Re: [ActiveDir] Logon script with Admin rights **Work Around**

2005-07-28 Thread Peter Jessop
You might want to look at alternatives to VBScript. I have been using VBScript for some time now. I has several points in it's favour. 1. Simplicity 2. Many examples. However it has certain limitations. 1. Limited syntax 2. No GUI (except HTAs which awkward to write) 3. Very limited free

[ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-28 Thread Robert.Contreras
Hello All, Looking to decide on an AD domain structurein a single forest. The options on the table are;1. Dedicated root domain (x.com) and child domains (i.e. a.x.com,b.x.com etc.) based on the regions.2. Dedicated root domain (x.com) and other domains (i.e. a.com andb.com etc.) based on

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-28 Thread Peter Johnson
Im partial to a dedicated, empty root as it allows for more flexible pruning and grafting and has they added advantage of extra schema security etc as you will never need to log in to the empty root except for schema updates etc. Regards Peter Johnson From: [EMAIL

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-28 Thread Almeida Pinto, Jorge de
see the archives as a few days ago I answered to a similar question http://www.mail-archive.com/activedir@mail.activedir.org/msg31336.html #JORGE# From: [EMAIL PROTECTED] on behalf of Peter Johnson Sent: Thu 7/28/2005 2:07 PM To: ActiveDir@mail.activedir.org

Re: [ActiveDir] turn off replication to a DC in same site

2005-07-28 Thread Steve Schofield
Hi Brett, Thanks again for the command and it works well. Few follow-up questions. Would this command be run only on the DC that I want to disable the inbound replication or should I also consider on the other two DC's disabling OUTBOUND to this single DC or is that not an option. Apologize

RE: [ActiveDir] 2003 sp1 security agent

2005-07-28 Thread Grillenmeier, Guido
The one recommendation to make is that for DCs it's ok to use SCW to disable extra services you may not use on these machines (e.g. Error Reporting Service, Application Experience Lookup Service etc. ), however, you should not enable the Windows FW on DCs. If you do need to protect access to your

[ActiveDir] Domain Report Manager

2005-07-28 Thread Lou Vega
Hello all, I know the subject comes up now and again on the list of whether or not someone knows of a good, easy to use and *free* tool for performing a domain wide inventory of hardware and or software. I found this yesterday when I was looking for ideas to update my current scripts after

[ActiveDir] _gc and _ldap SRV records

2005-07-28 Thread Creamer, Mark
A question about DNS SRV records for my DCs and Global Catalog servers...should every AD-integrated DNS server in my entire forest have _gc and _ldap records for every GC and DC in the forest? It looks like the records listed vary from one domain to another in my DNS, and I wonder if they

RE: [ActiveDir] _gc and _ldap SRV records

2005-07-28 Thread Almeida Pinto, Jorge de
Each DNS zone representing an AD domain has a _MSDCS DNS subdomain. All DCs register belonging to a certain domain register their DNS domain wide records in their own _MSDCS DNS subdomain. However each DC and GC also register forest wide records (e.g. CNAME and _GC, etc). It is a best practice

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-28 Thread Sakari Kouti
Hi Robert, Jorge wrote on Sunday "The only different is politics and feelings" and I mostly agree with him. In addition, I list three non-reasons to have multiple forests: - A client once showed me a book that suggested a "peer-root" domain model. In the model, the forest root domain

[ActiveDir] User to computer

2005-07-28 Thread Kern, Tom
Is there anyway via VBscript(or another way) to find out on a large scale which user is logged on to which desktop? The company I'm working at right now put all their computer objects in the computer folder and I want to move some user's(about 40) pc's to an ou so I can push out an msi via

Re: [ActiveDir] User to computer

2005-07-28 Thread Tomasz Onyszko
Kern, Tom wrote: Is there anyway via VBscript(or another way) to find out on a large scale which user is logged on to which desktop? You can try to use psloggedon.exe - http://www.sysinternals.com/Utilities/PsLoggedOn.html Another solution is to deploy LimitLogon:

RE: [ActiveDir] Demoted DC Lives On

2005-07-28 Thread Noah Eiger
Title: [ActiveDir] Demoted DC Lives On Thanks. Manually removing it seemed to work. It did not show up under /showreps. -- nme From: Steve Linehan [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 27, 2005 8:08 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]

RE: [ActiveDir] User to computer

2005-07-28 Thread freddy_hartono
If you didn't clear the lastlogon username security settings - I guess this may help to query which machine belongs to which user. (Not the other way unfortunately) reg query \\server\HKLM\software\microsoft\windows nt\currentversion\winlogon /v defaultusername reg query