> The DS Backup API I would be fully expecting to work while the DIT is "online".
Yeah it's the DS Backup API that I am currently using busy looking at VSS right now to see what better methods that offers one. > Single User Mode Awesome so I lived and learnt :) > schema explorer Yeah I have really revamped it and Guido also gave me some wonderful feedback along with plenty others, once I have assembled all the pieces I will send you guys a new version of the tool. I am in two minds whether I should redo the tool in .net 2.0 or just deploy it currently running on .net 1.1. DNS -- owww come on Joe its not like DNS is one of AD sore points :P DNS is your friend (heheh *Chuckle* *Chuckle* *Chuckle* *Chuckle*) Carlos Magalhaes -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: 29 April 2005 05:46 PM To: [email protected] Subject: RE: [ActiveDir] [OT] ESE API Documention.... Captain Crunch did indeed win. I didn't look really close, is your backup doing a table by table read or are you using the DS backup API. The DS Backup API I would be fully expecting to work while the DIT is "online". The reading/writing through the ESE API I would expect to be locked while the DIT is online. > Can you define "single user mode"? Sorry, showing my age. Single User Mode (also sometimes known as Console mode though that confuses most people now) is when a multi-user system is taken "offline" to allow for maintenance, etc. I have been using that term or the Console Mode term for 20 or so years. I believe every environment that works with multiple simulataneous users be it Unix, Unix wannabees, the various main/midi/mini-frame run time systems / OSes, etc all allow for a single user mode. It alows you to manipulate the environment without worrying about putting current running users/processes dependent on that multi-user environment into a unsupported/unstable/discontinuous state. For instance on the DEC PDP-11's I used to work on in high school could be put in single user / console mode and then only one single console hooked directly into the machine itself in a special port would function. It is changed a little now but in the Windows AD world the equivilant is DSRM. On the other tools, I tested your schema explorer tool a while back and sent a bunch of feedback and you said you would get right on it and I don't recall hearing anything else. However that could have been my email. I have had a number of issues with my email as my old provider was getting really sucky. I ended up bouncing away from them a week or so ago and I still trying to settle things down now. I couldn't read this list for about a week or two in the switchover. I am glad to see that Dean picked up my slack and did a lot of posting. :o) But is was about DNS so I didn't really want to read that icky stuff... joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carlos Magalhaes Sent: Friday, April 29, 2005 9:43 AM To: [email protected] Subject: RE: [ActiveDir] [OT] ESE API Documention.... Heheh - I love Captain Crunch :) Eric knows about the app. The backup currently can only be run when you on the DC (does not need to be in DSRM it can run while DC is online) ****HOWEVER I figured out how to use VSS which allows remote backups of the DC. But there are still other obstacles :S This by no means is a :P look what I can do, like I told Eric when I was chatting to him about this I was interested in the DIT so I tried to figure things out. Like I am interested in the replication module now but still haven't a clue :P or close to the clue I would like to have Can you define "single user mode"? "Maybe I should warn Carlos not to accept any visitors from Microsoft?" HEHEHE I would love visitors remember I am a geek I don't get to see many people :P, I would love to learn more. *****DISCLAMER***** Again this app was not designed for any other reasons than merely trying to figure out something's in the DIT :) Joe - and you didn't comment on the other tools :P - shame on you! Carlos -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: 29 April 2005 03:14 PM To: [email protected] Subject: RE: [ActiveDir] [OT] ESE API Documention.... LOL. Part of me is thinking, oh cool! Go Carlos! Part of me is thinking, oh crap! Darn you Carlos! Part of me is thinking, I wonder what the security ramifications are of this functionality? Besides the obvious ones about passwords w/ reversible encryption of course. Part of me is thinking, wow, I know a bunch of people just perked up when they read that they can extract the reversible passwords out in clear text... Part of me is thinking, you probably have to be in single user mode for this to work on a current AD DIT. At least I hope so. Which will make most of the people who perked up before go back to sleep. Part of me is thinking, I wonder what Brett and ~Eric are thinking and Stuart of the Ottawa Kwan Clan is thinking (assuming he is still lurking). Maybe I should warn Carlos not to accept any visitors from Microsoft? Part of me is thinking, what should I have for breakfast? Captain Crunch? :o) joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carlos Magalhaes Sent: Friday, April 29, 2005 5:52 AM To: [email protected] Subject: RE: [ActiveDir] [OT] ESE API Documention.... Joe, Check - http://www.dirteam.com/dirteam/site/3338/default.aspx out, look right at the bottom for "Active Directory Power Tool" this is the dit decompiler I built using a lot of these functions. The funky part (depending on how you look at it and knowing you Joe this wont be funky) it was built in .net :) It allows you to rip open the dit and have a look inside. I haven't exposed the meta data inside the dit as I am working on different version that will use the meta. I built it for both AD and ADAM (same type of structures). One interesting part is as you can see this application will automatically expose all Reversible Encrypted passwords stored in the database. But I agree this is a great portal. AD programming? - http://groups.yahoo.com/group/adsianddirectoryservices Carlos -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: 29 April 2005 06:03 AM To: [email protected] Subject: [ActiveDir] [OT] ESE API Documention.... This sort of shocked me when I saw it... http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ese/ese /por tal.asp JET Blue AKA ESE API documentation in case you are a c/c++ coder and want to use it yourself.... I just keep clicking through the functions thinking... Wow, I can't believe after all of these years they published this info. Quite cool. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
