[ActiveDir] removing computer problem

2005-11-05 Thread Roseta radfar
Hello, I have a domain and several computers in that. Tow or three of computers have been disconnected from domain with out being removed from AD first. Now I can not remove it from AD. It gives me this error: The DSA object can not be deleted. What is the way to remove these computers

Re: [ActiveDir] removing computer problem

2005-11-05 Thread Za Vue
1)DNS DNS 2)Try ADSI tool Roseta radfar wrote: Hello, I have a domain and several computers in that. Tow or three of computers have been disconnected from domain with out being removed from AD first. Now I can not remove it from AD. It gives me this error: The DSA object

RE: [ActiveDir] removing computer problem

2005-11-05 Thread Almeida Pinto, Jorge de
If you just disconnected the DC(s) without demoting it/them, the metadata from that/those DC(s) is still in AD. To remove AD metadata look at the following articles. These explain very well on how to do it. How to remove data in Active Directory after an unsuccessful domain controller demotion

[ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Almeida Pinto, Jorge de
FYI Potential file corruption problem on NTFS volumes during extensive stress tests in Windows Server 2003 Service Pack 1 http://support.microsoft.com/default.aspx?scid=kb;en-us;909360 Cheers, Jorge This e-mail and any attachment is for authorised use by the intended recipient(s) only. It

RE: [ActiveDir] Exchange now supported on virtual hardware

2005-11-05 Thread joe
The biggest issue, IMO, with virtualizing DCs is possibility of rollback. It is also a pretty cool strength if you are doing it on purpose and really know what you are doing, think of a very cool forest recovery feature if you can truly manage it properly. Mostly I would expect most places to mess

RE: [ActiveDir] Active Directory 3rd Book

2005-11-05 Thread joe
Interesting, O'Reilly doesn't even have it listed yet. I just heard from the O'Reilly that it is finally out of copy-edit. On the co-author piece. Alistaire wrote the initial edition, Robbie did the 2nd Edition update, I did the 3rd Edition update. You may want to ask the reviewers (they almost

RE: [ActiveDir] AD Lag Site - Actually can someone be given patch rights safely on a DC

2005-11-05 Thread joe
Err shoot for a subject change next time. :o) The answer to your question... NO. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Whaley, GregSent: Tuesday, October 25, 2005 3:35 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Site Is it possible to

RE: [ActiveDir] Computer account cleanup

2005-11-05 Thread joe
Correct. If you are aware of such special users in advance (or after you stumble over them) it is good to somehow mark their account so you know it the next time. Put them in a special OU or add a special attribute or set some existing attribute to some value. Then you can tell oldcmp to avoid

RE: [ActiveDir] Domain Controller Consolidation utilizing Dual Core CPUs

2005-11-05 Thread joe
Title: Domain Controller Consolidation utilizing Dual Core CPUs I actually stumbled on a page[1] I hadn't seen before where MP is acknowledged for the scaling ratio, at least in the 8-proc configuration. They indicate that you have to use a 75% scaling factor so an 8 proc GC is actually

RE: [ActiveDir] Global Catalog

2005-11-05 Thread joe
I agree that you should properly review the situation before deploying anything. I disagree on the comments on the domain security boundary stuff. Like it or not, the forest IS the security boundary. There isn't any so-so security boundary at the domain level. Account Policy and sort of

Re: [ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Is it me or is that a dumb KB? A volume is full or almost full. Yeah data will start getting screwed up when you have that situation. In SBSland we lose our CAL licenses and other such fun things on a too tight drive. Almeida Pinto, Jorge de wrote: FYI Potential file corruption

RE: [ActiveDir] LastLogon timestamp

2005-11-05 Thread joe
Part legacy. It didn't replicate in NT4, it would be a a serious change in functionality if it all of a sudden started replicating. Some people used that attribute to determine which DCs were being "used" the most and processing the most auths. Also it told you where customers were authing

RE: [ActiveDir] salary(OT)

2005-11-05 Thread joe
Think how bad they would be at the material if they didn't teach it. :o) I would say that there are some people who don't care if they look like idiots while up in front of others. I can think of a presenter I saw this year that made me cringe. I knew it was going to be rough going in having

RE: [ActiveDir] salary(OT)

2005-11-05 Thread joe
Smoking Nothing... Inhaling Well mortar and grout dust mostly... Yeah there were a lot of reviewers and yes I expect to see more than 2000 sold. I was being sarcastic. I know I shouldn't spring new MO's on people like that. ;o) Just the same folks, buy buy buy. Give to every person you

RE: [ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Rick Kingslan
Hmmm. I guess I see this in a different light. In my new, improved view of the way that Microsoft communicates things, no - it doesn't seem to be very dumb at all. The statement and the KB, that is. At this moment, I'm watching George Carlin's new HBO special. He relates that he's always

Re: [ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Not dumb for Microsoft dumb for the Admin to get the drive in that condition and need a KB to wack them upside the head. At the end of the day... it's my responsibility for my network. I won't be complaining to Microsoft that they didn't warn me that bad things might happen if I don't

RE: [ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Ed Crowley [MVP]
Not that he isn't clever and funny, but I don't think George Carlin has written any new material in 20 years. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT (somewhat): Exchange Server 2003 Service Pack 2 DSProxy Referral Process Changes

2005-11-05 Thread Tony Murray
You weren't the only one [1] Tony [1] ...but I'm guessing you were the most vocal. ;-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Saturday, 5 November 2005 10:41 a.m.To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] OT (somewhat): Exchange Server

RE: [ActiveDir] FYI: MS-KBQ909360 - Potential file corruption on NTFS volumes

2005-11-05 Thread Ken Schaefer
Frankly my expectation from a file system that's marked as being robust and enterprise ready is that you should lose nothing if the drive is almost full, and the file system should shut down gracefully if the drive is full, especially in normal situations. Sysadmins should not have to worry that

RE: [ActiveDir] OT: Legato Replistor

2005-11-05 Thread Noah Eiger
Thanks for the thought, Brian. After your suggestion, I tried to do some research on DFSR. Beyond the MSDN schematics and an article that seems to get reprinted on several sites, I cant really find anything about how well this works. I realize that it is in beta right now but have you seen

[ActiveDir] Raid suggestions for DC maybe OT

2005-11-05 Thread Dan Cox
What would be the suggested RAID and partitioning scheme for a Domain controller. Any suggestions are appreciated. Thanks. Dan Cox

RE: [ActiveDir] OT: Legato Replistor

2005-11-05 Thread deji
since R2 is in public Beta now (http://www.microsoft.com/windowsserver2003/default.mspx), you'll be well served if you just join in and test it out yourself. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do