RE: [ActiveDir] Site Configurations and SMS2003

2004-02-19 Thread Roger Seielstad
Title: Message But oh my friend, sites are used for more than just replication. They're used for controlling a lot of AD integrated configurations. For instance, DFS trees use AD Sites to find the "local" replica, they're used for controlling where the clients authenticate, etc.

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Douglas M. Long
Title: Message Does the SUS automatic update client have to be installed for this registry key:HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\ to be present, orshould it be there with the generic Automatic Update also? I dont have a SUS server (or client) in my

[ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Frank Abagnale
Sorry for the OT post, does anyone have any experience with VNC as a remote tool for your servers, more specifically NT4 Servers? We use Terminal Servicesor HP Remote Insight (depending on what needs to be done)for our new core Windows 2000 AD servers for day to day administration, however, on

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Roger Seielstad
Title: Message The Autoupdate client is the same, regardless of the existance of SUS. You should be able to add those settings - I think they are installed as part of the SUS client template for Group Policy. -- Roger D.

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Clay Perrine
Title: Message There is a group policy that will do this. You have to add the ADM file for SUS, but when you do, the policy becomes available. Then you can set the suppress reboot with the policy. Clay Perrine, MCSE Microsoft Active Directory Support. From: [EMAIL PROTECTED]

RE: [ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Rimmerman, Russ
VNC is decent for the price, but we felt it was better to have a product that logs who's logging in and gives more security control. We went with Remote Admin 2.1 instead, and it is cheap and works well. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank AbagnaleSent:

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread Rich Milburn
Title: Message James, thanks for that. Any particular reason youd want to do it by hacking the registry rather than with GP or using the command line tools (w32tm in specific)? I watched the registry keys and they are set correctly with those commands, and I can do it remotely. My real

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Michael Wassell
Title: Message I don't believe SUS uses a "client" portion, the updates are automatically distributed to client PC'svia administrative shares and then are executed via RPC. The option not to automatically restart can also be specified via GPO rather than manually entering a registry value on

RE: [ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Rod Trent
The straight version of VNC is less secure than PCAnywhere (sends passwords in clear text format). You'll want to look at a secure version that uses Windows authentication. UltraVNC offers this: http://ultravnc.sourceforge.net/ And, UltraVNC tends to be the fastest implementation out

RE: [ActiveDir] Site Configurations and SMS2003

2004-02-19 Thread Rich Milburn
Title: Message I have to apologize, I oversimplified things in AD with its current implementation, if theres no domain controller in a site, theres no replication to that site (right??). And Ive generally gone by the principle that if you need resource servers in a site then you want a DC

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Michael Wassell
Title: Message Sorry, please ignore my last response. My head was in another place and I havn't had any coffee yet :-P From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Clay PerrineSent: Thursday, February 19, 2004 9:19 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Suppress

RE: [ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Roger Seielstad
Title: Message I agree with your security person. We use DameWare Mini Remote Control for downlevel systems management. Its got a very nice client install process. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems

[ActiveDir] NT Member Server Migration to AD 2003

2004-02-19 Thread Ellis, Debbie
We have reached the phase in our migration where all the users and their computers have been migrated. We are upgrading most of our member servers to 2000 before migrating. There are a few servers we are leaving at NT4. We are using NetIQ Migration Suite and it works great. The question I

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Douglas M. Long
Title: Message Thank you VERY much. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Clay PerrineSent: Thursday, February 19, 2004 9:19 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Suppress reboot of windows update??? There is a

RE: [ActiveDir] Site Configurations and SMS2003

2004-02-19 Thread Ayers, Diane
Title: RE: [ActiveDir] Site Configurations and SMS2003 No, with wasn't Microsoft but a consultant. Normally I'd insert a smart-ass remark here about consultants but other than our disagreement about how to configure sites, it was a very well informed exchange of information. You and I are on

[ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Kent Maxwell
Title: Exchange 2003 Migration Question I know this isn't quite an Active Directory question... I am working on finding a way to migrate private mailboxes and public folders stored in an Exchange 5.5 server to a Exchange 2003 server. The Exchange Organization is different for both servers.

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Roger Seielstad
Title: Message Nope. 100% wrong. SUS uses the Automatic Update Client, which is part of Win2k SP3 and later, and all versions of XP and 2003. What you do is change the settings of the client to look at a specified SUS server rather than at the Microsoft Windows Update servers.

RE: [ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Michael Wassell
Title: Exchange 2003 Migration Question I have used the Exchange 2003 Migration Wizard (bundled with the installation), granted that my migration scenario was Exchange 2000 Exchange 2003, but I don't suppose there would be much difference as far as the IS is concerned. The only dilemma

RE: [ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Ken Cornetet
Title: Message Much as I like VNC, your security guy is smoking crack. VNC is more resource intensive. If you put it on a slow server (400MHz) it will be very sluggish unless you disable compression. VNC pretty much sucks over dialup (even with compression). VNC uses one fixed password

RE: [ActiveDir] OT - VNC / Remote Administration

2004-02-19 Thread Marcus.Oh
Same here. We got an enterprise license for under 5K From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Thursday, February 19, 2004 9:22 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT - VNC / Remote Administration VNC is decent for

RE: [ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Salandra, Justin A.
Title: Exchange 2003 Migration Question Why would you lose e-mails, since both are in the same exchange organization, SMTP and the IMS/MTA should have been able to deliver e-mails to anyone regardless of which server was sent the message based on what version of the MX record the sender

RE: [ActiveDir] SNTP/NTP Settings

2004-02-19 Thread Free, Bob
Title: SNTP/NTP Settings CompatabilityFlags HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient Data type Range Default value REG_DWORD 0x1 | 0x2 | 0x4000 | 0x8000 0x8000 Description Controls flags for behaviors that are

RE: [ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Michael Wassell
Title: Exchange 2003 Migration Question They were in 2 seperate domains in 2 seperate forests, therefore not in the same exchange organization. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.Sent: Thursday, February 19, 2004 12:24 PMTo: '[EMAIL

RE: [ActiveDir] Suppress reboot of windows update???

2004-02-19 Thread Douglas M. Long
Title: Message The Deployment Guide Whitepaper documentation was a little misleading at first "SUS requires a special version of Automatic Updates." Now that you point it out, and I read over it again, it makes sense. This is why you are all great help. You clarify the things that we

RE: [ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Salandra, Justin A.
Title: Exchange 2003 Migration Question Oh okay, thanks -Original Message- From: Michael Wassell [mailto:[EMAIL PROTECTED] Sent: Thursday, February 19, 2004 1:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Exchange 2003 Migration Question They were in 2 seperate

RE: [ActiveDir] Exchange 2003 Migration Question

2004-02-19 Thread Michael Wassell
Title: Exchange 2003 Migration Question Your welcome. I'm sorry I didn't clarify that :-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.Sent: Thursday, February 19, 2004 1:23 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Exchange 2003 Migration

RE: [ActiveDir] Site Configurations and SMS2003

2004-02-19 Thread Rich Milburn
Title: Message Yeah Ive had situations where 10 people were at a site with AutoCAD and we needed to put a file/print server out there for the 50MB file issue, and we put a DC since it was a demand-dial ISDN that tended to go down. We were going to a forced scenario with a single server

[ActiveDir] Schema changes between 2000 and 2003

2004-02-19 Thread jonathan . r . meyer
We recently upgraded our schema to support Exchange 2003 and one of the LDAP display names for an existing attribute changed and it broke some of our apps. Now we are preparing to upgrade the schema to support upgrading to 2003, but I want to be sure of all changes to existing schema

RE: [ActiveDir] Schema changes between 2000 and 2003

2004-02-19 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
the simplest way to get what you want is to do a schema dump before and after ADPREPing a 2000 AD - you can then do a simple file compare with WinDiff and voila, you'll get all the changes. I'd use CSVDE to dump the classes and attributes. csvde f classes.txt d

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread Free, Bob
Yes, they are supposed to automagically change to NT5DS upon joining a domain from all the MS documentation. Is it happening to all of them? Are they Dell PC's by chance? They actually have a patch because, allegedly,some PCs were imaged with different processor stepping levels than ended

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread Rich Milburn
Bob, youre a genius! J Yes they are Dells, and not by chance and its not all of the Dells. One of my concerns here was fixing the problem without knowing the cause. I dont mind running a script, and these commands work remotely, as long as we know how to avoid it in the future. I agree

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread DeGrands, Charles
After reading this thread, I checked my recently purchased HP Evo and it too had the time pointed to Microsoft. So its not hardware specific. From: Rich Milburn [mailto:[EMAIL PROTECTED] Sent: Thursday, February 19, 2004 12:29 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir]

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread Free, Bob
Some of the MVP folks in the XP NG's alluded to other manufacturers as well but since Dell substantiated it by providing a patch, I figured that must be the real deal :-) From: DeGrands, Charles [mailto:[EMAIL PROTECTED] Sent: Thursday, February 19, 2004 12:58 PMTo: [EMAIL

RE: [ActiveDir] Schema changes between 2000 and 2003

2004-02-19 Thread Eric Fleischman
Actually if you want to just understand what adprep /forestprep is doing in the context of schema changes, youll find the ldif files on the w2k03 cd itself (I believe in the i386 directory). See sch*.ldf for them all. All adprep is doing for schema upgrades is importing those files.