RE: [ActiveDir] AD Sites Rename

[joe]

I am not sure how many there were but I am sure there are some number of them. I used to deal with a lot of finance folks and legal folks at a large financial company, with the exception of one financial guy who was responsible for the work to maintain the company's credit rating by figuring which loans to sell off every one of the people was treated like a normal user at our level. The guy who was responsible for the credit rating had a machine that was more powerful than our most powerful servers and had more disk capacity and backup capacity than our file servers servicing thousands of users and he wasn't tied into the domain structures at all. Mostly everyone just left him alone and didn't go into his office unless he needed a new component for his machine.   The legal people were interesting though when I started out there and would do desktop support for them. They would try to debate anything they weren't happy about and finally I just told the chief litigator lady when she was particularly unhappy about me not hooking up her own printer she brought in to her PC (they didn't have enough rights...) that I wasn't paid to debate with her and her trying to debate with me was a waste of a lot of skill and corporate dollars she could find a better use for because regardless of what she thought she could convince me of I would still do what I intended to do in the first place. After that they mostly just let me do my job. :)   The very worst were the marketing and sales people, they seemed to really believe anything they said so from what they said you would think they were the most important people in the universe. With them I didn't even bother talking, I would let them explain the problem or tell them what I was there to do and just do it, if they tried to speak outside of that I would just stand their mute until they shut up at which point I would continue again.     joe   -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm      From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, July 15, 2006 7:29 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Sites Rename ...just don't tell me how many of those clients are CPAs and Attorneys... joe wrote: LOL. :)   I have seen those. Especially A (and the general we don't have time to check out our app) because the DA's didn't want to lose their DA rights because they weren't going to be able to convert their domain, they would get migrated into the corporate domain.   The answer to all of this is management buyin. If you don't get it, you are in tough spot, but it doesn't mean you can point people out and say that is stupid and give them concrete reasons why. When I did ops we had gotten a decent hammer up front. The reason for going to AD was to help make the environment more secure and manageable. If you wanted to use the AD resources of the corporate forest, you had one option, do what we said or else you didn't get to. We didn't create trusts to NT4 domains and those legacy trusts we did have were given deadlines for termination. Also we were friends with DNS folks so anyone asking for a DNS domain with dynamic capability they were directed to us and we said no. Of course that didn't stop them from setting up their own DNS and such but it sure made their lives more difficult.   Consider that if you are moving to AD some management somewhere wanted it, it isn't just you that should be willing to stand up for it to do it right.   -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm      From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Richard Kline Sent: Saturday, July 15, 2006 2:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename Amen.   Does anyone else have departments which refuse to: <!--[if !supportLists]-->A)      <!--[endif]-->Migrate from old NT 4 domain <!--[if !supportLists]-->B)      <!--[endif]-->Apply SP2 on Windows XP workstations <!--[if !supportLists]-->C)      <!--[endif]-->Insist that Word Processing technology reached it’s zenith with Word Perfect 5.1 (for DOS) <!--[if !supportLists]-->D)     <!--[endif]-->____ Fill in the blank <!--[if !supportLists]-->E)      <!--[endif]-->All of the above Just because the old app might not work and no one has the time to test or that they may need to learn new things? By the way, if anyone from my clients subscribe to this list, then this post was written by my good-for-nothing second-cousin…. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of joe Sent: Saturday, July 15, 2006 2:02 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename I love Brian's responses. I expect some people may think responses like this are harsh but the reality of the situation is that Brian, although young, has been involved in running some seriously large environments and seen a lot of stupid crap and learned the lesson that you need to remove stupid apps from the environment until they are fixes... You don't keep things running for people if it is stupid unless everyone is aware of the stupidity and agreed upon it. You don't go into a meeting with the opinion you are going to figure out how to support the apps doing stupid things, you go in with the opinion and stating it loudly that they shouldn't be doing it stupid and need to fix it. If you don't, you as an admin, will spend most of your time dealing with stupid apps and their requirements versus what your real job should be, running AD properly. Also any time you want to upgrade the environment you will be stuck dealing with the real requirements of apps running properly as well as really stupid requirements of apps that weren't written properly and it is usually the latter that will hold you back. Why is this bad you ask??? Because some day at some point, your management's management is going to look at them and say you need to cut some costs and that is going to come all the way back to you and you will either lose hours or coworkers and you will still be trying to support all of these stupid apps that you let through previously. Trying to get them to change then is nearly impossible because they have come to expect the level of service from you of you supporting their stupid ass requirements. :)   joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brian Desmond Sent: Thursday, July 13, 2006 1:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename Will be fine unless you have some app hardcoded to them and well it should break so you can demand to have it fixed. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of James Carter Sent: Thursday, July 13, 2006 5:32 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Sites Rename Hi, I need to rename some of my AD Sites, is this likely to cause any issues I am unaware off? I use DFS if thats any help. Windows 2003 Single Domain/Forest FFL. thanks James   Do you Yahoo!? Next-gen email? Have it all with the all-new Yahoo! Mail Beta. -- Letting your vendors set your risk analysis these days? http://www.threatcode.com If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will hunt you down... http://blogs.technet.com/sbs List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx