Chris,
I've deployed both of these products in reasonably large
environments.
- Both NetIQ and MOM require a fair bit of setup to get the right level
of monitoring going
- Both require constant attention to be effective monitoring / reporting
platforms (they are not set-and-forget products)
-
Title: Message
during the upgrade to 2003, TWO policies are enforced,
which were not enforced 2000 (SMB signing and secure channel encryption) - this
is a security improvement over pure 2000 AD environments.
Not sure why the KB only mentions one of the policies
you have to disable - if you
Title: Message
http://support.microsoft.com/default.aspx?scid=kb;en-us;811497&Product=winsvr2003
According to this KB - either disabling the policy or
installing the DSclient will work. My experiential evidence is that both are
required (at least the dsclient from the w2k CD -- the new dscli
Title: Message
Hmmm... Didn't know that about 2003. Then again, I don't have that domain
set up yet here, either..
--
Roger D. Seielstad -
MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.
-Original Message-Fro
Title: Message
I found that it is -- for Windows 95 on a Windows Server
2003 domain.
From: Roger Seielstad
[mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003
2:07 PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] Windows 2003 and Windows 98 clients
DS
Cleint isn't required for basi
Ok
look at
Kilobytes sent 10
Kilobytes received 14
you received but also trasmitted
I will try in this way:
1) shut down the machine to reset the statistics
2) make a snapshot by net stats server (every 5 minutes or shorter)
3) when you have a lot of traffic run
Title: Message
DS
Cleint isn't required for basic log in functionality.
--
Roger D. Seielstad -
MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.
-Original Message-From: Creamer, Mark
[mailto:[EMAIL PROTECTE
I can confirm this statement from MS. I've seen the lockout issues being
solved by the new version of the DS Client. The most recent version is not
available on the web site of Microsoft. You need to contact MS for
this.
Cheers!
John
From: Creamer, Mark
[mailto:[EMAIL PROTECTED]
Title: Message
Rick-
IE is
an ugly piece of %*$(#% to try and make into an unattended install, as you've
discovered. The last time I worked with this, for IE5, we had to tear apart the
install to get it to run unattended. What you're probably experiencing is that
IE install puts some tasks i
Title: Message
Read???
You want me to read?
Yes, I did not think that we would be
involved with test systems or home systems. Generally, Our policy is not to
support test systems or home systems… but… You know.. Managers…
J
Steve
From: [EMAIL PROTECTED]
[mailt
Do you have at least one nt4 domain controller
still around, That is how i get by with it,
We have 2000 machines that are not powerful
enough for 2000, so we are still on 98.
One nt4 domain controller at each location, running
on p3-500 with 265mb,
- Original Message -
Title: Message
Keep one nt4 domain controller on staff until the
last nt4 server is gone.
- Original Message -
From:
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 09, 2003 10:23
AM
Subject: RE: [ActiveDir] Windows 2003 and
Windows 98 clients
Title: Message
Did
you read the warning message during DC Promo that said Windows 95 and Pre SP3
NT4 machines could not authenticate to a Windows 2003 DC?
Is
there a way around that?
Shawn
-Original Message-From: Steve Shaff
[mailto:[EMAIL PROTECTED] Sent: Thursday, Oc
I have a job to install ie6, it installs as part of
a group policy, but after it installs and forces a reboot, it tells the user
upon login that there was an install that was not completed, and they have to
login with an account that has admin rights to the machine to complete the
setup
I will give this a try.
Thanks for all of your help, group.
*
Steve Shaff
Active Directory / Exchange Administrator
Corillian
Corporation
(W) 503.629.3538 (C)
503.807.4797 (F) 503.629.3674
From:
[EMAIL PROTECTED] [mailto:
In the Default Domain Controller Security Policy, and in
the Domain Security Policy, you have to disable "Domain Member: Digitally
encrypt or sign secure channel data (always)". And install the DSClient.
This is a security hole, by the way. Win95 is a real
problem in a Win2003 AD enviro
I
believe you're going to have to install the AD Client Extensions on those
PCs. You can find the software on the Windows
2000 CD.
Mike
Thommes
-Original Message-From: Steve Shaff
[mailto:[EMAIL PROTECTED]Sent: Thursday, October 09, 2003 11:19
AMTo: [EMAIL PROTECTED]Subje
Okay, I know that people are going to be like… “Windows
98, come on. Please join us in the Twentieth Century”!!! But, we
need to do testing on Windows98 for our product compatibility.
We just upgraded to Windows 2003 (2000 native) and now it appears that
individuals that are running Wi
>It's "old school" windows nt stuff
Just because I check the status of scheduled jobs by calling at.exe from
cron.pl does not make me 'old school'. :^)
##during the transmission of this email 'old school' conversion to
plain-text possibly occurred
LOL
From: [E
Title: Message
Amen.
BTW: MOM 2004 beta is right around the corner, and the
product looks awesome. MS will be making some serious headway with MOM in
the next 2-3 years, before combining their systems management
products.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ch
We have NetIQ now and I was looking at going with MOM, We have about 260 people in 6 states and it's a all Microsoft shop. We also have about 60 servers to monitor and it's only 2 people that monitor the NT stuff so I do not have all day to mess with it. Anything good out of the box that will h
Title: Message
I
really couldnt say. The support team in the US will be different. I have just
had nothing but incredible support from the UK team. Patience of saints
:-)
-Original Message-From: Chris Flesher
[mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003
17:1
Title: Message
Chris,
I can say from experience that either would probably do well for you. Some
pros and cons:
Pros
for MOM:
New
products (past NT4/Exchange 5.5) come with the agents; this means you get the
monitoring parameters and thresholds the vendor considers important out of the
b
Title: Message
What
is their support like in the US? I see they are based in the
UK.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Abbiss, MarkSent: Thursday, October 09, 2003
9:23 AMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] OT
Title: Message
Ahh... Didn't see that news. Cool.
--
Roger D. Seielstad -
MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.
-Original Message-From: Abbiss, Mark
[mailto:[EMAIL PROTECTED] Sent: Thursday, October
It's "old school" windows nt stuff
:-)
Michael Parent MCSE MCT
Analyst I - Web Services
ITOS - Systems Enablement
Maritime Life Assurance Company
(902) 453-7300 x3456
"Bridges, Samantha" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
10/09/2003 09:54 AM
Please respond to ActiveDir
Title: Message
>>> Anything is easier to manage and costs less than Tivoli.
<<<
Or you
must have a BMC Patrol experience (expensive, hard to setup and absolutely
inflexible)
We've
chosen to implement BigBrother (Quest) which works fine in our mixed
env.
BTW,
Hello to everyone, I am new o
Title: Message
Well,
we're going to be coming from Tivoli, so cost isn't so much a factor. Anything
is easier to manage and costs less than Tivoli.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Abbiss, MarkSent: Thursday, October 09, 2003
Title: Message
Itheon
bought out Heroix and took all development over to the UKthey are currently
rebranding so its called Itheon and not Heroix.
-Original Message-From: Roger Seielstad
[mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober
2003 16:29To: '[EMAIL PROTECT
Title: Message
Weird. THat's a Heroix product (http://www.heroix.com/products/detail_robomon.htm)
The
GUI seems different, at least from the demo's I've done..
--
Roger D. Seielstad -
MTS MCSE MS-MVP Sr. Systems Administrator I
Title: Message
ps.
Itheon have another prodcut eQ wehich will monitor multi platform set
ups.
-Original Message-From: Chris Flesher
[mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003
16:13To: [EMAIL PROTECTED]Subject:
[ActiveDir] OT: NetIQ or MOM
We're looking
Title: Message
Forget
MOM..Net IQ costs and arm and a leg and needs hours of extra consulting to get
your out-of-the-box installation doing what you want it to
do.
We
evaluated both MOM and Net IQ as well as RoboMon (www.itheon.co.uk) and went for the latter.
EXCELLENT support, second to
Title: Message
Hi
Chris,
NetIQ is an amazing
company and has a very good product line as far as monitoring tools are
concerned.
Do not be worried
about the companies future.
regards,
Abhishek.
www.netdecisions.com
-Original Message-From: Chris Flesher
[mailto:[EMAIL P
Title: Message
We're looking at
NetIQ for monitoring our Windows/SQL stuff, as well as what it can do on Unix
(Solaris, AIX). However, with Microsoft going head on into monitoring, should I
be worried about the affect this will have on NetIQ in the short/long term?
Which is a better product
The MS SFU 3.0 team also refused to provide LDIF files for their schema
extensions. Microsoft really needs to set the example here. Most people
are worried enough about extending the schema and when you can't even get
the LDIF files it only exacerbates the situation.
Robbie Allen
http://www.rall
Thanks. Still learning the lingo I know a lot of lingo...that one
was new to me.
Thanks again.
Samantha
-Original Message-
From: Creamer, Mark [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 09, 2003 8:36 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] account lockout troubles
AT service is for scheduling.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodt
echnol/windowsserver2003/proddocs/datacenter/at_service_account.asp
Steven "Duuude" Comeau
Systems Administrator
Main Tape
1 Capital Drive, Suite 101
Cranbury, NJ 08512
1-800-526-8273 x332
Command line version of "scheduled tasks"
-Original Message-
From: Bridges, Samantha [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 09, 2003 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] account lockout troubleshooting
What is an AT job???
-Original Message-
From:
What is an AT job???
-Original Message-
From: Free, Bob [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 08, 2003 3:56 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] account lockout troubleshooting
Checked for an AT job running under the old creds? Seen that often.
-Origina
Thanks Guido. This is good info.
I like the idea of having the LDIF files available for testing schema updates outside
the application itself. As Robbie Allen has pointed out in various books, articles
and forums, LDIF files provide a useful self-documenting method of keeping track of
your sc
test msg
- Original Message -
From: "Humberd Greg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 08, 2003 2:06 PM
Subject: RE: [ActiveDir] account lockout troubleshooting
> Also if the client is 2k or XP check for stored network passwords.
>
> -Original Message
You can use wmic.exe to find most info about your
services.
Regards,
/Jimmy
-
Jimmy Andersson, Q Advice
AB
CEO & Principal Advisor Microsoft MVP -
Active Directory-- www.qadvice.com
--
From: [EMAIL PROTECTED]
Tony, I don't have an LDIF file, but here are some details on the schema
extensions as reported from the SMS2003 'Extadsch.exe' utility:
Defined attribute cn=MS-SMS-Site-Code.
Defined attribute cn=mS-SMS-Assignment-Site-Code.
Defined attribute cn=MS-SMS-Site-Boundaries.
Defined attribute cn=MS-SMS
43 matches
Mail list logo