[ActiveDir] FIXED: Problems deploying an app msi file on several computers by GPO

2006-02-02 Thread Clist
Hello, Thanks for your response, Thorbjörn. Ive inspecting once again the package, and as we did a bare bones package, we left blank several fields as the version , author etc.. It seems Windows Installer need some of these fields to proper rollout the .msi. As soon as we filled those fields

RE: [ActiveDir] User Account Lifecyle -- Best Practices

2006-02-02 Thread neil.ruston
I agree with 99% of the below, but would add that cases such as Enron highlight the need for *some* best practices and that anything is better than nothing. SOX and the like insist that orgs adopt some kind of methodology and framework which shows they performed due diligence before making

RE: [ActiveDir] Domain Locator

2006-02-02 Thread Wyatt, David
Title: Message Thanks, I'll review the articles and see if they answer my questions. Regards -David -Original Message-From: Almeida Pinto, Jorge de [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge deSent: 31 Jan 2006 12:14To: ActiveDir@mail.activedir.orgSubject: RE:

[ActiveDir] Need to update my list

2006-02-02 Thread Karsten Aarhus
Dear all, How do I give an user on my domain rigths so she can update my Active Directory list? I need to update all the phone numbers on my users. Venlig hilsen/Best regards Astralis A/S Karsten Aarhus Network-Administrator Direkte +45 2725 1680 Fax +45 7678 5502 Mobil +45 2725 1680

[ActiveDir] Need Script.

2006-02-02 Thread Jitendra Kalyankar
Good Morning guys! I need a script to locate bulk users from a text file and put it in a csv file I know that Joe's tool would do this, but as Imentioned in my earlier mails it can not be used in my organisation. :-( Have a wonderful Thursday! Sincerely, J

RE: [ActiveDir] Need Script.

2006-02-02 Thread neil.ruston
So Joe's excellent utilities are banned yet you're able to accept a script from someone else??? How does that work?? Which options offers the highest risk and which offers robustness and maturity? You choose :) neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jitendra

Re: [ActiveDir] Need Script.

2006-02-02 Thread Jitendra Kalyankar
I will forward this to my manager! :D I am using it (don't tell this to my manager) but I don't want to give it to someone else...you know how it works... Sincerely, J On 2/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: So Joe's excellent utilities are banned yet you're able to accept a

Re: [ActiveDir] Need Script.

2006-02-02 Thread Sem 3
I think this will do what you need: Drop me a line if you need explanation Regards Max --snip- 'On Error Resume NextConst ForReading = 1Dim arrADLook(4)Dim arrUserADResult(4)StartTime = Timercount = 0 Set objFSO = CreateObject(Scripting.FileSystemObject)Set objTextFile

Re: [ActiveDir] Setting ADAM password over SSL in VBScript

2006-02-02 Thread Al Mulnick
When troubleshooting this kind of script, I like to verify a few things: 1) After this part ' Bind to user object using LDAP port.Set objUser = objLDAP.OpenDsObject(strPath, _ vbNullString, vbNullString, _ lngAuth)I like to make sure that I have the user object successfully. It's likely you do

RE: [ActiveDir] Need to update my list

2006-02-02 Thread Brian Desmond
Karsten- The first thing you want to do is give the rights to a group. Never delegate something to an individual user. So, lets create a group called Telephone Editors. Add your user into there. Next, in AD Users Computers, goto ViewAdvanced Features. Then, pull up the properties of the top

Re: [ActiveDir] User Account Lifecyle -- Best Practices

2006-02-02 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
For a long time I kept screwing up his last name... you'd start calling him Dr. J as well. [EMAIL PROTECTED] wrote: O dear - that's embarrassing :( you are correct. I might stop blushing by the weekend! *From:* [EMAIL

[ActiveDir] Lotus Sametime and LDAP access to AD

2006-02-02 Thread Fugleberg, David A
Title: Message Has anyone on the list ever run into this ? A systems integrator I know told me that they were trying to integrate Lotus SameTime with AD as part of an enterprise portal configuration. Apparently SameTime can authenticate using LDAP binds and also grab user information which

RE: [ActiveDir] DNS vs NETBIOS name? Or something else?

2006-02-02 Thread Douglas M. Long
Ok, I am revisiting this because it is bugging the crap out of me. 2003 domain upgraded from NT 4.0 NetBIOS name: DOMINT DNS Domain name: domain.com Users can logon to the machine with DOMINT, but not DOMAIN from the drop down. There are no NeutralizeNT4Emulator or NT4Emulator keys on either

RE: [ActiveDir] Lotus Sametime and LDAP access to AD

2006-02-02 Thread Creamer, Mark
Title: Message Wow! Exactly the kind of crap joe and I and others were talking about the other day. Lets crash AD to make poor programming work mc From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fugleberg, David A Sent: Thursday, February 02, 2006 12:48 PM

RE: [ActiveDir] Lotus Sametime and LDAP access to AD

2006-02-02 Thread joe
Title: Message LMAO! Acompany that I previously worked forimplemented SameTime about 4 or so years ago against a Windows 2000 forest. I can absolutely assure you that the page size nor attribute range retrieval size was ever modified, I would have laughed at the person requesting it.

RE: [ActiveDir] NTFRS Problems

2006-02-02 Thread Gregorio Parra
This article is very useful to restore byt before you need to review some points: 1. time synchronization: because replication relies on this service, the domain controllers in domain must get sync from one source, and every Domain Controller in domain must be sync in time with source, review

Re: [ActiveDir] DNS vs NETBIOS name? Or something else?

2006-02-02 Thread Paul Williams
What are the options in the Winlogon box? You should only have the choice of the NetBIOS domain name or the local box (and any trusted domains). To use the DNS name you need to use a UPN. --Paul - Original Message - From: Douglas M. Long [EMAIL PROTECTED] To:

RE: [ActiveDir] x64 domain controller sizing?

2006-02-02 Thread Mauricio F. Funes
Extremely good information, but with 64 Bit and dual core technology the rules change a bit. A real life example would be a company with 24,000+ mailboxes,two front ends, two relaysservers and 2 four node clusters.Two GCs were enough to mitigate their needs. The GCs are pretty beefed up quad

[ActiveDir] distributing large service pack files

2006-02-02 Thread Creamer, Mark
Title: distributing large service pack files The structure of our WAN is such that we have lots of small offices all over the country, each with a few to a hundred or so PCs, connected by not-so-fast links. The biggest locations have T1s, but many dont. Keeping these things patched is a

RE: [ActiveDir] distributing large service pack files

2006-02-02 Thread Molkentin, Steve
Title: distributing large service pack files Mark, WSUS (and SMS for that matter) uses the "Background Intelligent Transfer Service" (that's what it's called) to do just this on large files, in that it is smart enough to recognise downtime on your network to send files, and manages the

Re: [ActiveDir] distributing large service pack files

2006-02-02 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Not to mention it's my understanding that it's not legal to distribute service packs outside the MS cloud and host MS code like service packs/hotfixes like that. This is why universities cannot hand out SP cdroms and some such things. Since the Department of Justice... it's been my impression

RE: [ActiveDir] distributing large service pack files

2006-02-02 Thread Creamer, Mark
Hmm. That's an answer I didn't expect. Good info. Thanks Susan. I know I need to play more with WSUS. The only place I have installed it was in a 20 node network with an older server hosting WSUS only, and it killed the performance on the server. So I (not very scientifically I admit)

Re: [ActiveDir] distributing large service pack files

2006-02-02 Thread Laura E. Hunter
There's also the liability issue of I host my own copy of some bits. My copy of those bits gets hacked or otherwise b0rked. Random customer uses my bits, hoses their machine, sues Redmond. At least, that's the reasoning I encountered when I had the conversation about higher ed being able to

[ActiveDir] Exchange - ESM - All Address Lists and All Global Address Lists disappeared

2006-02-02 Thread Victor W.
What if the containers mentioned in the subject title are 'suddenly' missing in ESM? I have not checked (via adsiedit) if they are still in the Config.Nam.Context cause I just heard this and have not had the chance to actually look at it. If they are gone from the conf.nam.cont. how can I

RE: [ActiveDir] distributing large service pack files

2006-02-02 Thread Phillip Partipilo
I also find that the server gets a good hammering by WSUS when synchronizing with MS. I also have an old machine acting as the server, 800-something mhz HP netserver, and it will start running realy slw. The MSDE instance seems to be what eats up so much CPU. Wonder why kind of queries

RE: [ActiveDir] Exchange - ESM - All Address Lists and All Global Address Lists disappeared

2006-02-02 Thread Tony Murray
Well its certainly possible to delete the container from AD (Ive just done it!). If thats what has happened in your environment you will need to authoritatively restore from a recent backup. Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Victor W.

RE: [ActiveDir] Exchange - ESM - All Address Lists and All Global Address Lists disappeared

2006-02-02 Thread Michael B. Smith
As Tony said, if they are deleted and you need the specific contents back, an authoritative restore is your appropriate response. If the defaults work for you, you might just try rerunning forestprep and domainprep, then touching each store setting the GAL for the store. I have seen

Re: [ActiveDir] distributing large service pack files

2006-02-02 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
MSDE has a bad habit of RAM chew Have you tried putting a throttle on the instance? Phillip Partipilo wrote: I also find that the server gets a good hammering by WSUS when synchronizing with MS. I also have an old machine acting as the server, 800-something mhz HP netserver, and it will

RE: [ActiveDir] Need Script.

2006-02-02 Thread joe
Quite honestly this isn't the first time I have heard this. Many companies have an unnatural aversion to products that are free. They want to know what the catch is and they think that just because they pay for something they are getting better support. Of course that simply means they

RE: [ActiveDir] Script to change owner?

2006-02-02 Thread joe
The latest version of dsacls which is available in the ADAM SP1 and ADAM R2 distributions has a /takeOwnership switch you might find useful. -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] UNIX intergation into W2K3 Domain

2006-02-02 Thread joe
Don't forget to check out Centrify too. I have heard from customers of both products and they seem happy. Doublecheck the features you get and if they both fulfull those features try to play them off each other for pricing. :o) -- O'Reilly Active Directory Third Edition -

RE: [ActiveDir] Problem in assigning permissions to the user in parent domain over the shared folder in child domain

2006-02-02 Thread joe
Can you see any users or groups from the parent domain from the child domain? -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of lakshmi venkat Sent: Wednesday, February

RE: [ActiveDir] UNIX intergation into W2K3 Domain

2006-02-02 Thread Gideon Ashcraft
joe, we love you. but do you have a life? -Original Message- From: joe [EMAIL PROTECTED] Sent: Feb 2, 2006 8:43 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] UNIX intergation into W2K3 Domain Don't forget to check out Centrify too. I have heard from customers of both

RE: [ActiveDir] Need Script.

2006-02-02 Thread Noah Eiger
Joe, maybe you should write a special invoice for Jitendras company ;-) From: joe [mailto:[EMAIL PROTECTED] Sent: Thursday, February 02, 2006 8:38 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Need Script. Quite honestly this isn't the first time I have

RE: [ActiveDir] UNIX intergation into W2K3 Domain

2006-02-02 Thread joe
LOL. I am just chilling responding to posts while watching American HotRod episodes that have recorded on my Media Center sipping a little Pinot Grigio. The rest of the household is asleep. I am not sure who would want to work for Boyd. Honestly though I should be working on updating admod and

RE: [ActiveDir] Need Script.

2006-02-02 Thread joe
What I really need to do is start kicking out tools I charge for. :o) I wouldn't mind getting to a point where enough income was coming in that I could just play around working out new tools all day. -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm

RE: [ActiveDir] Problem in assigning permissions to the user in parent domain over the shared folder in child domain

2006-02-02 Thread V Lakshmi
No I am not able to see any users or groups from the workstation in the child domain, when I selected the parent domain, while assigning rights to the shared folder in the child domain. When I selected advanced button while assigning rights and searched for the user name existing in parent

[ActiveDir] Delegating Netlogon share files

2006-02-02 Thread Freddy HARTONO
Title: Delegating Netlogon share files Hi Just curious how do you guys delegate netlogon shares as part of OU_Administrator role, whats the good way of doing so? Basically even if I grant them rights to a certain folder or scripts, they wouldn't be able to edit it via