[ActiveDir] RPC Unavailable

2004-07-20 Thread cyrus
greeting, I'm trying to connect to domain this message pop up, what does this mean and how can I correct it. THE LIST OF DOMAIN CONTROLLER FOR DOMAIN mydomain.domname.com IS UNAVAILABLE BECAUSE THE RPC IS UNAVAILABLE. RGDS cyrus List info : http://www.activedir.org/mail_list.htm List FAQ

RE: [ActiveDir] two ops

2004-07-20 Thread Brian Desmond
Open My computer properties (windows key + pause), goto the advanced tab, hit the startup/recovery options, then edit the boot.ini form that dialog and remove he line you don't want.. --Brian -Original Message- From: cyrus [mailto:cyrus] Sent: Tue 7/20/2004

RE: [ActiveDir] Troubleshooting NTFRS replication

2004-07-20 Thread Steve Rochford
Thanks for the comment. I would agree with what you say that deleting the files shouldn't fix it but I'm pleased to report that it did! I started just deleting a couple of files; a similar number (but not exactly the same number) went from the staging folder and some time later they went from the

RE: [ActiveDir] two ops

2004-07-20 Thread Rutherford, Robert
1) Just go into the boot.ini on the root of your boot partition and delete the reference to your old OS. If you are unsure then post the contents here and I'll tell you which 1. 2) How/Why are you using the domain name musicrights.co.uk? My company owns that domain name and we do not use it in

Re: [ActiveDir] two ops

2004-07-20 Thread cyrus
realy I have no idea how musicrights.co.uk got tagged on my mail, something interesting to look into. thanks for the help. rgds cyrus Rutherford, Robert writes: 1) Just go into the boot.ini on the root of your boot partition and delete the reference to your old OS. If you are unsure then post

Re: [ActiveDir] two ops

2004-07-20 Thread cyrus
did not find boot.ini to edit, i did a search, i only have selection of unchecking option to display list of operating system, maybe i mist something, on the default operating system once click it still shows 2 operating system of the same kind, i realy want to get rid one of this coz, it does

RE: [ActiveDir] Troubleshooting NTFRS replication

2004-07-20 Thread Marcus.Oh
Cool deal... :) The sharing violation I get happens to be a product that launches to annoy people to sign up for self-service password resets... I *WISH* I could delete that... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Rochford Sent:

RE: [ActiveDir] DC Performance Monitoring

2004-07-20 Thread Marcus.Oh
Haha... anything that isn't rated in sub-second performance? :) Generally we start getting some pretty loud complaints when bind times start to average higher than 5 seconds... this is pretty rare except for some of our busiest domain controllers. We've done away with using DSACCESS and have

[ActiveDir] Install MS Outlook Express

2004-07-20 Thread Edwin
I am aware that with AD and GPO's I can create MSI packages and distribute software. But I am not sure where to begin on installing a built-in program such as Outlook Express. Initially I disabled the use of Outlook Express by not installing it on the client machines. Now I want to install it.

[ActiveDir] LastLogOn

2004-07-20 Thread Rutherford, Robert
Title: LastLogOn Dear All, Not in anyway being a scripter. How would I get the date and time a user last logged on to pop up on their screen at logon? I guess it would be via the 'lastlogon' attribute? Linked into a login script? Cheers, Rob This e-mail and the information it

RE: [ActiveDir] Install MS Outlook Express

2004-07-20 Thread simon.geary
You might be able to use sysocmgr.exe in a startup script. I've used this to install IIS but never tried it with OE. http://support.microsoft.com/?id=222444 -Original Message- From: [EMAIL PROTECTED] on behalf of Edwin Sent: Tue 20/07/2004 14:03 To:

RE: [ActiveDir] IP Address Change

2004-07-20 Thread Alex Etin
Title: LastLogOn Hello Everyone! Our company has just acquired another division, and they already have AD infrastructure in place. Currently they have about 8 Domain Controllers worldwide. Because theirs and our IP addresses overlap, they will be changing their entire IP address

RE: [ActiveDir] IP Address Change

2004-07-20 Thread Rutherford, Robert
Title: Message 1st thing... are they all on one site? -Original Message-From: Alex Etin [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 14:56To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] IP Address Change Hello Everyone! Our company has just acquired another

RE: [ActiveDir] IP Address Change

2004-07-20 Thread Alex Etin
Title: Message No, they are in 7 different sites. One site has 2 DCs. The plan I am thinking of now is this: Network group will change Sites IP/Subnet. We Change the site and services IP/Subnet info. Change the IP on the Domain Controller. Restart the DC,

RE: [ActiveDir] Forest Wide DNS Zone

2004-07-20 Thread Perdue David J Contr InDyne/Enterprise IT
Title: [ActiveDir] Forest Wide DNS Zone James, That should help you out. It will include DNS replication with your AD replication. The other thing that you want to look at is if you have your sites and links configured in AD. That will help AD better manage replication. If you have, you

RE: [ActiveDir] IP Address Change

2004-07-20 Thread Rutherford, Robert
Title: Message A few bits from me.. I'm sure someone else can give a more detailed explanation.. 1) If possible, get the network guys to add a second IP range to the ethernet port of the routers... this way your clients, devices, servers, etc. will still work during the swap-over and also

RE: [ActiveDir] Install MS Outlook Express

2004-07-20 Thread Perdue David J Contr InDyne/Enterprise IT
Edwin, You can use the Internet Explorer Admin Pack to create a custome install. Then just choose the OE componenets. It will generate everything you need. Then just assign the MSI. Dave -- David J. Perdue MCSE 2000, MCSE NT, MCSA,

Re: [ActiveDir] LastLogOn

2004-07-20 Thread Tony Murray
Hi Rob The lastLogon attribute is not replicated between DCs. Even if you were able to script something to do this, you would need to query all the DCs in the site (or the entire domain if you wanted better accuracy) and then sort the results. For most implementations this is simply not

RE: [ActiveDir] LastLogOn

2004-07-20 Thread Rutherford, Robert
Thanks for the info Tony It was a desire rather than a necessity but would have been useful. BR Rob -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 16:13 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] LastLogOn Hi Rob The lastLogon attribute

RE: [ActiveDir] LastLogOn

2004-07-20 Thread Durant, Ryan A
Title: LastLogOn Query every domain controller and store those results in a database. The number of domain controllers, amount of users and link speeds will determine how fast you can collect the stats. You may only be able to collect once a day or possibly once an hour. Have a logon script

RE: [ActiveDir] LastLogOn

2004-07-20 Thread Tim Foster
Title: LastLogOn BgInfo from http://www.sysinternals.com/ntw2k/freeware/bginfo.shtml may help. Tim Foster From: Durant, Ryan A [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LastLogOn Query

RE: [ActiveDir] Fw: perl-ldap with ADAM

2004-07-20 Thread Mulnick, Al
This should help out: http://www.microsoft.com/windowsserver2003/adam/ADAMfaq.mspx There is also a section that describes what you need to do in order to allow anonymous binding. But, for authenticated usage, there is a section that describes the following: Users Q. Why

RE: [ActiveDir] LastLogOn

2004-07-20 Thread Rutherford, Robert
Title: Message Oh yeh... that's a good idea. We have it on our servers, but yeh it would also work in the clients. I'll look into it. Cheers Tim. -Original Message-From: Tim Foster [mailto:[EMAIL PROTECTED] Sent: 20 July 2004 17:06To: [EMAIL PROTECTED]Subject: RE:

[ActiveDir] Empty Group Lists

2004-07-20 Thread Diel,Nick \(Work\)
I am new to this list and have a problem hopefully someone can help me out with. In several of my groups (both security and distribution, all universal) the Members section is blank. There are still members in them, but I just cant see the members. The distribution and security groups

[ActiveDir] account operators and admins

2004-07-20 Thread Creamer, Mark
Is there a built-in mechanism that keeps account operators from being able to manage a domain admin account? I noticed when we apply account operators the right to manage an admin account, a little while later its removed. Mark Creamer

[ActiveDir] Question about replication connection objects

2004-07-20 Thread David Adner
I know if I modify an automatically generated connection object, it gets renamed to its GUID and takes on the behavior of a manually created CO (meaning the KCC will no longer automatically maintain it). What if I move an automatically generated CO between DC's? The name doesn't get renamed, but

RE: [ActiveDir] account operators and admins

2004-07-20 Thread Free, Bob
google for adminsdholder From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Tuesday, July 20, 2004 10:33 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] account operators and admins Is there a built-in mechanism that keeps account operators from being able

[ActiveDir] win2k pro or server?

2004-07-20 Thread Kern, Tom
Sorry if this is really basic and covered before- but whats the quickest way(via script or gui admin tool) to tell if a particular pc/server is running win2k pro or server? thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Brown, Bill [contractor]
If you hit the start button - there is a vertical bar that displays this information... R/Bill -Original Message- From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 2:14 PM To: ActiveDir (E-mail) Subject:[ActiveDir] win2k pro or server? Sorry if

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Kern, Tom
ha ha, i meant to query remote pcs on my network... -Original Message- From: Brown, Bill [contractor] [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] win2k pro or server? If you hit the start button - there is a vertical bar

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Craig Cerino
Depends on how your box is configured. Tom - -are you trying to get this information from a remote machine? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill [contractor] Sent: Tuesday, July 20, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: RE:

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Tim Foster
OK, I know this'll sound like there's only one tool in my toolbox...but how about trying bginfo and running it on your PCs via a logon script. This will give you OS type plus a whole lot more. -Original Message- From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 2:30

RE: [ActiveDir] LastLogOn

2004-07-20 Thread Passo, Larry
Title: Message Bginfo will show you the logon server but it doesnt show you the last logon value. It is still subject to the requirement that you need to query the last logon time from all of the DCs in the domain. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Passo, Larry
But you can only run bginfo on a local box, not on a remote box. He would have to termserv to the remote box to view the wallpaper that bginfo creates. I see the following possible ways to determine OS type: 1. If terminal services are activated on all servers, if the tsclient can connect to the

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Rachui, Scott
You can do an LDIF query and search the computer object for the operatingSystem attribute. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tim Foster Sent: Tuesday, July 20, 2004 1:39 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] win2k pro or server?

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Tim Foster
I have all the PCs in my domain run bginfo.exe at startup, with an associated config file (.bgi). The config file contains an instruction to return the output to a database (which can be .mdb, .xls, etc.) which is located on the server. I have also edited the config file so that the bginfo

RE: [ActiveDir] account operators and admins

2004-07-20 Thread Creamer, Mark
Thanks Bob, looks like thats whats happening mc From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 1:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] account operators and admins google for adminsdholder From: [EMAIL PROTECTED]

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Chuck Oppermann
From the TechNet Script center: http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm26.ms px strComputer = . Set objWMIService = GetObject(winmgmts: _ {impersonationLevel=impersonate}!\\ strComputer \root\cimv2) Set colOperatingSystems = objWMIService.ExecQuery _

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Diel,Nick \(Work\)
It could also be possible to just look system drive through the hidden share. I can't think of what files would be different or not exist off the top of my head. Also might be a registry key you can check remotely if you don't have remote registry access disabled. Nick -Original

[ActiveDir] useraccountflag

2004-07-20 Thread Creamer, Mark
Robbies cookbook contains code on setting a password to never expire, but what if I want to set those that are set to never expire to start expiring? How would I alter the code? I tried setting to 512 (normal account), but it returns: Did not need to change userAccountControl (66048)

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-20 Thread Fugleberg, David A
Some further info and a question... I did some further testing with the commands in my previous note. I have a script that reads the NT Security descriptor and dumps the control flags...if I create a new user the control flag is 0x8C04. If I then run DSACLS DNofTheNewUserObject /S, and then

RE: [ActiveDir] Install MS Outlook Express

2004-07-20 Thread Edwin
David, I did this at home but it looks like it will work. I don't see why it wouldn't. But I was able to download IEAK SP1 and specify OE just like you said. The MSI package has been created and all looks good. I am going to test this on a workstation where it needs to be installed tomorrow

RE: [ActiveDir] win2k pro or server?

2004-07-20 Thread Durant, Ryan A
Check this reg key HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions For value: ProductType If the value is Winnt then it's the workstation not the server. YMV. Hope this helps. Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: