~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of Dave A. Marquis : Subject: RE: [ActiveDir] 2003 SP1 RTM : : Also the Network Access Quarantine Control components : are new... Sounds like a mess if for some reason it : ever gets turned on mysteriously as some times happens in : AD... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
They are not "new" per se. They were included in the Windows 2003 Resource Kit Tools IIRC. I'm not entirely sure how they would just "turn on" mysteriously either. Computers aren't governed by "black magic" you know. :-) Things happen for a reason. Whether that reason is fathomable by a particular user or administrator is another question. But that just reflects most of life - there are lots of things (most of nature comes to mind) that are not explainable (beyond the very rudimentary) by a layman (as compared to an expert in the field). ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ : I am of the opinion to wait it out a bit and see how the fall : out goes on Win SP1... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sure - waiting to see others experience is always a way of getting additional information on a product. But I think you really should be reading the documentation (and testing the product) as well. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ : Also I think the firewall that is included is the bane : to all corporate admins as it is a headache to use in : this inviroment. I can explain further if anyone is interested... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The firewall is not "on" by default - you will need to explicitly enable it. Hopefully that addresses some of your concerns in that area. Cheers Ken : David A. Marquis : Computer Systems Administrator : : : -----Original Message----- : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido : Sent: Thursday, March 31, 2005 4:08 PM : To: ActiveDir@mail.activedir.org : Subject: RE: [ActiveDir] 2003 SP1 RTM : : I'd add these as important ones to the list: : : 15) ability to set cetain attributes to be "confidential" - i.e. they : can't be read with normal "Read" permissions on an object : : 16) ability to configure Drag & Drop in ADUC : : 17) ability to configure visibility of foreign Universal Group memberships : in ADUC : : /Guido : : -----Original Message----- : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of Nathan Muggli : Sent: Donnerstag, 31. März 2005 21:38 : To: ActiveDir@mail.activedir.org : Subject: RE: [ActiveDir] 2003 SP1 RTM : : We'll be releasing documentation soon. : : For now, here's a quick list of new features (note this is a not a : comprehensive list for AD). : : 1) Support for DCs in Virtual Servers. Replication is halted and the : system stops advertising if an improper restoration has occurred (USN : rollback). : : 2) Replication resolves additional forms of DNS names in order to be more : robust and work sooner after install. Also improved event log text when : there is a failure. : : 3) Improve group membership consistency on authoritative restore : : 4) Report if a directory partition has not been backed up recently : : 5) Report if a FSMO role holder is set incorrectly or is not responding : : 6) DNS diagnostic test for dcdiag.exe : : 7) Authentication diagnostic test for dcdiag.exe : : 8) Improved event log text with common repair steps included. There are : existing w2k3 messages that are updated, and there are entirely new : messages. : : 9) Improved metadata cleanup for FRS objects : : 10) Retain application partitions on IFM : : 11) New default tombstone lifetime for new forests created using sp1 : : 12) Faster FSMO validation when FSMO holder has partners in other sites : : 13) During forced removal, warn administrator if important roles will be : orphaned : : 14) Ability of Dirsync api to return "partial tombstones" in order to : allow directory synchronizing applications to learn of object deletions : : -----Original Message----- : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED] On Behalf Of Francis Ouellet : Sent: Thursday, March 31, 2005 10:50 AM : To: ActiveDir@mail.activedir.org : Subject: RE: [ActiveDir] 2003 SP1 RTM : : Hi Eric, : : Sorry David for hijacking your thread :) : : Other than the tombstone life on clean installs of AD on SP1 what are the : major impacts of SP1 on an AD deployment? Is the a public document that : outlines the changes? : : Thanks, : Francis : : -----Original Message----- : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED] .org] On Behalf Of Eric Fleischman : Sent: 31 mars 2005 13:27 : To: ActiveDir@mail.activedir.org : Subject: RE: [ActiveDir] 2003 SP1 RTM : : Dave can you quantify this statement please? I ask out of curiosity, not : disagreement. : : Specifically: : 1) You referred to SP1 having "too many changes." How did you make this : determination? What is the threshold where we cross in to too many? : 2) What steps will you be going through between now and when you do : install it? What will you do between now and deployment to give you the : confidence level you need to fire it up on a box and see how it goes? : : Interested, so we can perhaps think through ways to make that less painful : going forward. : ~Eric : : : -----Original Message----- : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED] On Behalf Of Dave A. Marquis : Sent: Thursday, March 31, 2005 8:37 AM : To: ActiveDir@mail.activedir.org : Subject: RE: [ActiveDir] 2003 SP1 RTM : : I am certainly going to be waiting to install this one for a while........ : to many changes to jump right into it. : : David A. Marquis : Computer Systems Administrator List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
