Hi folks,
I realize this is a totally off-topic question, but seeing
as there are many experts, I thought someone may have an idea. As of yesterday,
I began receiving double emails from the same person, actually from anyone
sending me an email. I receive a lot of emails, and it is a nuisan
See
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techref/en-us/w2k3tr_dfs_how.asp
for info and controlling it in 2k3
In windows 2000 you can use
http://support.microsoft.com/default.aspx?scid=KB;
I don't think your users will have much confusion over the matter. Just have
them use upn to login when a domain is required. It's bene a logn time since I
did an NT4 -> AD inplace upgrade, but I want to say you can edit the netbios
name during the upgrade.
--Brian Desmond
[EMAIL PROTECTED]
P
Hi -
I am setting up public access computers using the CommonScenarios from
Microsoft as examples (thanks, Darren). The machines are set to login
automatically (as per the kiosk scenarios). I plan restart the machines each
night. What I can't figure out is how to have it empty the trash, clear th
Title: domain naming
Our organization is planning an in-place upgrade from NT4 to W2K3. Our current NT domain name is no longer applicable (due to a corporate name change), unwieldy, and just plain ugly, and so we'd like to select a different name during the upgrade realizing of course that ou
Here is the detailed info on the migraiton procedure
http://support.microsoft.com/default.aspx?scid=kb;en-us;325379
Santhosh Sivarajan
MCSE(W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),CCNA,Network+
On Tue, 15 Mar 2005 15:06:22 -0500, Francis Ouellet
<[EMAIL PROTECTED]> wrote:
> Ah sorry, I was under the i
The DFS client does this. It uses information in AD along with site affinity.
I'm not intimately familiar with the workings of DFS, though I'm not fmailiar
with this bit you heard from MS.
--Brian Desmond
[EMAIL PROTECTED]
Payton on the web! www.wpcp.org
v - 773.534.0034 x135
f - 773.534.810
I think its just based on dns/site topology.
So,its probably whichever DC responds first after a dns lookup based on site
information.
But I could be wrong.
Run netmon or ethereal to see what's going on under the hood.
--
Sent from my BlackBerry Wireless Handheld (www.Bla
I currently use python scripting language to create users via the LDAP
protocol. This works well for us because we pull daily from our Human
Resources system.
I have in the past used:
php -> via LDAP protocol
LDIFDE -> using LDIF Files & a batch script
C++
adduser (
Right, I see your point!
Thanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Tuesday, March 15, 2005 1:30 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Hard setting Global Catlogs
You would want to make sure that you
You would want to make sure that your sites are properly defined and that
your DNS is properly configured.
Netdiag and dcdiag can be useful here as well.
As for making it one large site, that's something you'll have to decide
based on your requirements. But if that's an option, does it matter w
Another option here is to use the DS tools (dsadd) to script user
creation. An easy way to do this is to create a spreadsheet that
includes all the information that you want to add (firstname,
lastname, userID, DN, address, phone # etc.) and then use a formula to
generate a bunch of DSADD commands
Correct meaning, does each site have a subnet associated with it and
have automatically generated connection objects? I've run replmon
against it to force replication and removed the auto-generated
connections then let AD recreate them, what else should I be looking
for? Or better yet since we are
I have a question...
When a user is authenticating to AD, what mechanism directs him to a particular
instance of SYSVOL? And is there some way to actually see which DC the client
will be preferring?
I ask this because Microsoft has recently told me that in certain
circumstances, clients will
Exactly what I was looking for, Thank you.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Darren Mar-Elia
> Sent: Tuesday, March 15, 2005 12:17 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Disable link between GPMC and dsa.m
That's exacctly what i intend to do. Disable those suckers.
thanks all
- Original Message -
From: "Mulnick, Al" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, March 15, 2005 2:44 PM
Subject: RE: [ActiveDir] Can you expire a computer account in AD
> Because it derives from the User class, I ca
I've documented this on my web site. Check out
http://www.gpoguy.com/faqs.htm#GPMC-related
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of daragon50
Sent: Tuesday, March 15, 2005 12:07 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Dis
When GPMC is installed, it changes dsa.mcs to provide a linked button to
launch GPMC. I need to change that behavior and make dsa.msc behave like it
did before GPMC was installed. I'm sure it requires a change in the
registry, but I haven't been able to identify where or what. Does anyone
have a
Ah sorry, I was under the impression that you had already ran forestprep
for the domain while you installed Exchange 2k3.
Sorry for the confusion,
Francis
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Shadow Roldan
Sent: 15 mars 2005 14:53
To: ActiveDi
This was the correct answer, running it all now. The forestprep's are in
fact different (maybe they should have named them differently to avoid
this kind of confusion)
Thanks for the help!!!
Shadow
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnic
Because it derives from the User class, I can't think of a reason why you
couldn't set that value. I'm not sure (and have no way to test at the
moment) if that value would be valid for what you're doing however.
You could just disable the computer accounts vs. expire them. That's
available from
Hi,
After testing things out with the loopback i still can't do
something and i'm wondering if it posible to do it.
With the loopback it's possible to make a user defined policy on a
computer basis, but is it possible to make a computer defined policy on
a user basis?
What I wanna do is
I believe the command is adprep /forestprep and then adprep /domainprep
to add a Windows 2003 domain controller into a Windows 2000 domain.
Dan
> Original Message
> Subject: [ActiveDir] A forestprep question
> From: "Shadow Roldan" <[EMAIL PROTECTED]>
> Date: Tue, March 15, 2005
thanks AL
thanks Tom
Ok i used oldcmp. among others and the pwdlastset (oldcmp works great) came
back feb 2000 even though the password expiration says march 20 2005.
i dont think theres an issue with locating old accounts with pwdlastset the
thing is what's up with a password expiration date o
Sounds like your site settings are not working as expected. Have you
verified your AD sites are correct?
Al
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Hogenauer
Sent: Tuesday, March 15, 2005 2:11 PM
To: ActiveDir@mail.activedir.org
Subject:
It's been a while, but last I checked forestprep for AD is different than
forestprep for Exchange. You'll need to run forestprep for AD prior to
installing a 2003 DC.
I think that's what you're asking, but correct me if I'm wrong.
Al
-Original Message-
From: [EMAIL PROTECTED]
[mailto:
He beat me to it ;0)
You may also want to couple that with a simple ping method to validate if
the machine actually exists or not. Might cross reference it with DHCP/DNS
if ping is too much overhead.
Just some thoughts.
Al
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROT
We recently integrated with another company, now I’m
seeing issues like my Exchange server is looking to GC in the other sites as
are users for Authentication instead of locally.
Can I hard set the GC list for all users in my site to use
the GC here and users in the other site to use the G
Thank you
jb
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Tuesday, March 15, 2005 11:09 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: vbs help
http://www.jansfreeware.com/articles/asp-string-literals.html
-Or
P West wrote:
We are trying to clean up old AD pc accounts. Have used every tool under
the sun to come up with the pwdlastset to show old accounts.
example
One pc says the pwdlast set is feb 2000 when our ad guy looks at password
expiration the dates are say march 20 2005. but the pwdlastset date
Hi,
If the domain controller will be part of the same forest as the one
where you ran /forestprep then yes, the domain is already set. The
schema configuration is valid for the whole forest.
Hope this helps,
Francis
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] O
We are trying to clean up old AD pc accounts. Have used every tool under
the sun to come up with the pwdlastset to show old accounts.
example
One pc says the pwdlast set is feb 2000 when our ad guy looks at password
expiration the dates are say march 20 2005. but the pwdlastset date is feb
2000.
I'm just curious why you would want to expire a computer account? I would
guess you could if you really set your mind to it, but not sure what
advantage that would provide.
??
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko
Sent: Tuesday,
Hello
I'm adding a windows 2003 server (shipped this way) to my 2000 domain as
a new domain controller. This will be the first of a staged migration to
a full windows 2003 domain.
Additionally, I have an Exchange 2003 server running on an windows 2000
server. I have already run forestprep when I
P West wrote:
Hey people
I know you can expire a user account.
Is there anything like expire a computer account in AD.
There is no expiration date but unused computer account will "expire"
after some time period becouse will get out of sync with its domain
account password
--
Tomasz Onyszk
This can definitely be done with SDS as I do it pretty often and have a few
production applications that use this every day to great effect.
The first thing I'd do is try your query in ldp.exe or ADfind and make sure it
is behaving the way you want it to.
Joe K.
-Original Message-
From
FYI,
Hello,
You are receiving this email as you've participated in the LimitLogin beta
program.
We are happy to announce the availability of LimitLogin v1.0, an application
that adds the ability to limit concurrent interactive user logons in an Active
Directory domain. It can also keep track
The AD product team doesn't know about this tool - it wasn't developed
by them... It was came out of a consulting engagement if memory serves
me...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt Brown
Sent: Tuesday, March 15, 2005 9:07 AM
To: ActiveD
I take you have already seen this doc, correct?
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/examp
le_code_to_retrieve_changes_using_usnchanged.asp
One reason I can think of that would explain why no results is that there
are no changes that meet that criteria. Have you
Isn't that link from the Beta? There is no information on Microsoft's site
regarding the product other than through the Beta Site.
> You can find the beast here:
> http://download.microsoft.com/download/f/d/0/fd05def7-68a1-4f7
> 1-8546-25c359cc0842/limitlogin.exe
Thanks,
--
Matt Brown
[ SELEC
If you're using SUS and you don't approve SP2 for download, the clients will
not get SP2 from SUS.
If the clients have enough privileges to visit, download and install software
from the Windows Update site then they will receive the update from Windows
Update IF they visit the site and check fo
You might want to have a look at the
newly released LimitLogin tool from MS.
Quote from the help:
LimitLogin v1.0
LimitLogin is an application that adds the ability to limit
concurrent user logins in an Active Directory domain.
It can also keep track of all logins information in A
Hey people
I know you can expire a user account.
Is there anything like expire a computer account in
AD.
Thanks
A
http://www.jansfreeware.com/articles/asp-string-literals.html
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway
Sent: Tuesday, March 15, 2005 10:42 AM
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] OT: vbs help
Thank you the playe
For a quick trigger without having to write your own filter you could use
the eventtriggers command in Windows 2003. This combined with a quick blat
script should allow you to do what you need.
Dave
-Original Message-
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: 15 March 2005 14:01
Thank you the playerupgrade\playerversion will work great
Here's what I have so far
' Create the WScript Shell Object, which contains the Registry methods
Set WSHShell = WScript.CreateObject("WScript.Shell")
Set inshell = WScript.CreateObject("WScript.Shell")
sValue =
WSHShell.RegRead("HKLM\SOF
Yes, I have done this.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Tuesday, March 15, 2005 9:54
AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] XP Srv Pk 2
Anyone sucessfully pushed XP Service
Pack 2 via GPO to XP clients from a W
The chicken did make an appearance at the troubleshooting workshop last
night
I have one of the door-prize chickens from the first DEC back in my office-
they make good stress relievers. One squeeze and the squawk transfers the
stress to the people in all the other cubes around you...
Anyone sucessfully
pushed XP Service Pack 2 via GPO to XP clients from a W2K
AD?
Thank
you,
Z.V.
One more thing, explorer needs to be restarted, logout and in, or reboot,
for it to take affect.
John
"Abbiss, Mark"
<[EMAIL PROTECTED]
I don't have 10.0 installed, but if it's like 9.0 there is no value there
and the error would be expected. The value is in the registration key below
that.
If you really want to know what is installed, you may want to look at the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\PlayerUpgrade\P
Hi Mark..
This is a policy setting that you can set at the computer level
I haven't had to do this for SP2, but I'm sure it calls an MSI, If you put
a hash on that MSI, the machine shouldn't be able to run it. It's up in
the security settings, and you have to create rules and disallow that
s
That is what I have been trying to do, but there is no value set for
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\10.0
So I get the error
This is the code I'm trying
Set WSHShell = WScript.CreateObject("WScript.Shell")
WScript.Echo WSHShell.RegRead("HKLM\SOFTWARE\Microsoft\MediaPlayer\10.0
So something like MOM is not being used?
WMI scripts would be another avenue to pursue that may solve your problem.
Something that listens for trigger of the event and if it matches sends the
email via SMTP.
Is that what you had in mind?
-Original Message-
From: [EMAIL PROTECTED]
[mail
Dates are one of the few things that don't move nicely from Access to
real SQL.
I always format dates as (eg) '15 Mar 2005' - this copes whether your
software is set for proper dates(!), American dates or any other
format.
I have a simple function to cope with this:
Function showdate(d)
d=day(
Lets try it in txt format attachment it got really hosed via copy and
paste in email..
Read comment line before running
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Miller Carol L
Contr DYN/ITS
Sent: Friday, March 11, 2005 12:51 PM
To: 'ActiveDir@ma
There are no guarantee with this scriptuse at your own risk
Make sure word wrap is not turned on some of these lines are long
The credit for this script goes to the internet and various sites that
have certain parts of this script.
I just put them together
+++
Hi
I´m trying to retrieve only changes from active directory by using the
uSNChanged property in my query.
However, even if a manually change an object and verify that the
uSNChanged is changed, I still don´t get any results back from my
query.
Sample query:
"(&(objectClass=user)(objectCategory
The problem with this is that all the information I have read tells me that as
of April 12th the GPO/registry hacks that you put in place are ignored and SP2
begins its merry way task of downloading itself and installing. This is whether
you use Automatic Updates or SUS.
So as soon as I make an
Hi James,
Depending on your needs, you have at least three
options:
A. Create shortcuts to all the target locations, which
causes LNK files to be generated. Copy these LNK files to the NetHood folder in
each users profile. If you put this in a login script, it takes care of any
changes.
60 matches
Mail list logo
