Correction: this is the kind of "Stuff" It's like talking to a wall queue should have been cue. sorry long day. :( i should read my emails before sending. :)
-----Original Message-----
From: Jennifer Fountain on behalf of Jennifer Fountain
Sent: Tue 7/15/2003 9:38 PM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir] Service pack 4 and DCs
Thanks for the info.
This kind of stuff is why I am looking for another job. To have two admins
and one of them that totally half a$$es all projects, doesn't like change, thinks
security is "stupid" (exact quote), doesn't communicate any changes and doesn't read
his email - aggg!!!!
This is the same person that enabled telnet on the firewall because he didn't
know how to connect using ssh! It's like talking to the way when talking to
managers.... So, that's my queue to leave...
Ok. I feel better now. :)
Thanks again!
Jenn
-----Original Message-----
From: Joe [mailto:[EMAIL PROTECTED]
Sent: Tue 7/15/2003 9:16 PM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir] Service pack 4 and DCs
Jenn,
I expect you will be ok. The biggest issue I can think of would be
inconsistency of some functionality such as the N-2 password functionality and the
change in password change replication for pdc chaining. I am sure there are other
things that wouldn't react consistently either. This would result in some interesting
troubleshooting.
<jumps onto soapbox>
This is a perfect example of why Domain Controllers in a forest for a
company should be maintained by a very small very closely controlled very tightly
coupled very paranoid group of admins. They should sit next to each other so they can
whap each other up side the head when needed and have the same management chain so all
internal differences are settled quickly with minimum escalation. People going off and
just doing things to a domain controller could potentially be career ending for the IT
manager and make life extremely difficult for the company as a whole if they actually
depend on functionality of their PC's.
It is entirely feasible to run very large very globally decentralized
structures with a very small centralized administration group. Running in that way you
have a better grasp over your core security (authentication/authorization)
infrastructure.
<falls off soapbox>
I think if I had to sit in your shoes I would be relegating that admin
to guest level access and giving him a 1MB email quota so he can't hurt himself as
well as anyone else.
good luck, joe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Jennifer Fountain
Sent: Tuesday, July 15, 2003 8:51 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Service pack 4 and DCs
I had an admin install sp4 on one of my DCs without
coordinating it with me (and the other admins) while the other DCs are still running
sp2. I was in the middle of testing sp4 and planning to upgrade all dcs to sp3 when I
was told - that dc is already at sp4. What type of issues should I except from having
one dc running at a higher sp than the others and has anyone ran into any problems
with sp4?
Cheers,
Jenn
"Cynicism is an unpleasant way of saying the truth"
<<winmail.dat>>
