RE: [ActiveDir] Custom Password Filter DLL

2004-12-07 Thread Santhosh Sivarajan
Thanks for the response and help.  I disabled the default Windows 2003 password complexity option because of the following password complexity requirements:   6 Characters long 2 Char 2 Numbers Password does not contain employee id   We use our Employee ID as the user name.  How do I check if my pa

RE: [ActiveDir] java to AD? and cracklib?

2004-12-07 Thread Brian Desmond
I think the easiest solution here is for you to simply migrate your environment over to SunOne LDAP. I'm sure your java guys can make Micro$soft Windowze talk to it. I hear the ctrl alt del screen can be implemented as an applet no problemo.   Seriously, though - it's all doable, just that you g

RE: [ActiveDir] exchange 2k permissions OT

2004-12-07 Thread Free, Bob
www.venkat.btinternet.co.uk/exchange/Permissions.doc Microsoft(r) Exchange 2000 Internals: Permissions Guide Paul Bowden, Program Manager, Microsoft Exchange Server Product Unit Little old but it covers E2K with a lot of "What permissions do I need to do * " Q&A -Original Message- Fro

RE: [ActiveDir] java to AD? and cracklib?

2004-12-07 Thread joseph.e.kaplan
Specifics please! I just talked a couple of different guys through some Java-related AD provisioning stuff over on Microsoft.public.adsi.general. These problems are all solvable. I tend to think that using JNDI for AD is a bit of a pain, but not nearly as painful as starting a religious wars wit

RE: [ActiveDir] exchange 2k permissions OT

2004-12-07 Thread Coleman, Hunter
One of the better resources I've found for this is Paul Bowden's "Microsoft Exchange Permissions Guide v4.01." I had downloaded it from somewhere on Microsoft's site quite a while back. I'm not sure if it's still available, but if you can't find it let me know and I'll send it to you off-list. Hun

[ActiveDir] exchange 2k permissions OT

2004-12-07 Thread Kern, Tom
Anyone know of a good doc on permissions for administering exchange 2k? i already read the "exchange store permissions" MS whitepaper but I'm looking for Admin permisions like "do yo have to be a full admin on the org to create a server in an admin group?" Or what permissions are needed to create

RE: [ActiveDir] java to AD? and cracklib?

2004-12-07 Thread Douglas M. Long
The right source would be some .NET implementation:) From: [EMAIL PROTECTED] on behalf of Robbie Foust Sent: Tue 12/7/2004 9:33 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] java to AD? and cracklib? Hi, Another department here is trying to get set up a web ba

RE: [ActiveDir] Got an honorable Mention...

2004-12-07 Thread Myrick, Todd (NIH/CIT)
So what was the answer to two? I think it was a lingering object initally, I removed it from both DC's, but I still got the error messages that the DC's didn't sync for more than 60 days, so I then DR'ed the one DC. Todd -Original Message- From: Jeremy Waldrop To: [EMAIL PROTECTED] Sent:

[ActiveDir] java to AD? and cracklib?

2004-12-07 Thread Robbie Foust
Hi, Another department here is trying to get set up a web based password change site but is having trouble getting java to talk securely with AD. Also, they are wanting to use cracklib to check passwords. I am not a programmer at all so I am wondering if anyone could point me to some resource

Re: [ActiveDir] Got an honorable Mention...

2004-12-07 Thread Jeremy Waldrop
Myrick, Todd (NIH/CIT) wrote: http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite   I would have won at least an IPOD if I could have figured out Lab 2.  I think that Lab was bugged though.    Todd   I got labs 1, 2 and had 3 rapped up and set th

RE: [ActiveDir] Unusual network traffic to DC's

2004-12-07 Thread joe
Hundreds of GIG? When you say ping do you mean ECHO's or LDAP Pings? What are the sources? This sounds like virus traffic if anything to me if you truly have even half or a quarter that much volume. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] Problem creating a trust - Resolved

2004-12-07 Thread Steve Shaff
I used Netdom.exe, in the resource kit to resolve the issue.   S   * Steve Shaff Active Directory / Exchange Administrator Corillian Corporation (W) 503.629.3538 (C) 503.807.4797 (F) 503.629.3674   From: [EMAIL PROTECTED] [mailt

RE: [ActiveDir] Unusual network traffic to DC's

2004-12-07 Thread Jeff Salisbury
I believe you are seeing the link speed detection traffic. Check out KB article 227260 (http://support.microsoft.com/?id=227260). Jeff Jeff Salisbury Network Infrastructure and Security Manager Belkin Corporation Information Services 310 604-2061 310 604-2022 fax www.belkin.com -Origina

RE: [ActiveDir] Unusual network traffic to DC's

2004-12-07 Thread Shannon Coleman
My guess is that a windows pc can't sneeze without contacting a DC for directions. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jacob Walker Sent: Tuesday, December 07, 2004 3:13 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Unusual network traffic to DC's

[ActiveDir] Unusual network traffic to DC's

2004-12-07 Thread Jacob Walker
One of the networking professionals within our company that says he is seeing hundreds of gigs of ping network traffic everyday to and from the domain controller. Why would we see all of this ping traffic to and from the DC's? Any ideas? List info : http://www.activedir.org/mail_list.htm Li

RE: [ActiveDir] LDAP Capacity Planning

2004-12-07 Thread Free, Bob
>Anyone know if MOM does this? MOM has a number of LDAP specific monitoring items in the Active Directory Management Pack , the closest to the response would probably be the Client Side Monitoring piece that does both LDAP and ICMP pings. Some of the others they highlight are LDAP searches per se

[ActiveDir] Problem creating a trust

2004-12-07 Thread Steve Shaff
Group,   I am having a problem creating a trust between two dev domains.  I have Enterprise rights on both sides, however, the error states that Operation Failed.  “The error is: Cannot create a file when that file already exits”.  What file?  The trust does not show up in the domain li

RE: [ActiveDir] Exchange OT

2004-12-07 Thread Dryden, Karen
Unless the items in Contacts were hard deleted, they go to deleted items first. Click on deleted items and if they're not in there, click on Recover Deleted Items from the Deleted Items folder, not from Contacts. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Be

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Ruston, Neil
That *is* it, but the company and it's affiliation with NetPro no longer exist :( [according to out NetPro Account Manager] Shame, there's definitely a gap in the market here... :) neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Baudino Sen

RE: [ActiveDir] LDAP Capacity Planning

2004-12-07 Thread Rachui, Scott
Title: [ActiveDir] Black Login Screen This is the Exchange 2000 application and the way some of the Distribution Groups were querying AD.  Because of the way they were nested and because of certain restrictions, there were huge queries that were exceeding the limits of the LDAP Query Policy

RE: [ActiveDir] Exchange OT

2004-12-07 Thread Michael B. Smith
Interesting. I missed your post to the Sunbelt list. Is this on YOUR desktop? Do you have DumpsterAlwaysOn set on YOUR computer? The two relevant KBs I use for this are: http://support.microsoft.com/default.aspx?scid=kb;en-us;886205 http://support.microsoft.com/default.aspx?scid=kb;en-us;246153

RE: [ActiveDir] Exchange OT

2004-12-07 Thread Kern, Tom
The sunbelt list about a week ago. I have the user's mailbox opened in outlook 2000 and 2003. when I open the folder(contacts) and go to "tools", the "recover deleted items" option is grayed out. how do i go about recovering a item deleted from the contacts folder?(or any folder besides deleted

RE: [ActiveDir] Exchange OT

2004-12-07 Thread Michael B. Smith
Just for my information, which Exchange list did you post the question to? DumpsterAlwaysOn affects Outlook - whether the Recover Deleted Items menu option is present for anything besides Deleted Items, it doesn't affect what gets put into the Dumpster. I don't have an Outlook 2000 install, but o

[ActiveDir] Exchange OT

2004-12-07 Thread Kern, Tom
Sorry, I posted this to the exchange list but got no reply. I have a user who deleted his contacts in outlook 2000. I have deleted item retention set to 30 days and his reg key is set to DumpsterAlwaysOn but when i highlight his contacts folder and go to tool, the recover deleted items option i

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Mulnick, Al
Darn near forgot about this one. You might want to have a quick look at the Mindcraft docs to see if they have something you can use. http://www.mindcraft.com/directorymark/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Baudino Sent: Tuesday, Dec

RE: [ActiveDir] LDAP Capacity Planning

2004-12-07 Thread Mulnick, Al
Title: [ActiveDir] Black Login Screen I think it's still hard to talk about response times until we know what you are looking at.  For example, do you want to know application response times?  Server side response times?  Client response (end to end) times?  What makes sense to monitor in ter

RE: [ActiveDir] LDAP Capacity Planning

2004-12-07 Thread Centenni, Jason
Title: [ActiveDir] Black Login Screen On the same topic. Anyone know of a “free” LDAP response time tool? Anyone know if MOM does this?   Jason         From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Tuesday, December 07, 2004 7:59 AM To: [EM

RE: [ActiveDir] LDAP Capacity Planning

2004-12-07 Thread Mulnick, Al
Title: [ActiveDir] Black Login Screen Can you give some more information about what those limits were and how they "worked" around them?  I'm interested in context because there are a lot of variables here.   I've typically seen a lot of folks that just write poor apps and trip the thresholds

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Mike Baudino
Is this it? Someone here talked to them about a year ago but their licensing wasn't flexible enough for us. http://www.functional-it.com/pdf_documents/NTSIM_SERVER.pdf

RE: [ActiveDir] GPO/SUS Issue

2004-12-07 Thread Peter Johnson
Thanks James!   Much appreciated! I’ll definitely take a look at this!!   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Blair, James Sent: 07 December 2004 15:19 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPO/SUS Issue   Peter,   Use the be

RE: [ActiveDir] GPO/SUS Issue

2004-12-07 Thread Blair, James
Peter, Use the below script...I use it for all my workstaion RIS images and unattended CD images...Once it updates (10-20 minutes +) depending on available updates, sizes, locations etc I place the workstation/s in their respective OU's which have a Group Policy that "regulates" the flow of up

RE: [ActiveDir] GPO/SUS Issue

2004-12-07 Thread Halonen Sami
Automatic Updates is not exactly the easiest ”opponent” to play with, since there’s very little you can tell it to do. There is a MS KB about forcing the detection cycle and it works most of the time, but not always, and that’s about all you can force auto update to do.   http://support.m

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Ruston, Neil
Gil et al (not Al :), "There was a company in the UK named NTSim that had a performance-simulation program for AD, but I think they may have gone under." I thought NetPro licensed this and re-packaged as DirectorySim? What happened to that tool? This may answer all/most of my questions :) Did Ne

[ActiveDir] GPO/SUS Issue

2004-12-07 Thread Peter Johnson
Hi all   I’m trying to troubleshoot and confirm whether or not my machines are actually getting the GPO’s settings and talking to my local SUS server for update purposes. Does anyone know of a way to force a Windows Update Client to actually go and check for updates?   I know which log

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Ruston, Neil
This is already happening. I pointed this out some time ago. A very naughty u turn :) neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: 06 December 2004 21:27 To: [EMAIL PROTECTED]; Renouf, Phil ; [EMAIL PROTECTED] Subject: RE:

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-07 Thread Ruston, Neil
Thanks to all for the responses. Further info: 1. I have researched the various config changes you all discussed at length - thanks for confirming my findings :) The DC/GC platform will only be used for DC/GC functions - it will not host e2k3 or any other app, so (I believe) the /3gb *is* appropr