Re: [ActiveDir] OOT: WSUS

2006-01-03 Thread William Lefkovics
If you don't already know, there is a good WSUS list at: http://www.patchmanagement.org/wsusfaqs.asp Harjadi, Yandi wrote: Hi, Is it possible to make the downstream server to retrieve the updates directly from MS WSUS server instead of upstream server in replica mode ? I need to have 1

Re: [ActiveDir] WinXP and Win2003

2006-01-03 Thread shereen naser
I have 2 seperate directories, I used static IP for the server and left it at dynamic for the xp. I loose the tools cause of 2 things, am so lazy to install all that on the new windows 2003 server installation, besides if I actually wanted to do that most of the tools won't work, in addition

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread Thommes, Michael M.
Hi joe, I don't see where scavenging has anything to do with it. The *wrong* SRV records are being produced on the child domain DCs. What I see on my AD-integrated DNS server is just a reflection of what those DCs register. -mike -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread Almeida Pinto, Jorge de
what do you mean with The *wrong* SRV records are being produced on the child domain DCs? questions about this... * On ALL child domain DCs? * Do you mean the SRV RRs are in registered wrong in DNS, but the DCs itself register the correct records or do you mean the SRV RRs are in registered

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread neil.ruston
Title: RE: [ActiveDir] DCs generating SRV records for 2 sites!? Excuse me butting in mid thread, but if a DC was moved from site A to B, then SRV records will exist for that DC in both sites, within DNS, until old SRV records are removed thru scavenging. Why not simply remove the 'incorrect'

[ActiveDir] Maurice McNeill is out of the office.

2006-01-03 Thread MMcNeill
I will be out of the office starting 01/03/2006 and will not return until 01/04/2006. I will respond to your message when I return. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread Thommes, Michael M.
Title: RE: [ActiveDir] DCs generating SRV records for 2 sites!? Hi Neil/Jorge, The child domain DCs are generating SRV records (as seen in their local netlogon.dns and netlogon.dnb files) for both their original site (to which they have subsequently moved back into) and the other site

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread joe
What is going to remove the records? The DCs don't look in every site in DNS to see if there are records for themselves registered. That is what scavenging is about, to remove old records that are no longer active. With that information you have given, are you sure your tests for Exchange were

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Tomasz Onyszko
Rick Kingslan wrote: Tomasz, I think that Mark is looking to populate his metabase with data other than User 1, User 2, User 3, etc. with simple or blank attributes. So, he's looking for stuff like Homer Simpson, with all of the user data, then Marge, etc. So stuill I don't think he will find

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread Almeida Pinto, Jorge de
stop the netlogon service delete netlogon.dns en netlogon.dnb start the netlogon service open netlogon.dns and which sites are listed? have the child DCs been configured to cover additional sites? Jorge From: [EMAIL PROTECTED] on behalf of Thommes, Michael

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread neil.ruston
Title: RE: [ActiveDir] DCs generating SRV records for 2 sites!? This is analogous to a client moving from one domain to another. The client would create an A record in domainA (using DDNS) and then also in domainB using DDNS, again. The A record in domainA would need to be removed manually,

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Mark Parris
I utilise VBScript too, but I wanted user data with a little more substance. 500 names in an ldf file is a lot more use to me than a vbs file which creates user 1, 2, 3 etc etc Mark -Original Message- From: Tomasz Onyszko [EMAIL PROTECTED] Date: Tue, 03 Jan 2006 15:49:22

[ActiveDir] Updating client DHCP settings in Windows NT

2006-01-03 Thread Rocky Habeeb
Dear List, I'm having trouble getting Windows NT 4.0 (SP6a) clients who get DNS data including WINS server addresses to pick up new WINS servers through my DHCP settings on my W2K3 (FFL) DHCP. I had an error in the DHCP address of one of the WINS servers and I have corrected it on both of my

RE: [ActiveDir] Updating client DHCP settings in Windows NT

2006-01-03 Thread Almeida Pinto, Jorge de
maybe stupid questions... but are you WINS server IPs on the workstations also dynamically distributed by DHCP or are these defined locally as static addresses? Are you using both SERVER OPTIONS and SCOPE OPTIONS? Remember, if you changed the WINS IPs in the server options and you still have

RE: [ActiveDir] HAPPY NEW YEAR!

2006-01-03 Thread Lucia Washaya
Return Receipt Your RE: [ActiveDir] HAPPY NEW YEAR! document :

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Al Mulnick
I haven't seen a generic user creation utility, however in similar situations I prefer to have a bit more control than that and would instead create a list of user names that I can easily glance at and know the originating directory. If you truly want random names to work with, you may want to

RE: [ActiveDir] DCs generating SRV records for 2 sites!?

2006-01-03 Thread joe
Title: RE: [ActiveDir] DCs generating SRV records for 2 sites!? Oh yeah, interesting point, the DCs might be covering that site because nothing else is for the domain that the DCs are controllers for. Good catch Jorge. Another way to check this is with nltest /dsgetsitecov From:

RE: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Jerry Welch
Another approach that will work is to go to any good sized 'white pages' site and copy/paste a list of names to an excel spreadsheet. Thengenerate the rest of the cells for each line based on this data. Jerry Welch CPS Systems US/Canada: 888-666-0277 International: +1 703 827 0919 (-4

RE: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread joe
Another alternative which may be less prone to getting you in some form of trouble is to take some source as described by Al or even from your corporate directory and pull off all first, middle, last names and then write a script to randomly slam them together in various combinations. You

RE: [ActiveDir] Updating client DHCP settings in Windows NT

2006-01-03 Thread Rocky Habeeb
Title: [ActiveDir] Updating client DHCP settings in Windows NT Jorge, Thanks for responding. The Windows NT clients have their WINS addresses dynamically distributed. The static WINS entry fields are blank on the clients. But I perceive you to be a frikkin GENIUS! I have just checked all my

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Al Mulnick
Along those lines, sites such as http://www.census.gov/genealogy/names/names_files.htmlhave information you can use to seed the generator that would not be tied to any private information (that I can tell; I'm no lawyer though this is publicly available information). I think something along the

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Mark Parris
Al, This is what I was going to do, I was just hoping that I did not have to reinvent the wheel. Mark -Original Message- From: Al Mulnick [EMAIL PROTECTED] Date: Tue, 3 Jan 2006 10:37:27 To:ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: Request for Test AD Poplulation Data

RE: [ActiveDir] Updating client DHCP settings in Windows NT

2006-01-03 Thread Almeida Pinto, Jorge de
{PAUSE} no no no we wanna see this...- {PLAY} --- INCOMING.SMACK! ;-)) just kidding! ;-)) hmmm...funny... When a DHCP server distributes IPs for a certain scope it consolidates the server options configured at server level and scope options configured at scope level. If some option is

[ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Susan Bradley
What's Microsoft's response to the availability of third party patches for the WMF vulnerability? Microsoft recommends that customers download and deploy the security update for the WMF vulnerability that we are targeting for release on January 10, 2006. As a general rule, it is a best practice

RE: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Rich Milburn
Mark - something I did once that proved pretty easy is as follows: 1) Grab a list of first names and a list of last names from a genealogy site - as many as you can, but make sure they are not the same number (i.e. 97 last names and 93 first names) 2) make a spreadsheet with the last names in

Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread Mark Parris
Many thanks. Mark -Original Message- From: Rich Milburn [EMAIL PROTECTED] Date: Tue, 3 Jan 2006 12:49:46 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Request for Test AD Poplulation Data Mark - something I did once that proved pretty easy is as follows: 1) Grab a list of

[ActiveDir] Enable Windows Integrated Authentication through GPO

2006-01-03 Thread Salandra, Justin A.
How does someone enable Windows Integrated Authentication through a Group Policy. You will find this on the Advanced tab of Internet Options. Justin A. Salandra MCSE Windows 2000 2003 Network and Technology Services Manager Catholic Healthcare System 646.505.3681 - office

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Navroz Shariff
Regarding the June 10 WMF exploit patch release, can somone please point me to Microsoft's article regarding the release. Thanks, Nav -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley Sent: Tuesday, January 03, 2006 12:33 PM To:

Re: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Susan Bradley
January. http://www.microsoft.com/technet/security/advisory/912840.mspx Navroz Shariff wrote: Regarding the June 10 WMF exploit patch release, can somone please point me to Microsoft's article regarding the release. Thanks, Nav -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Kennedy, Jim
http://www.microsoft.com/technet/security/advisory/912840.mspx January 10th...is the target. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Navroz Shariff Sent: Tuesday, January 03, 2006 3:17 PM To: ActiveDir@mail.activedir.org Subject: RE:

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Navroz Shariff
Thank you Susan. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley Sent: Tuesday, January 03, 2006 3:27 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: WMF issue - patch on the 10th January.

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Jeff Salisbury
I recommend taking a look at the SANS Internet Storm Center (http://isc.sans.org/) write up as well, including information regarding an unofficial patch that is now available in MSI installer format. Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Navroz Shariff
Thanks Jim and everyone else :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kennedy, Jim Sent: Tuesday, January 03, 2006 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: WMF issue - patch on the 10th

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Kennedy, Jim
My son is hard core on the security side. He has tested the heck out of their patch. He claims the patch works and is a clean uninstall. No comment on if it breaks anything else. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Salisbury

RE: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread deji
This may give you a starting point: http://www.akomolafe.com/LinkClick.aspx?link=Create-Users-and-Sec-Group.vbst abid=63mid=431 Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is

Re: Re: [ActiveDir] OT: Request for Test AD Poplulation Data

2006-01-03 Thread rkingsla
All depends on who he asks Sadly, I didn't have time to dig it up before jetting out for sunny, tropical, Madison, Wi this AM. Sorry, Mark From: Tomasz Onyszko [EMAIL PROTECTED] Date: 2006/01/03 Tue AM 09:49:22 EST To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: Request

RE: [ActiveDir] OT: WMF issue - patch on the 10th

2006-01-03 Thread Phillip Partipilo
Everything I've tested so far, none of our software seems to have broken. The MSI install and uninstall is nice and clean. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] Enable Windows Integrated Authentication through GPO

2006-01-03 Thread Ken Schaefer
--- Original Message --- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Subject: [ActiveDir] Enable Windows Integrated Authentication through GPO : How does someone enable Windows Integrated Authentication : through a Group Policy.  You will find this on the