[ActiveDir] Upgrading to Windows 2003

2004-04-01 Thread Steve Rochford
I have a Windows 2000 domain with 6 servers running Windows 2000 spread across 3 sites. I want to move to Windows 2003 and, reasonably soon, replace all the 2000 servers with new servers so I don't really want to upgrade the existing servers if I can avoid it. Can I: Run adprep /forestprep and

Re: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric_Jones
Link appears not to work [for me]. And I haven't been able to find the updated doc on Microsoft's website. Can anyone else get to this link. (anxiously waiting...for almost a year now...) Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com David Adner

[ActiveDir] How to do an Inventory of the AD?

2004-04-01 Thread Niklas Wikander
Hi! I'm looking for a tool that can inventory the AD and put it in a report or textfile. The info I want is name of domain(s), site(s), DC's, DNS, WINS, DHCP, which server are GC's, FSMO role holders etc.etc. I know there is tools for getting some of this info but I want a tool for

RE: [ActiveDir] Upgrading to Windows 2003

2004-04-01 Thread Travis.Weeks
I would say follow the article and upgrade at least your PDCe and your Domain Naming Master, then add a couple of new 2003 Domain Controllers and transfer the roles to them. Then you can retire the upgraded DC's... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] How to do an Inventory of the AD?

2004-04-01 Thread joe
I am not sure anything like that exits currently. However if you look at the notes from the field for Windows 2000 you will find a CD with a web site called dsinfo on it. That would be a start for you and then you can modify it to do the rest that you feel is missing. joe -

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric Fleischman
This one works fine for me. http://www.microsoft.com/downloads/details.aspx?FamilyId=9353A4F6-A8A8-40BB-9FA7-3A95C9540112displaylang=en Perhaps youre having line wrapping issues? ~Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent:

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Michael B. Smith
It reports: The download you requested is unavailable.If you continue to see this message when trying to access this download, you might try the "Search for a Download" area on the Download Center home page. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Michael Wassell
http://www.microsoft.com/downloads/details.aspx?FamilyId=9A4C7AC3-185E-4644-9E98-4876B2A477E7displaylang=en I believe this is what you might be looking for? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. SmithSent: Thursday, April 01, 2004 8:27 AMTo: [EMAIL

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Creamer, Mark
Michael, I think thats the old one, isnt it? mc -Original Message- From: Michael Wassell [mailto:[EMAIL PROTECTED] Sent: Thursday, April 01, 2004 8:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

RE: [ActiveDir] How to do an Inventory of the AD?

2004-04-01 Thread Mulnick, Al
Additionally, there are tools that do this such as ecora. However, for a free set of tools, using the dsinfo tool and modifying it would work pretty well. You could also just stitch together the scripts already freely available on the web to do this. There's command line tools in the reskit

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Michael Wassell
Oh.. so it is :-) My mistake From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Thursday, April 01, 2004 8:48 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide Michael, I think thats the

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide - Update

2004-04-01 Thread Eric_Jones
Thanks, but that's the one for Windows2000. I just saw a post on Microsoft's AD newsgroup. Microsoft (Jason Robarts) states that they are having a problem with the download site and are working to fix it. Jason Robarts is the MSFT person that originally posted the link on MSFT's AD related

RE: [ActiveDir] Domains Separated by Firewall

2004-04-01 Thread Mulnick, Al
I mention the IPSec method as a way to make it easy to get all of the traffic you need without spending a lot of time troubleshooting. IPSec is pretty easy to set up and you wouldn't have to worry about any other traffic, name resolution, etc over that link. You can set it up DC-DC and as long

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide - Update

2004-04-01 Thread Peter Johnson
So would I!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 01 April 2004 15:54 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide - Update Thanks, but that's

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric Fleischman
Its online again and should be all set. http://www.microsoft.com/downloads/details.aspx?FamilyId=9353A4F6-A8A8-40BB-9FA7-3A95C9540112displaylang=en ~Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: Thursday, April 01, 2004 7:25 AM

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Michael B. Smith
Wanna bet a quarter? :-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric FleischmanSent: Thursday, April 01, 2004 9:31 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide Its online again and should be

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric_Jones
Yeah! Huston...we have documentation... Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com Eric Fleischman

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Creamer, Mark
Ill take that bet ;-) Just picked it up no problem Shift-refresh that puppy mc -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Thursday, April 01, 2004 9:36 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Released! Windows Server 2003

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Br anch Office Guide

2004-04-01 Thread Merry, Joel (US - Philadelphia)
I had to hit Refresh a few times before it came up. Give that a try. -Joel From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Thursday, April 01, 2004 9:36 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Released! Windows Server 2003

[ActiveDir] msRADIUSCallbackNumber

2004-04-01 Thread Mark Caldwell
Hey gang- Ulg (MS MVP) posed a question to me that I did not have an immediate answer for so I thought I would toss it out to the group for some additional insight- Hi there, I just recognized that if I change the msRADIUSCallbackNumber in ADUC, the Attribute userParameters is

RE: [ActiveDir] msRADIUSCallbackNumber

2004-04-01 Thread Mark Caldwell
More details- I've just verified that I've not be able to change the RAS-Callback Number when the userobject has the callback-number set. The UI displays the callback number as editable, but when changing and pressing apply I receive an error (translated from german) The changes on

[ActiveDir] Kerberos event ID's 677

2004-04-01 Thread Fuller, Stuart
Has anyone else been seeing a plethora of "service ticket request failed" event ID 677 logs in their Security logs on their Windows 2000 SP4 DC's?? The failure code is "0xE" and the sources seem to beWindows 2003 member servers. I have queried our MS support and they told me to try a hot

[ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread J0mb
Good morning, i've recently runned into a weird problem i wasn't able to track down yet. Yesterday morning a number of users reported that their domain PCs would hang loading the Operating system just before the logon screen would appear. they're all stuck on Applying computer settings. The moment

Re: [ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread Eric_Jones
The problem may not necessarily be configuration related. Are there any startup scripts? More specifically, are there any settings that require/force the respective machines to connect to any specific network hosts. I'm wondering if the problem may relate to the inconsistently consistent

Re: [ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread jpsalemi
you don't say, unless i missed it, if you're using dhcp? if so, and any kind of personal firewalls, could just not be getting an iptrying and trying...we've seen this with checkpoint. i would also guess that ipsec, or any kind of packet filtering would do the same, if not configured

Re: [ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread Brent Westmoreland
I have seen this problem when there is a DNS error that causes the machine to go to an alternate server for Group Policy processing. I have also experienced it when their is a firewall between the client and the server and the appropriate RPC ports were not opened. Hope that helps. Brent

RE: [ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread Ulf B. Simon-Weidner
Dito on the Firewall: I've had this with a client who insisted that they don't have any XP or W2k Clients - after the AD migration we found 500 W2k Laptops connecting via a Firewall - logon took 15 - 20 min. Switched the domain to NT4 Emulation until the Firewall was changed and everything was OK.

[ActiveDir] DNS server, A record sorting sites OH MY!

2004-04-01 Thread Ken Cornetet
I've read where AD DNS will sort replies to A record requests based on the IP address of the caller. The idea being that if multiple A records exist for a name, the first in the list will be closest to the caller. Makes sense, but I've never seen any documentation on how the comparison is done.

RE: [ActiveDir] Domains Separated by Firewall

2004-04-01 Thread Andy Schan
I knew the limitations of what the SMTP links could replicate, but I hadn't followed it through to the end- placing DCs on each side. I don't believe hosting each other's DCs will ever be an issue, but it's an interesting point- thanks! -Original Message- From: [EMAIL PROTECTED]

Re: [ActiveDir] Cross forest policies - boxes in Win2k domain, users in win2k3 s ingle domain forest

2004-04-01 Thread SysPro Support
Title: Cross forest policies - boxes in Win2k domain, users in win2k3 single domain forest Hi Stephen, LoopBack processing should do the trick. Basically it says "Apply the policies using the user's Group membership as if he was a member of the OU that the Citrix server belongs to". You can

RE: [ActiveDir] Domains Separated by Firewall

2004-04-01 Thread Andy Schan
Good thoughts- thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: 1 April, 2004 08:53 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Domains Separated by Firewall I mention the IPSec method as a way to make it easy to get all of

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Br anch Office Guide

2004-04-01 Thread Jorge de Almeida Pinto
Hi, I have been able to download it. If some of you still have trouble getting it, mail me offline and I'll mail it to you. Regards, Jorge From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Merry, Joel (US - Philadelphia)Sent: Thursday, April 01, 2004 16:51To: [EMAIL

RE: [ActiveDir] Cross forest policies - boxes in Win2k domain, users in win2k3 s ingle domain forest

2004-04-01 Thread Ulf B. Simon-Weidner
Title: Cross forest policies - boxes in Win2k domain, users in win2k3 single domain forest Hello Stephen, you'll need to set the "Allow Cross-Forest User Policy and Roaming Profiles" Policy, and AFAIK it is also introduced in Windows 2000 SP4. You are able to set this via registry also. We