[ActiveDir] AD Problems after install

Dear all, I am experiencing some problems with replication after my initial install of AD and a second DC. Also I had some error during a GPO backup procedure from GPMC. Finally a WINS replication error. All you help is much appreciated. Cheers, George The follwing error occurred during the

RE: [ActiveDir] OT XP SP2

Did this happen on one machine or many machines? I have XP SP2 installed on several workstation and have not seen this problem. Dennis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cothern Jeff D. Team EITC Sent: Wednesday, September 01, 2004

RE: [ActiveDir] IIS and Scripting Question

Hunter, Thanks for your reply. I must say that in the many times I have asked this question, you have probably given me the best answer. I have always received something like, we just do it because it is easy , I dont know, no one said that it wasnt okay so why not do it? or something

[ActiveDir] windows 2000 directory permissioning

this post relates to the general tenet of permissioning of AD objects - ou's et al - and seeking views on how ACL's are applied to OU (or for that matter any directory object I suppose) all the delegation references seem to indicate that group objects should be used as ACE's - totally happy with

RE: [ActiveDir] Deleted computer account

Huh. Nice idea. Worked like a charm, at least as far as I can see. Certificate paths seem to be OK, no errors in event log yet. Thanks! ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message-

RE: [ActiveDir] GPO Question

Thanks!!! That helped out! But now I have another question In the Screen Saver Section of the GPO: Screen Saver is enabled but no executable is specified, time is set. I know that if you do not have a screen saver specified in the configuration, the screen saver setting will

[ActiveDir] Using CMD

Alright I am trying to use CMD on windows XP, my account is setup as a local admin and all the other admin settings I could think of. But in cmd it defaults to my home dir. H:\ so I need to be in C:\ I type cd C:\directory and it does nothing, no error and doesn't swich dir. How do I

RE: [ActiveDir] Using CMD

Type c: and hit enter? CD won't switch drive letters, only directories... ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: Jacob Stabl [mailto:[EMAIL PROTECTED] Sent: Thursday,

Re: [ActiveDir] Using CMD

Hi Jacob From the command prompt type C: You can then do your cd directoryname . Regards; James R. Day National Park Service - AD Core Team (202) 354-1464 Fax (202) 371-1549 [EMAIL PROTECTED] |-+-- | | Jacob Stabl| |

RE: [ActiveDir] windows 2000 directory permissioning

Hello Graham - as always: it depends... and this is mostly about if you're in a single domain or multi-domain forest. in a single domain, the group-scope obviously doesn't matter - you can even nest groups of the same type to achieve any nesting, if you need it. Nesting still makes sense at

Re: [ActiveDir] Using CMD

cd /d drive:path cd /d c:\path have fun, John Jacob Stabl [EMAIL PROTECTED]

RE: [ActiveDir] Using CMD

If you want to change drive letters AND directories with the CD command you need to use the /d flag.. ie. h: cd /d c:\temp ... then you will be in the c:\temp HTH Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacob Stabl Sent: Thursday,

RE: [ActiveDir] Using CMD

You actually did something - you just didn't see it: you switched the current directory for the C: drive to C:\directory. So if you'd switch to the drive (via c: [enter]) even after you typed the change directory command, you should be in C:\directory. -Original Message- From: [EMAIL

RE: [ActiveDir] Using CMD

Type the following at the H:\ command prompt C:press the enter key Cd\press the enter key WAL LA your there -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacob Stabl Sent: Thursday, September 02, 2004 12:28 PM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] IIS and Scripting Question

Edwin - It has been our opinion for years (since our NT4 days) that having non-domain servers reduces the attack surface. It is just that: an opinion. Microsoft's recommendations for shared hosting solutions recommends usage of an active directory. (See

RE: [ActiveDir] IIS and Scripting Question

This is an accurate representation of my environment. I don't see how I do that stuff in script. :-) Is this documented somewhere? Thanks, Michael -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Schaefer Sent: Wednesday, September 01, 2004 8:28 PM

RE: [ActiveDir] GPO Question

I don't think that's possible through the available GPO settings. One option would be to set up a second GPO that specified a particular screen saver, and then use a WMI filter to only apply that GPO to users who had not chosen anything for a screen saver. Hunter -Original Message-

RE: [ActiveDir] GPO Question

I have used WMI from pulling data. Where can I read about doing this to GPO's? Is this through an external script? Thanks, Mario -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Thursday, September 02, 2004 1:01 PM To: '[EMAIL

RE: [ActiveDir] GPO Question

My GPO is as follows: Activate Screen Saver: Enabled Screen Saver EXE Name: NOT CONFIGURED Password Protect Screen Saver: Enabled Screen Saver Timeout: Enabled (1200 sec) That config will allow the user to choose their own screen saver but not allow them to change the lock screensaver feature or

[ActiveDir] distinguished name Question?

Is it possible that you can have one object in Active Directory without distinguished name? Thanks Mike

RE: [ActiveDir] GPO Question

I would expect there to be information about this on Microsoft's site. Another starting point: http://www.serverwatch.com/tutorials/article.php/2205741 -Original Message- From: Rosales, Mario [mailto:[EMAIL PROTECTED] Sent: Thursday, September 02, 2004 12:08 PM To: '[EMAIL PROTECTED]'

RE: [ActiveDir] distinguished name Question?

I would say no. :o) joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike HogenauerSent: Thursday, September 02, 2004 2:46 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] distinguished name Question? Is it possible that you can have one object in Active Directory

RE: [ActiveDir] Using CMD

As mentioned by others to do drive and folder switching at once cd /d driveletter:\folder cd /d c:\ or Driveletter: cd folder c: cd \ Even cooler, in my opinion pushd driveletter:\folder pushd c:\ That also works with unc's pushd \\server\share\folder\subfolder It

Re: [ActiveDir] Using CMD

Somebody has too much time on their hands. -- Cubic Corporation San Diego, Ca. -Original Message- From: joe [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Sent: Thu Sep 02 15:14:14 2004 Subject: RE: [ActiveDir] Using CMD As mentioned by others to do

RE: [ActiveDir] distinguished name Question?

I would so no as well. I would also ask why would you want to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, September 02, 2004 3:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] distinguished name Question? I would say no. :o)

RE: [ActiveDir] Using CMD

LOL if I did I wouldn't have 600+ emails from this list to go through. :o) Plus if I did, I would rewrite pushd so it did wildcards, probably like the old ncd program. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Seitz, Peter Sent: Thursday,

RE: [ActiveDir] Exchange Schema question

Ah. I thought maybe I could just point the fields in the schema to where the mailbox _eventually-will-be_. But, alas, I will take Joe up on his most generous offer of Joeware. Thanks. _ From: Brian Desmond [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 01, 2004 7:21 PM To:

RE: [ActiveDir] distinguished name Question?

Me too. How's AD to find something if the something doesn't have a name? --Brian -Original Message- From: joe [mailto:[EMAIL PROTECTED] Sent: Thu 9/2/2004 5:08 PM To: [EMAIL PROTECTED] Cc: Subject: RE: [ActiveDir] distinguished name

RE: [ActiveDir] Way OT - Using CMD

For cripes sake, joe - can't you just give a simple one or two line answer? Somebody asks you what time it is, you're still engaged two hours later detailing the equipment needed to create the gears of the watch.. ;op (luv ya, bud!) -rtk -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] distinguished name Question?

Hmmm. Me too. ;o) -rtk From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Thursday, September 02, 2004 5:08 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] distinguished name Question? I would say no. :o) joe From: [EMAIL PROTECTED] [mailto:[EMAIL

[ActiveDir] user object security

In ADUC, on the security tab of any user, why is the everyone group selected to allow change password?

RE: [ActiveDir] user object security

So people can change passwords. :o) That is the permission that allows you to specify an old password and replace it with a new password. So for instance, lets say I as user joe want to change the password of user service. If I didn't have the right to change password, even if I know the

RE: [ActiveDir] Way OT - Using CMD

Haha. Man that will teach me to respond. Or maybe it will teach me to harass you on book length signatures. eg joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Thursday, September 02, 2004 8:08 PM To: [EMAIL PROTECTED]