Re: [ActiveDir] AD Sites Rename

[Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]]

...don't I know it dear....we should be the shining light..the beacon of secure software... and instead we're the poster child of crappy apps... www.threatcode.com (And the Secure Development Lifecycle book from Howard/Lipner only served to make me more ashamed of my industry's software) Brian Desmond wrote: The software you CPA folks use is actually particularly well known for being crappy.   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, July 15, 2006 6:29 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Sites Rename   ...just don't tell me how many of those clients are CPAs and Attorneys... joe wrote: LOL. :)   I have seen those. Especially A (and the general we don't have time to check out our app) because the DA's didn't want to lose their DA rights because they weren't going to be able to convert their domain, they would get migrated into the corporate domain.   The answer to all of this is management buyin. If you don't get it, you are in tough spot, but it doesn't mean you can point people out and say that is stupid and give them concrete reasons why. When I did ops we had gotten a decent hammer up front. The reason for going to AD was to help make the environment more secure and manageable. If you wanted to use the AD resources of the corporate forest, you had one option, do what we said or else you didn't get to. We didn't create trusts to NT4 domains and those legacy trusts we did have were given deadlines for termination. Also we were friends with DNS folks so anyone asking for a DNS domain with dynamic capability they were directed to us and we said no. Of course that didn't stop them from setting up their own DNS and such but it sure made their lives more difficult.   Consider that if you are moving to AD some management somewhere wanted it, it isn't just you that should be willing to stand up for it to do it right.   -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Richard Kline Sent: Saturday, July 15, 2006 2:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename Amen.   Does anyone else have departments which refuse to: A)      Migrate from old NT 4 domain B)      Apply SP2 on Windows XP workstations C)      Insist that Word Processing technology reached it’s zenith with Word Perfect 5.1 (for DOS) D)     ____ Fill in the blank E)      All of the above   Just because the old app might not work and no one has the time to test or that they may need to learn new things?   By the way, if anyone from my clients subscribe to this list, then this post was written by my good-for-nothing second-cousin….             From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of joe Sent: Saturday, July 15, 2006 2:02 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename   I love Brian's responses. I expect some people may think responses like this are harsh but the reality of the situation is that Brian, although young, has been involved in running some seriously large environments and seen a lot of stupid crap and learned the lesson that you need to remove stupid apps from the environment until they are fixes... You don't keep things running for people if it is stupid unless everyone is aware of the stupidity and agreed upon it. You don't go into a meeting with the opinion you are going to figure out how to support the apps doing stupid things, you go in with the opinion and stating it loudly that they shouldn't be doing it stupid and need to fix it. If you don't, you as an admin, will spend most of your time dealing with stupid apps and their requirements versus what your real job should be, running AD properly. Also any time you want to upgrade the environment you will be stuck dealing with the real requirements of apps running properly as well as really stupid requirements of apps that weren't written properly and it is usually the latter that will hold you back. Why is this bad you ask??? Because some day at some point, your management's management is going to look at them and say you need to cut some costs and that is going to come all the way back to you and you will either lose hours or coworkers and you will still be trying to support all of these stupid apps that you let through previously. Trying to get them to change then is nearly impossible because they have come to expect the level of service from you of you supporting their stupid ass requirements. :)     joe     -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brian Desmond Sent: Thursday, July 13, 2006 1:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Sites Rename Will be fine unless you have some app hardcoded to them and well it should break so you can demand to have it fixed.   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of James Carter Sent: Thursday, July 13, 2006 5:32 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Sites Rename   Hi,   I need to rename some of my AD Sites, is this likely to cause any issues I am unaware off?   I use DFS if thats any help.   Windows 2003 Single Domain/Forest FFL.   thanks James   Do you Yahoo!? Next-gen email? Have it all with the all-new Yahoo! Mail Beta. -- Letting your vendors set your risk analysis these days?  http://www.threatcode.com   If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will hunt you down... http://blogs.technet.com/sbs List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will hunt you down... http://blogs.technet.com/sbs List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx