RE: [ActiveDir] OT: M$

2006-11-10 Thread William Lefkovics
What does all this have to do with the hidden administrative share on the M: drive? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura E. Hunter Sent: Thursday, November 09, 2006 6:17 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT:

RE: [ActiveDir] mailbox enumeration(OT)

2006-11-10 Thread Michael B. Smith
You can get a list of all the servers and SG's and stores from my blog post sample here: http://blogs.brnets.com/michael/archive/2006/07/11/2518.aspx Once you have that, search on homeMDB equal to the DN for each store and count the number of results you get. About a 5 minute job to add these

[ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Group, Russ
Title: Restrict CD rom, floppy and USB via group policy? Hi everyone Is there a way to use group policy to disable the CD rom, floppy and USB drives? Thanks Russ

RE: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Ryan Conrad
Title: Restrict CD rom, floppy and USB via group policy? HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers http://support.microsoft.com/kb/555324 Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Group, Russ Sent: Friday, November

RE: [ActiveDir] mailbox enumeration(OT)

2006-11-10 Thread joe
Actually since homeMDB is linked you can use homeMDBBL which is an attribute of the msExchPrivateMDB objects[1]. There will be an entry for every connected mailbox for that store. Certainly that is about the fastest way to gather the info[2]. You should be able to dump the counts for even large

RE: [ActiveDir]event log monitoring.

2006-11-10 Thread Jason_Centenni
Return Receipt Your RE: [ActiveDir]event log monitoring. document:

RE: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Robert Rutherford
Title: Restrict CD rom, floppy and USB via group policy? Depends on your exact requirements as the standard settings arent too flexible youll probably find out you need a 3rd party tool, such as :- http://www.gfi.com/endpointsecurity/ Rob Robert Rutherford QuoStar Solutions Limited

RE: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Group, Russ
Title: Restrict CD rom, floppy and USB via group policy? Ahhh I bow to your search foo. Thank you very much! Russ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ryan ConradSent: Friday, November 10, 2006 9:40 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]

RE: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Group, Russ
Title: Restrict CD rom, floppy and USB via group policy? Sorry if I sound ignorant, will this work in a Windows 2000 environment? ThanksRuss From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ryan ConradSent: Friday, November 10, 2006 9:40 AMTo:

RE: [ActiveDir] Applying Permissions to 'cn=Schema' Container

2006-11-10 Thread Grillenmeier, Guido
I certainly support joes second solution: dont delegate this. As with some other suggestions described in the Delegation Guide (which overall is very useful), you shouldnt implement every role just because you can. Your AD infrastructure will not be in any danger if the Schema FSMO

RE: [ActiveDir] OT for those in California

2006-11-10 Thread Grillenmeier, Guido
Nope, there weren't any updates on hypervisor during WinConnections - at least none I heard of. So this info is actually quite useful. Did they actually demo it at VMworld? Or just talk about it? Thanks Mark for sharing. /Guido -Original Message- From: [EMAIL PROTECTED]

Re: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
XP sp2 is when that GP was put in there. The xp sp2 policy only controls Microsoft drivers. Group, Russ wrote: Sorry if I sound ignorant, will this work in a Windows 2000 environment? Thanks Russ *From:* [EMAIL

Re: [ActiveDir] Restrict CD rom, floppy and USB via group policy?

2006-11-10 Thread Kevin Gent
Title: Restrict CD rom, floppy and USB via group policy? If you read the article, at the bottom it states that it applies to Win 2003. I'd have to infer that the policy settings are not present for 2000. - Original Message - From: Group, Russ To:

RE: [ActiveDir] OT: M$

2006-11-10 Thread neil.ruston
I highly doubt that any MS employee takes offence at what is surely as tongue in cheek _expression_. Let's not get _too_ PC please :/ neil -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Laura A. RobinsonSent: Thursday, November 09, 2006

[ActiveDir] Is it 2000 or 2003?

2006-11-10 Thread Noah Eiger
Hi Several months ago, I upgraded a small, multi-site domain from W2k to W2k3. Or so I thought. The various markings in the schema indicate that the upgrade was successful. But when I run, for example, gpresult, it reports a Windows 2000 domain. Is this just some flag or string that

RE: [ActiveDir] Is it 2000 or 2003?

2006-11-10 Thread Clingaman, Bruce
What does it say under: AD Users Computers | [right click domain name] | Raise Domain Functional Level... ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger Sent: Friday, November 10, 2006 11:12 AM To: ActiveDir@mail.activedir.org Subject:

Re: [ActiveDir] OT for those in California

2006-11-10 Thread Mark Parris
It was demo'd (or should I say in was installed and running with a few tasks constantly repeated to show it off) and looks - just like Windows on Windows! and very seemless - no splash screens or the like. They were showing off the whole suite Softgrid and VSR2SP1 and something else too.

RE: [ActiveDir]event log monitoring.

2006-11-10 Thread Steve Szwejbka
Return Receipt Your RE: [ActiveDir]event log monitoring. document:

[ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Paul G. DaSilva
I'm currently getting the following error on my domain controller. I'm receiving this on a server that runs, DC; DNS; DHCP services (it's showing onEventViewer\application every 5 minutes, after trying to refresh a GPO) ++ Event Type:

[ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Jason_Centenni
Return Receipt Your [ActiveDir] GPO Error on Domain Controller document:

[ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Chris . Roosien
Return Receipt Your [ActiveDir] GPO Error on Domain Controller document:

RE: [ActiveDir] Is it 2000 or 2003?

2006-11-10 Thread Free, Bob
I noticed the same thing yesterday with gpresult in 2 different forests and I can assure you they are both at 2003 FFL, I wrote it off to a bug in gpresult. Also noticed the same thing with netdiag- duh- how can 2K server have a build number from 2K3? Microsoft Windows [Version 5.2.3790] (C)

RE: [ActiveDir] Is it 2000 or 2003?

2006-11-10 Thread Noah Eiger
Good question. DFL = 2003 and FFL = 2003. So it must just be some lingering text string. Does anyone think there is more it? Thanks. -- nme -Original Message- From: Clingaman, Bruce [mailto:[EMAIL PROTECTED] Sent: Friday, November 10, 2006 9:39 AM To: ActiveDir@mail.activedir.org

[ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Dawn E Salvan
Return Receipt Your [ActiveDir] GPO Error on Domain Controller document :

[ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Steve Szwejbka
Return Receipt Your [ActiveDir] GPO Error on Domain Controller document:

RE: [ActiveDir] OT: M$

2006-11-10 Thread Grillenmeier, Guido
Ah - now I see - that must be their back-door to access every system Windows is running on ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Friday, November 10, 2006 9:36 AM To: ActiveDir@mail.activedir.org Subject: RE:

RE: [ActiveDir] Creating WMI Filters

2006-11-10 Thread Salandra, Justin A.
The problem is not that the WMI script does not work, it is that I can not even CREATE one from my desktop. When I right click on the WMI Filters section in GPMC and click on NEW or IMPORT I get a Generic Failure message box and that is it Justin A. Salandra MCSE Windows 2000 2003

RE: [ActiveDir] Event ID 108

2006-11-10 Thread Dan DeStefano
I just tried to deploy the package by assigning it to a user who is an administrator of the test workstation and it deployed fine. However, this is undesirable since the users of the domain are not given administrative privileges on their workstations. I believe that when assigning it

RE: [ActiveDir] Exchange --NDR--

2006-11-10 Thread Technical Support
Here is my SMTPDiag results attached. And these are results from other end domain I just received. 220-tx-node2.otherdomain.com ESMTP 220 You've connected to Ironport 02 via mailhost.otherdomain.com from the hostname: da l1mspmx02.otherdomain.domain.corp, IP address of:

[ActiveDir] Help with Replication Mess

2006-11-10 Thread Noah Eiger
Hi - I am trying to sort out a long-standing replication mess. The configuration is three sites (W2k3 FL as per earlier email) connected over T1 lines in series (A-B-C). The layout is: Site A: - DCA1 (bridgehead) - DCA2 Site B: - DCB1 (self for DNS) - DCB2 (bridgehead; DCA1

RE: [ActiveDir] GPO Error on Domain Controller

2006-11-10 Thread Darren Mar-Elia
That indicates that something is preventing Admi. Template policy from running. Posting the relevants part of userenv.log would be helpful. Darren -Original Message- From: Paul G. DaSilva [EMAIL PROTECTED] Cc: ActiveDir@mail.activedir.org Sent: 11/10/2006 10:43 AM Subject: [ActiveDir]

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
You may doubt it, but I don't. It's a moniker that implies (aside from childishness on the part of the person who uses it) that Microsoft is a company that is all about corporate greed. That's an unfair characterization and IMO, is insulting to the 75%+ of Microsoft employees who spend a

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
That's the secret share we use for the man. It's where we keep the collective intelligence that allows us to represent our single self as multiple entities. Laura I am Dsylexia of Borg. Your a$$ will be laminated. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] OT: M$

2006-11-10 Thread kevingent
it's friday, can't we all just get along? -- Original message -- From: "Laura A. Robinson" [EMAIL PROTECTED] You may doubt it, but I don't. It's a moniker that implies (aside from childishness on the part of the person who uses it) that Microsoft is a company that is

RE: [ActiveDir] Help with Replication Mess

2006-11-10 Thread Roger Longden
Whats repadmin.exe /showrepl * show? Quite possibly the site B DCs will need to be forcibly demoted based on your description. - Roger From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger Sent: Friday, November 10, 2006 2:40 PM To:

RE: [ActiveDir] Exchange --NDR--

2006-11-10 Thread beads
Its a firewall issue alright - lol - theirs! They are using an appliance called IronPort and because you don't have the required, in this case by the IronPort appliance, a PTR record its not putting you into the allowed relay list. They may also require ICMP (ping) to accept mail first. Some

RE: [ActiveDir] Help with Replication Mess

2006-11-10 Thread Noah Eiger
Thanks, Roger. When I sent the original message, I had just run /showreps and gotten complaints on DCB1 that it could not find DCB2. However, when I run /showrepl *, everything comes up clean. (BTW: the use of * just made my life a lot simpler thanks.) I am going to brush up on the force

RE: [ActiveDir] Help with Replication Mess

2006-11-10 Thread Roger Longden
I cant say what could be happening without seeing lots more data. Just because repadmin.exe /showrepl shows no apparent errors doesnt definitively mean there arent any. Its conceivable the DC(s) failing to replicate has no inbound and/or outbound replication partners in which case

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
There's no anger or distress on my end (and I doubt there's any on anybody else's part, either). I'm simply pointing out that yes, there are Microsoft employees who don't find the slur amusing. No emotional investment, I assure you. :-) Laura From: [EMAIL PROTECTED]

Re: [ActiveDir] Exchange --NDR--

2006-11-10 Thread Albert Duro
Go to dyndns.com. They'll set up a PTR for you immediately and cheaply. Provided you own your domain, that is. - Original Message - From: Technical Support To: ActiveDir@mail.activedir.org Sent: Thursday, November 09, 2006 2:47 PM Subject: RE: [ActiveDir]