"And further, I am not trying to say I am always right. Quite the contrary, fully 50% of what I say is flat out incorrect, made up, or complete opinion. Your job is to try to figure out what is and isn't in that 50%."
joe, I will not be signing my emails to you anymore with "YMYMYM" Unless of course, your recant. RH ___________________________________________________________ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of joe Sent: Wednesday, January 18, 2006 9:36 PM To: [email protected] Subject: RE: [ActiveDir] AD computer accounts being removed And further, I am not trying to say I am always right. Quite the contrary, fully 50% of what I say is flat out incorrect, made up, or complete opinion. Your job is to try to figure out what is and isn't in that 50%. Preferably prior to changing your environment based on something I said. :o) Or to put it another simpler way, mileage varies. What works very well for me may not be in your best interest. I would like to hear the technical details behind the SID issues from that article though. Maybe I will follow the link. Though I doubt what I want is there. Very little serious deep tech in that mag anymore. The tech stuff I previously wrote for them they stopped putting in the mag and started putting in their over the top highly overpriced "professional newsletters" that were $100+ for 12 tiny little issues that looked like a small school newspaper. joe -----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 18, 2006 9:14 PM To: '[email protected]' Subject: RE: [ActiveDir] AD computer accounts being removed Don't get me wrong though... Sysprep/newsid, follow the process. I am absolutely not telling people to image machines and deploy them without cleaning them up. If you have odd things happening and are not following the recommended processes, it is all on you and you get to take responsibility for what you do. :) -----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 18, 2006 9:01 PM To: '[email protected]' Subject: RE: [ActiveDir] AD computer accounts being removed I would like to see the details of what the issues are. Windows IT Pro mag is a nice mag and all, but there is no real technical review of the articles, you can say about anything you want to and I have seen several examples. Ditto for Redmond Mag and SearchWindows*, etc. I don't think the people actually test the stuff they say in a lot of those articles though they try to state it authoritatively. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of AdamT Sent: Wednesday, January 18, 2006 8:22 PM To: [email protected] Subject: Re: [ActiveDir] AD computer accounts being removed On 1/19/06, Aaron Visser <[EMAIL PROTECTED]> wrote: > > Taken from > http://www.sysinternals.com/Utilities/NewSid.html under the SID > Duplication Problem > > > snip Taken from: http://www.windowsitpro.com/Article/ArticleID/14919/14919.html At the start of the GUI phase of installation each NT/2000 installation generates a unique Security IDentifier (SID). If you then clone a workstation each installation would have the same machine SID. This is not a problem in a Windows NT 4.0 domain as users have a SID generated by the domain controller and do not user the local workstation SID for security. It IS a problem in a Windows 2000 domain as the local machine SID is used in nearly all aspects of security and before migrating to 2000 you should resolve any duplicate SID issues which may have been caused by cloning installations. -- AdamT "Maidenhead is *not* in Kent" List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
