Joe?
joe? me?
The TS Attributes are
stored in an amazingly efficient and highly useful format called a blob. Blob as
you may or may not know stands for Big Lump of ahhhh, Ok, for now on we will
call what the TS attributes are stored in a Blos. So this Blos is kept in
the userParameters attribute. It is a form of a name value pair setup but is
entirely undocumented by MS and dorking with it is surely going to impact how
PSS supports you when you encounter an issue. Instead of hearing the ubiquitous
"That is By Design" or "I need you to crash the server and send us a dump" you
will hear the almost as ubiquitous "That is unsupported" or "You are
Unsupportable in that state". There have been some attempts in the SAMBA space
to decode that information and I am not at liberty to say how they are doing on
it but keep in mind, they may not have access to all different configs using
that attribute because TS attributes are not the only ones that go in there.
Yes, Microsoft had the
opportunity to fix the issues with that and userAccountControl 6+ years ago with
the release of AD and yes they did refuse that opportunity. On the positive side
some thought is now going into userAccountControl nowadays with ADAM though it
is still quite quite..... quite rough. TS attributes unfortunately, are still
dorked. I don't see that they are attempting to clean it up either, maybe they
(MSFT) are hoping they (the attributes) will just get sick and tired of being
treated like second class citizens and just go away. When people ask me about
setting them with admod I tend to say, go away, don't come back until you grow
up and become real attributes. You can set it with admod right now, you just
need to know the actual binary chunk to send into admod to do it.
joe
Mike,
Scratch that. It is not the string I was thinking about.
I'm sure Joe will know though :)
From: [EMAIL PROTECTED]
To: [email protected]
Subject: RE:
[ActiveDir] TScmd help
Date: Wed, 3 May 2006 16:38:42 -0500
Mike,
Can you use ADfind and ADmod
for this?
ADfind -h <DC>
-Default -f "(TSpath=Blah)"
-dsq | ADMOD tspath::NewPath
Now I don't remember f TS path (I know it's not the
attribute name so you will need to look at it) is a
string value or if t's contained in that blob value with the other TS settings.
just an Idea
> Subject: [ActiveDir] TScmd help
> Date: Wed, 3 May 2006 15:12:42
-0600
> From: [EMAIL PROTECTED]
> To:
[email protected]
>
>
I need to try and find users who have a certain TS Profile path and
>
change the server name.
>
>
It is W2K/W2K3 mixed.
>
I have googled and have tscmd, but can tell I will be needing to do some
>
voodoo also. Any help is appreciated.
>
> Mike Hutchins
> Sys Admin
>
[EMAIL PROTECTED]
>
List info : http://www.activedir.org/List.aspx
>
List FAQ : http://www.activedir.org/ListFAQ.aspx
>
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Upgrade for free to Windows Live Mail beta and you could win an African Safari
Learn more
Enter the Windows Live Mail beta sweepstakes
Upgrade today
