer so they're not left high

RE: [ActiveDir] OT: new job

2005-07-25 Thread Al Mulnick
The biggest one that comes to mind is to write it with the idea that the person who reads won't be familiar with the company. By that I mean that you may want to write WHY vs. what because the next person should know the technical bits else know where to look, but nobody but you can know why

Re: [ActiveDir] OT: new job

2005-07-25 Thread Phil Renouf
On 7/25/05, Al Mulnick [EMAIL PROTECTED] wrote: The biggest one that comes to mind is to write it with the idea that the person who reads won't be familiar with the company. By that I mean that you may want to write WHY vs. what because the next person should know the technical bits else

Re: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Phil Renouf
The MS courses you mention are often available to Partners as well (not just customers with premier contracts) so you might want to check into that if you are working for an MS Partner. That NetPro webinar looks good though, I'd definitely attend that. Phil On 7/25/05, Mark Parris [EMAIL

RE: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Mark Parris
I work independently, and where I used to work at a large bank, I am now consulting for multiple organisations, so I have neither access to a premier support contract or any Microsoft partner resources. So I have to scavenge courses where I can; I am always looking for the best deals that money

RE: [ActiveDir] Disaster Recovery Training

2005-07-25 Thread Dean Wells
Hi Mark, MSEtechnology offer's a number of AD classes, some of which were formerly MS internal-only and most of which incorporate extensive DR content. I'm uncertain as to your requirements or your preferred delivery logistics. Feel free to contact me off-list if you'd like further information,

RE: [ActiveDir] OT: new job

2005-07-25 Thread joe
Title: RE: [ActiveDir] OT: new job Great answer. Why is perfect. That can tell you far more than anything else. Also if there is something specific you avoid put that in as well. Overall, this is something that should be done on a running basis even if it is just emails in your drafts

Re: [ActiveDir] OT: new job

2005-07-25 Thread Kern, Tom
Aside from notes and drafts and config dumps, is there any formal way people keep and maintain changes and documentation? Or is this all done on the fly kinda thing usually? Thanks -- Sent from my BlackBerry Wireless Handheld (www.BlackBerry.net) List info :

Re: [ActiveDir] How to find creator of computer account?

2005-07-25 Thread Steve Patrick
Hi Joe assume it means changing the policy for any machine you want this functionality on, say for instance the DC policy for only on DCs and other policies say the domain policy if you want it on all machines? Yes. Do you happen to have a setting laying about that lets you specify

RE: [ActiveDir] How to find creator of computer account?

2005-07-25 Thread Dean Wells
I may have missed the post regarding this option but since I don't see it; have you reviewed the mS-DS-CreatorSID property. It's an optional attribute per computer account. Each time a user adds a computer by utilizing a specific privilege within AD, a query is executed by the DC against all

RE: [ActiveDir] OT: new job

2005-07-25 Thread Al Mulnick
Great advice as usual. It's a usually thought of as a living document. Considering you have nothing today, it's best to start the ball rolling (so to speak) and get the basics in there. Just like a political office, it's up to the next person to decide what to do with it. In this case, they