[ActiveDir] Granular permissions : user objects

2002-11-12 Thread Andy Grafton
MessageHi, all. Active Directory, Windows 2000, SP3, no exchange prep. Please restrain yourselves from asking *why* do you want to do this?. If you'd like to know, give me a shout offlist. I need to grant permissions for SELF to change the First Name and Last Name (givenName, sn in LDAP

Re: [ActiveDir] Granular permissions : user objects

2002-11-12 Thread Tony Murray
Not every property of an object is listed in the Active Directory Users and Computers interface. The number of properties is quite large so the interface only displays those that are commonly used for controlling access. This makes the list easier to manage. The list of filtered object types

RE: [ActiveDir] Granular permissions : user objects

2002-11-12 Thread Amit Zinman
Last name is sn for Surname. You can use a script with PutEx for this, I think. Amit Zinman Systems Consultant Integrity Systems [EMAIL PROTECTED] 03-7522424 058-326753 -Original Message- From: Andy Grafton [mailto:orangerover;hotmail.com] Sent: Tuesday, November 12, 2002 11:27 AM To:

[ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
Hello everyone, I know this is off topic but you guys and girls always give good advice. I have been getting event Ids 116, 118 and 200 a lot in my application log. The chain of events went like this I installed SP3 for W2K The next day the Exchange Database went through some type of

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Roger Seielstad
So let's see. You call PSS, and then argue with what they're telling you to do.. Hmmm.. -1018 errors are database corruption, and the only fix it to go back to tape before the corruption. Sounds pretty logical to me. -- Roger D. Seielstad -

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Luis Aguilera
I had a somewhat similar situation. The difference being that my backups were not working correctly (another story). So restoring a good backup of the exchange db was not possible. I ended resolving the issue by ESEUTIL /P to repair the db errors and later running ISINTEG -fix a couple of

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread David N. Precht
http://www.eventid.net/display.asp?eventid=116source= http://www.eventid.net/display.asp?eventid=118source= http://www.eventid.net/display.asp?eventid=200source= -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of Salandra, Justin A. Sent:

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
David I have already looked at these but thank you -Original Message- From: David N. Precht [mailto:discussions;entrysecurity.com] Sent: Tuesday, November 12, 2002 9:19 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] OT: Exchange -1018 Error

Re: [ActiveDir] Granular permissions : user objects

2002-11-12 Thread Andy Grafton
Tony your advice was spot on. Changing the values as suggested got me what I wanted. Now I can add anything I like to the Permissions list in the dialogue box (and, in fact, remove those I don't like!), which means that we can stick with a standard and easily understandable interface. Many

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Rick Kingslan
Justin, I want to go on record as saying that no, SP3 did NOT cause these errors - at least in my experience with our farm of Exchange 2k servers and Exchange 5.5 servers. The only time that we have seen this has been due to a severe corruption of the database (specifically .edb) and a restore

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Thornley, Dave H
Well following on from this I'll mention Big Brother - we use it on 100 plus servers, Windows and Unix. Its Open Source and its free. There's a fairly rich set of scripts that have been developed and shared by the user community to cater for those things not monitored by the basic product. dave

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Andries Thijssen
Agreed, except that it is not free for commercial use. -Original Message- From: Thornley, Dave H [mailto:D.H.Thornley;shu.ac.uk] Sent: Tuesday, November 12, 2002 4:02 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Well following on from this I'll mention Big Brother

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Burns, Clyde
Id go with what MS is recommending. Ive gone both ways (with regards to Exchange 5.5) in restoring a known good database and replaying the transaction logs and having to recover a corrupted database. I would just make sure to copy off all the contents of your exchsrvr\mdbdata contents

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Andy David
Well of course, once the logs fill up and crash the drive, your users will have problems then :0 I would definitely stick with PSS on this. Just curious however, have you attempted a full online backup with plain ol NTBACKUP? -Original Message- From: Salandra, Justin A.

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
No I haven't -Original Message- From: Andy David [mailto:DavidA;veronissuhler.com] Sent: Tuesday, November 12, 2002 10:21 AM To: '[EMAIL PROTECTED]' Subject:RE: [ActiveDir] OT: Exchange -1018 Error Well of course, once the logs fill up and crash the drive, your users

RE: [ActiveDir] LDAP Display Name for Security Properties

2002-11-12 Thread Robbie Allen
Title: Message This is an example of why it would be nice if the object GUID of the security principal that performed the write was included in the metadata for themodified object. I mentioned this to one of the AD developers during the MEC AD Community session, and he said he would take it

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Thornley, Dave H
Oops - one of the benefits of working for a university Their 'Better then Free' licence might still exempt you from paying for all copies you install though dave -Original Message- From: Andries Thijssen [mailto:Andries.Thijssen;infopulse.nl] Sent: 12 November 2002 15:18 To:

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Al Garrett
Title: RE: [ActiveDir] OT: Exchange -1018 Error Having been through this myself I'm only going to add my condolences. One of our administrators was using her Deleted Items folder to store all the stuff she wanted to keep. It was a classic from the CDW commercialsFred? Where do you put

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Roger Seielstad
That is correct - logs don't get flushed unless you do a full backup, not a differential. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA -Original Message- From: [EMAIL

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Shawn.Hayes
8.5 and Exchange 2000 -Original Message- From: Andy David [mailto:DavidA;veronissuhler.com] Sent: Tuesday, November 12, 2002 12:47 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT: Exchange -1018 Error What version are using? I run differential file backups every weekday along

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
Thanks for the info, I have asked MS by e-mail if I could do a eseutil /mh priv.mdb output.txt, if they say yes I will do it tonight. Also I do not have circular logging enabled. -Original Message- From: Burns, Clyde [mailto:Clyde.Burns;nortonhealthcare.org] Sent: Tuesday,

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Andy David
You may want to upgrade to 8.6 + latest build. Whether that is an issue with 8.5, I do not know, but there are a heck of a lot of fixes in 8.6 -Original Message- From: [EMAIL PROTECTED] [mailto:Shawn.Hayes;compass.net] Sent: Tuesday, November 12, 2002 1:00 PM To: [EMAIL PROTECTED]

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
Title: RE: [ActiveDir] OT: Exchange -1018 Error When you went through it did you have your users working with out problems. My users are currently experiencing no problems -Original Message- From: Al Garrett [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 12, 2002 11:16 AM

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Shawn.Hayes
Roger, I don't think you read the last message completely. Exchange was set to do a Full backup and Flush the logs, but that job specification was part of a file system differential job. -Original Message- From: Roger Seielstad [mailto:roger.seielstad;inovis.com] Sent: Tuesday, November

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Roger Seielstad
Which can't work. Especially with ArcServe. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA -Original Message- From: [EMAIL PROTECTED] [mailto:Shawn.Hayes;compass.net]

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Bombardi,Marco,GLENDALE,GC AMS - eMAD
Sounds good to me. Thank you for your message. Marco Bombardi Globe Center AMS Infrastructure Technology [EMAIL PROTECTED] Office: +1 818 549.6153 -Original Message- From: Schwartz, Jim [mailto:JSchwartz;BBandT.com] Sent: Tuesday, November 12, 2002 6:24 AM To: '[EMAIL PROTECTED]'

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
We are using ARCServe, and will be making the switch to Backup Exec 8.6 next year -Original Message- From: [EMAIL PROTECTED] [mailto:Shawn.Hayes;compass.net] Sent: Tuesday, November 12, 2002 10:05 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] OT: Exchange -1018 Error

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Andy David
Title: Message No offense Justin, but what are you waiting for? 1018s are bad news and the sooner you get to work on this and follow PSS's recommendations the better. It will bite you in the a$$ if you attempt to work around this. -Original Message-From: Salandra, Justin

[ActiveDir] Question about Active Directory

2002-11-12 Thread Eric
Can AD become corrupted? If so, can it be fixed with anything other than restoring from backup? Eric Etheredge, MCDBA Systems Manager Office of the Standing Trustee Walter O'Cheskey, Trustee Lubbock, Texas Trustee's Website: www.ch13-12westtex.org Case Information Website: www.trustee13.com

Re: [ActiveDir] Question about Active Directory

2002-11-12 Thread Tim HInes
Yes it can. It is sometimes possible to repair it with ntdsutil or esentutl. see http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q315131 and http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q305500 Tim Hines, MCSA, MCSE (2000 NT4) MVP - Active Directory - Original

RE: [ActiveDir] Question about Active Directory

2002-11-12 Thread Ayers, Diane
Very early in our AD deployment we had one server reporting AD corruption. The other servers were OK. We simply demoted the server, waited for replication so that the server was removed from AD and re-promoted the server. At this point it got a new copy of the database and problem solved. Not

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Linton Smith (WBTQ)
Hi Justin, I've experienced exactly what you describe (certain cr@p array controllers not doing their job), and restoring the LAST GOOD backup and replaying the logs is exactly the way to go IF your logs are on a separate spindle set. If not, there is a good chance that one or more of the log

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
Title: Message The reason I am waiting on this is because this server is my forest root, my Exchange server, my DNS server to the Internet, my WINS server and my Intranet Server all in one. If I could find a way to fix the problem quickly while fixing the server online I would avoid down

[ActiveDir] Monitoring with HP OpenView

2002-11-12 Thread Jimmy Andersson
[Regarding the monitoring comparison] I got a response from HP that I should send this URL to you guys. http://www.openview.hp.com/products/smartplugins/spis/Documents/Product_ HTML-516.asp Regards, /Jimmy -- Jimmy Andersson, Q Advice AB Microsoft MVP - Active Directoryv Whistler Tech Beta

RE: [ActiveDir] Question about Active Directory

2002-11-12 Thread Shawn.Hayes
Diane did this server have any FSMOs you had to move or was it a Global Catalog Server? -Original Message- From: Ayers, Diane [mailto:DMA8;pge.com] Sent: Tuesday, November 12, 2002 2:58 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Question about Active Directory Very early in

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Salandra, Justin A.
I have just learned that the company that does my backups may have overwritten my most recent good backup with a bad one. This will be confirmed for me tomorrow morning by the actual person responsible since he was out today. Since I may not have a good backup, I think I may just have to do the

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Schwartz, Jim
Does this mean I get a free bar of chocolate? g -Original Message- From: Bombardi,Marco,GLENDALE,GC AMS - eMAD [mailto:Marco.Bombardi;us.nestle.com] Sent: Tuesday, November 12, 2002 1:38 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Sounds good to me. Thank you for

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Morgan, Joshua
Title: Message Do you have another machine you can install Exchange on that would hold your store? If so I would recommend adding another machine to your site and moving stuff off of this machine as soon as possible. If you do not have this ability then I would let management know how bad

RE: [ActiveDir] Monitoring with HP OpenView

2002-11-12 Thread Schwartz, Jim
I've yet to do a real product comparison between the NMS vendors. From my initial observations I felt that HP was the best at doing the actual monitoring across multiple platforms. They don't have the ability to monitor the mainframe systems either. My real issue comes down to how these products

RE: [ActiveDir] OT: Exchange -1018 Error

2002-11-12 Thread Linton Smith (WBTQ)
Hi Justin, A restore will only stop Exchange services while the restore is happening. Running ESEUtil only requires that Exchange services be stopped, so you can leave the other services running, serving your users while you are fixing your Exchange problem. Sorry to hear about your last good

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread Bombardi,Marco,GLENDALE,GC AMS - eMAD
I'm still new here... :-) Marco Bombardi Globe Center AMS Infrastructure Technology [EMAIL PROTECTED] Office: +1 818 549.6153 -Original Message- From: Schwartz, Jim [mailto:JSchwartz;BBandT.com] Sent: Tuesday, November 12, 2002 12:21 PM To: '[EMAIL PROTECTED]' Subject: RE:

RE: [ActiveDir] Question about Active Directory

2002-11-12 Thread David N. Precht
Try http://www.sunbelt-software.com/product.cfm?id=785 ActiveAdministrator -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of Eric Sent: Tuesday, November 12, 2002 14:29 To: [EMAIL PROTECTED] Subject: [ActiveDir] Question about Active

RE: [ActiveDir] LDAP Display Name for Security Properties

2002-11-12 Thread Rick Kingslan
Title: Message Robbie - I agree 100%, and will voice that same opinion the next time I'm able to. The fact that the auditing mechanism is the only way to find out what happened is inadequate, for the reasons that I stated (group membership, built-in users, etc.) and more, to be sure. I

RE: [ActiveDir] Monitoring AD

2002-11-12 Thread David N. Precht
Just don't tell Dave's Legal Dept that. -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of Andries Thijssen Sent: Tuesday, November 12, 2002 10:18 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Agreed, except that it

[ActiveDir] AD Integrated DNS Name Servers After Demotion

2002-11-12 Thread John F. Hann
Last weekend, we demoted 233 DCs. We went from a branch deployment to a region deployment of DCs. I noticed to today that although the DCs demoted, removed the computer accounts from the DC OU, removed the entry in the SYSTEM folder under the SYSVOL FRS volumes, the demoted DCs did not remove