RE: [ActiveDir] Two questions

[Rick Kingslan]

Title: Message

Vladmir,   Hmmmm.  Yep - blew that one.  samDomainBase is a class - not an attribute.  Many pardons, but it's apparently not what I though it was.   Thanks for clearing this up.  I'll look into it further later.   Rick Kingslan - Microsoft Certified Trainer   MCSE+I on Windows NT 4.0   MCSE on Windows 2000   MVP [Windows NT/2000 Server] "Any sufficiently advanced technology is indistinguishable from magic."   ---  Arthur C. Clarke -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Turin, Vladimir Sent: Thursday, September 26, 2002 12:37 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Two questions     Let me to retort. Rick is right about netbios domain name is what you are after. But there is no such an attribute "samDomainBase".   Easiest way to figure out netbios domain name is to call DsGetDCName API function.   If you need to do it just by querying AD - it's not so easy. Procedure looks like: 1. Get DN of the domain with that user. 2. Find crossRef object in Configuration/Partitions container where attribute nCName = DN of the domain 3. Get nETBIOSName attribute of that object.   Good luck. Vladimir.   -----Original Message----- From: Rick Kingslan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 25, 2002 5:53 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Two questions Todd,   If I read this correctly, you are interested in finding out what NetBIOS domain name the user account is in, correct?  The up-level domain name is NOT grayed out, so this must be it (process of elimination and assuming same privilege in AD U&C).   Yes, it is.  I believe that the attribute 'samDomainBase' is what you are after.   As to the Exchange issue - IIRC, you should be able to associate the other BOB via adding his account to the primary user account in Exch Adv tab (and vice versa, if desired) and apply the (here's where the memory gets fuzzy....) READ, (the second to the last perm - whatever that is.... don't remember), and Associate External Account.   Rick Kingslan - Microsoft Certified Trainer   MCSE+I on Windows NT 4.0   MCSE on Windows 2000   MVP [Windows NT/2000 Server] "Any sufficiently advanced technology is indistinguishable from magic."   ---  Arthur C. Clarke -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, September 25, 2002 7:41 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Two questions Is there a way to query the AD and find out what domain the account is in.  In AD users and computers there is a field next to the samAccountname field that tells you what domain the account is in.  It is grayed out so you can't change it.  Is that field query able?   Second   We support Exchange 5.5 mailboxes with multiple authentication credentials from different domains and this appears to work in AD and Exchange 5.5 without a problem.  Users can access E 5.5 mailboxes via POP, IMAP or MAPI using alternate credentials with no problem.  There have been some questions raised by members in our group about of this is still supported with  the move to Exchange 2000 and the use of virtual servers for POP, IMAP and OWA.  They feel it might cause a problem because of the way the virtual servers reference the mailbox and account.    Here is a brief description       Dom1 <-Two Way Trust-> Dom2     ExMBX Primary NT account Dom1\bob, permissions given to Dom2\bob2.       MAPI and POP/IMAP work in E5.5     MAPI is confirmed to work in E2K,     What about pop, imap and owa?  will the BOB2 account still be allowed to access the mailbox?   We are setting it up in the lab now, but any input is appreciated.   Thanks in Advance   Todd