it
? By the way, I'm using Heimdal.
Once again, thanks a lot !!
-lara-
PS: By the way is there any guidelines on how to determine
the value of the GroupPolicyRefreshTime and
GroupPolicyRefreshTimeOffset ?
--- Arden Pineda [EMAIL PROTECTED] wrote:
Lara,
I am trying to refresh my memory since
Lara,
I am trying to refresh my memory since I had to perform the same steps while
rebuilding our test environment a while back. Basically, we had to do it in
2 steps in the order listed below.
1. Create and import a custom ADM template that predefines the Kerberos
REALM key in the registry.
These may help...
www.microsoft.com/windows2000/docs/adsegmented.doc
http://www.microsoft.com/resources/documentation/exchange/2000/all/reskit/en
-us/resguide/appendb.mspx
Regards,
Arden
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Salandra,
I would think that the 1st approach may work well for a small environment.
However, for larger organizations and as you start to use GPOs and
delegation, you may see that it makes more sense to create an OU hierarchy
that reflects your IT administration management model. As has been said
As long as your Win9x clients do not have the Active Directory Client
Extensions loaded, these clients will not be able to do NTLM v2
authentication. So, you need to disable LM/NTLM support using Group Policy,
local or nonlocal,
Computer Configuration\Windows Settings\Security settings\Security
You need to have at least 1 Windows Server 2003 DC in the domain to use the
GPMC Modeling or Planning mode.
arden
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Salandra, Justin A.
Sent: Monday, March 01, 2004 8:13 AM
To: ActiveDir (E-mail)
Here's my best shot based on my experience with ADMT (v1 and v2). I welcome
corrections re: any misconceptions I may have about the tool.
1. I really do not see any issue here. As long as your are not going to
run Windows NT or 2000 DCs in the forest, you should be fine.
2. No experience
