RE: [ActiveDir] New RPC DOS

2003-09-10 Thread Rick Kingslan
Title: Message Todd,   >> Anyone have a clue as to how Microsoft plans to fix the RPC system to make it more secure?   Concentrate maybe one or two more people on looking at error checking on the input into the arrays/buffers in the RPC code?  ;op   I mean, really - a vuln lays around waiti

RE: [ActiveDir] Number of Interactive Logons

2003-09-10 Thread Rick Kingslan
Title: Message David,   I have yet to get an authoritative answer from Microsoft, but I have gotten enough information from sources that I trust implicitly to say that somehow my testing of this issue was flawed.  Either it was my process, or my setup - regardless all indications are that you

Re: [ActiveDir] ADUC & GPMC Authentication Errors

2003-09-10 Thread rick reynolds
most firewalls block all the default protocols needed for ms networking to work - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, September 10, 2003 3:07 PM Subject: Re: [ActiveDir] ADUC & GPMC Authenticatio

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Gil Kirkpatrick
Title: Message Hmmm. Perhaps the IP address of the DC changed?   -g -Original Message-From: Ayers, Diane [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 3:43 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Windows 2003 DC issue We use a type of ACL for our

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Ayers, Diane
Title: Message We use a type of ACL for our Bind stuff.  Only our DCs have the "rights" to do dynamic updates to our AD zone on the bind server.  Other hosts are updated in DNS via the DHCP server (Cisco) or other processes.  The access rights are based on the source IP address.  Not 100% se

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Gil Kirkpatrick
Title: Message Does BIND provide for ACLs on RRs? I didn't know that...   -g Gil KirkpatrickCTO, NetPro -Original Message-From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 12:40 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Windows 2003 D

RE: [ActiveDir] SUS

2003-09-10 Thread Roger Seielstad
Yes, but I'd suggest you fully qualify it - http://server.domain.com -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -Original Message- > From: John Parker [mailto:[EMAIL PROTECTED] > Sent: Wedne

Re: [ActiveDir] ADUC & GPMC Authentication Errors

2003-09-10 Thread rrutherford
Do you run any proxy or firewall client software, i.e. MS. I have seen issues when running them. Robert Rutherford +44 (0)1305 208232 +44 (0)7970 122362

[ActiveDir] ADUC & GPMC Authentication Errors

2003-09-10 Thread England, Christopher M
Title: ADUC & GPMC Authentication Errors Greetings, I work at a University with a single domain architecture, and thus my area only has control over an OU. User accounts are also managed by the central computing guys. So you can see I have few options when resolving issues like this. But ha

[ActiveDir] SUS

2003-09-10 Thread John Parker
SUS Question: I have the server setup and syncronizing. Is it in the GPO under admin templates/Windows components/Windows update that I configure the item named "Specify intranet Microsoft update service location" to point to my new SUS server? e.g. http://SUSservername John Parker, MCSE IS Adm

Re: [ActiveDir] Converting fat32 to NTFS

2003-09-10 Thread rrutherford
Depends on the server/pc... on average I would say 5- 10 mins Robert Rutherford +44 (0)1305 208232 +44 (0)7970 122362 "John Parke

[ActiveDir] Converting fat32 to NTFS

2003-09-10 Thread John Parker
Title: Message Hey all...   On a 36GB SCSIU2W with 22GB of data, how long should a conversion from FAT32 to NTFS take?   Thanks   John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435   952-896-9898 Local 800-388-000

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Mulnick, Al
Title: Message While you're checking that, you might also want to check that your new server is not prevented from creating new records by ACLs on the BIND server.  Should show in the logs, but it would be good to check.     Al -Original Message-From: Chris Flesher [mailto:[E

[ActiveDir] New RPC DOS

2003-09-10 Thread Myrick, Todd (NIH/CIT)
Title: Message Our Microsoft TAM notified us of this new issue.  I waited to give them time to publish it to the various news sites.    At 9AM PST, PSS will be announcing a new critical security bulletin (MS03-039).   This bulletin will address an RPC denial-of-service vulnerability in Win

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Chris Flesher
Title: Message Same Bind server. Unfortunately, I don't run the Bind server. I'll talk with the powers that be and get a response if anything looked weird. Did not run NETMON, but will to see more.   Thanks for the leads. I'll let you know how it goes. -Original Message-From:

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Gil Kirkpatrick
Title: Message The only change in 2003 re SRV publication that I can recall is that the default update interval is 15 minutes in W2K3 vs. 60 minutes in W2K.   Some questions:   Is it the same BIND server that worked with W2K? Did you check the BIND logs? And if there was nothing there,

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Costanzo, Ray
It must be really nice to actually work somewhere that uses Windows 2000 and XP client machines so you can take advantage of such things. :/ Ray at work > -Original Message- > From: Rod Trent [mailto:[EMAIL PROTECTED] > > It's a free download. Its different in the fact that it > ins

[ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Chris Flesher
Title: Message We started playing with 2003 in our test environment. We came across a problem with how dynamic updates are done on 2003. Dynamic updates are done on a Sun Bind server. For some reason, the SRV records would not update on the Bind server. However, we can do dynamic update on 2

RE: [ActiveDir] Converting Active Directory 64 Bit Time Values into Date Strings with Perl and general process you can use for other languages

2003-09-10 Thread Dean Wells
Enclosing the actual file often helps ... doh!  :) -- Dean Wells MSEtechnology ( Tel: +1 (954) 501-4307 * Email: dwells@msetechnology.com http://msetechnology.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Carlos MagalhaesSent: Wednesda

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Rod Trent
It's a free download. Its different in the fact that it installs within your company, allows you to download updates to the server inside your firewall, and then gives you the ability to authorize only those updates you decide are required for your environment. There's an ADM file that you import

[ActiveDir] Intersite urgent replication

2003-09-10 Thread Mike Baudino
We've had a multi-DC, multi-site AD lab in place for well over a year (still waiting for the green light to implement)and have found that sites could definitely help us manage replication traffic.  However, we also found problems with replication in our testing.  We have a need to urgently repl

RE: [ActiveDir] Converting Active Directory 64 Bit Time Values in to Date Strings with Perl and general process you can use for other lang uages

2003-09-10 Thread Carlos Magalhaes
If you attached them they would have been stripped, I didn't receive anything did anyone else?   From: Dean Wells [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 3:19 PM To: AD mailing list (Send) Subject: RE: [ActiveDir] Converting Active Directory 64 Bit Time Valu

RE: [ActiveDir] Converting Active Directory 64 Bit Time Values into Date Strings with Perl and general process you can use for other languages

2003-09-10 Thread Dean Wells
Hi Carlos,   Enclosed are the scripts I mentioned -   NOTES -   * Neither have been tested against a 2000 AD or when executed on a 2000 Workstation     - the basic elements of both scripts should function against and on a downlevel AD/workstation (may require minor mods.) * The shell sc

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Shawn.Hayes
And low bandwidth environment Shawn -Original Message- From: England, Christopher M [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 9:13 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] What is SUS? SUS is basically WindowsUpdate (or more specifically, Automatic U

RE: [ActiveDir] What is SUS?

2003-09-10 Thread England, Christopher M
SUS is basically WindowsUpdate (or more specifically, Automatic Updates from XP SP1 or 2000 SP3), but you control what updates go out. You still use the GPO to dictate how they get the updates, but instead you point them at one of your servers (with IIS and the SUS server component) for their patch

RE: [ActiveDir] What is SUS?

2003-09-10 Thread John Parker
Please forgive my naievity... How is this different from the windows update component in my Group policy? And, is this a seperate piece of software? Or is it included with Server? John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Ed

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Rod Trent
http://www.susserver.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Wednesday, September 10, 2003 8:17 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could someone exp

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Crenshaw, Jason
John, This link will explain SUS in full detail. http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp Basically it is like bringing a scaled down windows update inside your firewall. There are some limitations, but as IT branches around the globe are figuring out there are no

Re: [ActiveDir] What is SUS?

2003-09-10 Thread Tim Hines
It stands for Software Update Services. You can use it to deploy updates to your clients. You can setup an internal server that stores updates that you download from the web. Your clients will then use this server to obtain their updates. You can find more info about it at http://www.microsoft

RE: [ActiveDir] What is SUS?

2003-09-10 Thread Michael B. Smith
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 8:17 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could s

[ActiveDir] What is SUS?

2003-09-10 Thread John Parker
Hey all.. No flames ok? I'm covered in jet fuel. Could someone explain what SUS is? I thik it is for windows updates, but I am not sure, and if it is something that would streamline my updates, then I would like to know more. Thank you John Parker, MCSE IS Admin. Senior Technical Specialist Di

[ActiveDir] Converting Active Directory 64 Bit Time Values into Date Strings with Perl and general process you can use for other languages

2003-09-10 Thread Carlos Magalhaes
Dean can you please share these with us? -Original Message- From: Dean Wells [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 06, 2003 2:12 AM To: AD mailing list (Send) Subject: RE: [ActiveDir] Converting Active Directory 64 Bit Time Values into Date Strings with Perl and