RE: [ActiveDir] Service pack 4 and DCs

[Jennifer Fountain]

Thanks for the info.
 
 
This kind of stuff is why I am looking for another job.  To have two admins and one of 
them that totally half a$$es all projects, doesn't like change, thinks security is 
"stupid" (exact quote), doesn't communicate any changes and doesn't read his email - 
aggg!!!!
 
This is the same person that enabled telnet on the firewall because he didn't know how 
to connect using ssh!  It's like talking to the way when talking to managers.... So, 
that's my queue to leave...
 
Ok. I feel better now. :)
 
Thanks again!
Jenn

        -----Original Message----- 
        From: Joe [mailto:[EMAIL PROTECTED] 
        Sent: Tue 7/15/2003 9:16 PM 
        To: [EMAIL PROTECTED] 
        Cc: 
        Subject: RE: [ActiveDir] Service pack 4 and DCs
        
        
        Jenn,
         
        I expect you will be ok. The biggest issue I can think of would be 
inconsistency of some functionality such as the N-2 password functionality and the 
change in password change replication for pdc chaining. I am sure there are other 
things that wouldn't react consistently either. This would result in some interesting 
troubleshooting.
         
        <jumps onto soapbox>
        This is a perfect example of why Domain Controllers in a forest for a company 
should be maintained by a very small very closely controlled very tightly coupled very 
paranoid group of admins. They should sit next to each other so they can whap each 
other up side the head when needed and have the same management chain so all internal 
differences are settled quickly with minimum escalation. People going off and just 
doing things to a domain controller could potentially be career ending for the IT 
manager and make life extremely difficult for the company as a whole if they actually 
depend on functionality of their PC's. 
         
        It is entirely feasible to run very large very globally decentralized 
structures with a very small centralized administration group. Running in that way you 
have a better grasp over your core security (authentication/authorization) 
infrastructure. 
        <falls off soapbox>
         
        I think if I had to sit in your shoes I would be relegating that admin to 
guest level access and giving him a 1MB email quota so he can't hurt himself as well 
as anyone else. 
         
         good luck, joe
         
         

                -----Original Message-----
                From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
Jennifer Fountain
                Sent: Tuesday, July 15, 2003 8:51 AM
                To: [EMAIL PROTECTED]
                Subject: [ActiveDir] Service pack 4 and DCs
                
                

                I had an admin install sp4 on one of my DCs without coordinating it 
with me (and the other admins) while the other DCs are still running sp2.  I was in 
the middle of testing sp4 and planning to upgrade all dcs to sp3 when I was told - 
that dc is already at sp4.  What type of issues should I except from having one dc 
running at a higher sp than the others and has anyone ran into any problems with sp4?



                Cheers, 
                Jenn 

                "Cynicism is an unpleasant way of saying the truth" 

<<winmail.dat>>