Re: [ActiveDir] [OT] Can I add an index in AD using an LDIF file?

2006-07-30 Thread Matheesha Weerasinghe
I hear Bill and Melinda are very charitable. Not sure if they'd wanna adopt a 6 foot 1 uber geek though. ;-)M@On 7/29/06, joe [EMAIL PROTECTED] wrote: LOL. This was catch up week. I took it off from work and ran around the house getting stuff fixed up etc and was only so so watching email.

[ActiveDir] DNS oddities?

2006-07-30 Thread Matheesha Weerasinghe
AllCan someone please explain the following observation?Installed a new R2 DC forest with one DC/DNS.created a new dns zone for use by a child domain (yet to be created). The zone is replicated to all domain controllers of the root domain. Enabled secure dynamic update only. Installed a new child

RE: [ActiveDir] DNS oddities?

2006-07-30 Thread Dean Wells
I bugged the behavior many moons ago … to my knowledge, no fix has appeared as yet.  The precise cause escapes me but IIR it was related to the ticket/token attached to the DHCP client service on the newly-born domain’s DC.  Two immediate solutions exist -  1. reboot the new DC one

[ActiveDir] DNS suffix resolution..

2006-07-30 Thread HBooGz
I have a Forrest with one forest root and one child domain.The child domain is running windows 2000 SP4 and the HQ sites are running windows 2003 R2 standard.I have the the child domain controller setup as an AD-integrated zone and i have the 2003 DNS servers setup to receive that zone as a

RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread joe
RE: RODC PAS Oi, that will add some nice complexity to all of this... :) If I was looking to implement that I think I would look at doing it in four levels so people don't shoot themselves... Everything, everything but password info, core NOS info required for auth/authz

Re: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-30 Thread HBooGz
anywhere i can possibly look ?i'm running out of options and i have a long week ahead with microsoft PSS and Dell.On 7/29/06, HBooGz [EMAIL PROTECTED] wrote:back to square one i presume ? On 7/29/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:I think you are right..

Re: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread Al Mulnick
Um, why? What value at this point? Last I checked it supports limited applications that might want that information. And if you follow ~Eric's logic, they want to be secure out of the box. That would indicate that they want it to be as minimal as possible until and unless told otherwise. To

RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread joe
I agree 100%, secure by default, make the admins learn how to make it less secure. This has been one of the core security issues Microsoft has had forever. It is good that this has turned around and while it pisses off the lesser quality admins, it is good for Windows and the computing

RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread Paul Mayes
Apologies as Im reading in digest. But I just wanted to chip something into this surrounding OUs versus groups as it was something that Ive been thinking about on my mind-numbing commute. I understood that RODCs could be configured to be a read only subset of objects (users) from the

RE: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-30 Thread Kurt Falde
Is this on a separate network segment then your other boxes that youre utilizing to ping it? If not I would say make sure you put a laptop into a switch port that you are positive is in the same vlan as this server and start doing some testing there to ping the server. Have you taken a

RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread joe
I am not sure if I understand where you are going but let me explain where I am coming from. First, the passwords being there or not being there is not important for this talk, that is already built in and will be there, now the discussion is around everything versus an RODC PAS.

RE: [ActiveDir] RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-30 Thread joe
I think the story is the fault of the blog post writer. That wasn't someone who actually knows what is going on, that was someone who say an internal pres that was put on by a PM, probably Nathan, of what they are thinking right now and the writer tried to get across the points as he/she

RE: [ActiveDir] ldp in ADAM-SP1

2006-07-30 Thread Ken Schaefer
Hi Al, I’m going to have to disagree here.  I’d wager that the average programmer has a better understanding of writing code that has: a) proper specifications and design b) robust error handling c) strong typing d) etc Of course, there are always

[ActiveDir] bulk user creation

2006-07-30 Thread Sharif Naser
Title: Message Hello All, I have a round 350 users to be created with their mailboxes in windows 2003, what is the best way to automate the process or delegate this job to two account operators. Any suggestions are highly recommended. Regards, DISCLAIMER: This electronic message