RE: [ActiveDir] Got a good one for everybody

2004-05-11 Thread England, Christopher M
Well, you could have itcall ascript that does: "net use E: \\server\share /persistent:no" The next time the user logs in, it will not be there (it is the same as -not- checking the "Reconnect at login" box in Map Network Drive). However, until they logout, they will see the E: drive. But

[ActiveDir] SUS 2.0 Beta

2004-04-14 Thread England, Christopher M
Title: SUS 2.0 Beta Greetings, I guess SUS 2.0 Beta has been released: http://www.nwc.com/showitem.jhtml?articleID=18400592 Does anyone have a Guest ID to get in on the Beta? Or is there just a download somewhere? Thanks all, Chris

RE: [ActiveDir] Network Monitoring Tool

2004-02-16 Thread England, Christopher M
You should check out Servers Alive - http://www.woodstone.nu/salive/. They have a free version for up to 10 checks (IE: 10 IP pings, 10 service checks on one server, etc). I use it, and you can output to HTML. It is pretty nice, and the run-as-a-service-bit is better now in the later versions.

RE: [ActiveDir] OT: Spyware/Adware

2003-10-16 Thread England, Christopher M
We at Indiana University have licenses to AdAware Pro and Spybot. I have not used them much, but they do find a lot of stuff - a LOT. Also, Awaware has adwatch which allows it to sit in the tray and watch things (kind of gets annoying sometimes with popups but is still neat). I would recommend

RE: [ActiveDir] SUS failure rate

2003-09-26 Thread England, Christopher M
We have seen this occasionally, but usually it is due to some extenuating circumstance. Like if we had turned off theSUS GPO to do some testing (we only have one SUS server setup right now, with multiple GPOs) the clients revert back to their previous Automatic Update settings. If they have

RE: [ActiveDir] SUS failure rate

2003-09-26 Thread England, Christopher M
throw SUS for a loop. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of England, Christopher M Sent: Friday, September 26, 2003 9:21 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS failure rate We have seen this occasionally, but usually

RE: [ActiveDir] Incredibly slow log on

2003-09-25 Thread England, Christopher M
On point two below, I will say that we have had a problem before. If a script has an error and prompts for something (or just keeps trying a task), it will do so until the timeout you have set for Group Policy elapses. The default is set to 600 seconds (10 minutes), but we changed ours to 6

RE: [ActiveDir] SUS does SPs now

2003-09-18 Thread England, Christopher M
Title: RE: [ActiveDir] SUS does SPs now I will gladly use this on all my clients (in a spanned, spread-out method). Using Group Policy to apply service packs require that the machines be rebooted. SUS does it for you, which is a nice feature. But, we'll see how it works out. Chris From:

RE: [ActiveDir] SUS does SPs now

2003-09-18 Thread England, Christopher M
Title: Message Or what we have done, since we cannot allot more than one server for this right now, is setup several different GPOs, and we disable them while we test patches on one OU, and enable them on the other OUs when we are ready. One thing you have to remember is if you disable a GPO

RE: [ActiveDir] SUS does SPs now

2003-09-18 Thread England, Christopher M
News to me as well. Here is a little blurb that now appears on the SUSAdmin welcome page: Microsoft Software Update Services (SUS) now provides Windows service packs (SPs), in addition to critical and security updates.SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs

RE: [ActiveDir] ADUC GPMC Authentication Errors

2003-09-11 Thread England, Christopher M
, Christopher M To: [EMAIL PROTECTED] [EMAIL PROTECTED] cc: Sent by: Subject: [ActiveDir] ADUC GPMC Authentication Errors [EMAIL PROTECTED

RE: [ActiveDir] What is SUS?

2003-09-10 Thread England, Christopher M
SUS is basically WindowsUpdate (or more specifically, Automatic Updates from XP SP1 or 2000 SP3), but you control what updates go out. You still use the GPO to dictate how they get the updates, but instead you point them at one of your servers (with IIS and the SUS server component) for their

[ActiveDir] ADUC GPMC Authentication Errors

2003-09-10 Thread England, Christopher M
Title: ADUC GPMC Authentication Errors Greetings, I work at a University with a single domain architecture, and thus my area only has control over an OU. User accounts are also managed by the central computing guys. So you can see I have few options when resolving issues like this. But

RE: [ActiveDir] SUS Feedback...

2003-09-09 Thread England, Christopher M
We use SUS too, with great success. I would like to see some of the features Edward mentioned. For #2 we have multiple OUs and one server, which seems to do the trick for now. As far as #4, they say in SUS version 2, Service Packs will be an option. One way to push patches is to use HFNetCheck

RE: [ActiveDir] SUS Feedback... Resend

2003-09-09 Thread England, Christopher M
Resent without my signed cert. Sorry. We use SUS too, with great success. I would like to see some of the features Edward mentioned. For #2 we have multiple OUs and one server, which seems to do the trick for now. As far as #4, they say in SUS version 2, Service Packs will be an option. One way

[ActiveDir] OT: Windows Quota/Ownership Question

2003-09-04 Thread England, Christopher M
Title: OT: Windows Quota/Ownership Question Greetings all, I have an off-topic question that can be taken off this list if someone has any suggestions. I am going to be moving to a new server (from 2000 to 2003) and I need to transfer user files over. However, I need quotas (and thus

RE: [ActiveDir] LDAP LastLogin for Computers

2003-08-14 Thread England, Christopher M
Title: Message Well, "pwdLastChanged" or "LastLogin" or other variations are all for User objects. Oh well, thanks for all your advice, all! Chris -Original Message-----From: England, Christopher M Sent: Wednesday, August 06, 2003 9:22 AMTo: [EMA

[ActiveDir] LDAP LastLogin for Computers

2003-08-14 Thread England, Christopher M
Title: LDAP LastLogin for Computers Greetings all, I am trying to pull LDAP queries on computer accounts and I want to find out the last time someone logged into the machine. WhenModified is just the computer account object and LastLogin is just for user accounts. Am I out of luck? What

RE: [ActiveDir] OT: Server Monitoring

2003-08-14 Thread England, Christopher M
I must say I am using this and I find it more reliable than Insight Manager. It emails my phone and my regular email whenever a server is not pingable (or if a certain service is not running). The check interval is 2 minutes on mine, which catches most things quickly enough for my needs. I

RE: [ActiveDir] Connect to printer

2003-04-02 Thread England, Christopher M
Ok, I hope no one addressed this already, but here is what we have been using. Con2prt.exe from the Resource Kit (any version): Con2prt.exe /cd \\server\printshare That is all you need. There are other switches with con2prt that you can check out as well. Again, I hope this helps and is not a

RE: [ActiveDir] MBSA Runas

2003-03-26 Thread England, Christopher M
the hostname resolved to a bogus IP address. -Original Message- From: England, Christopher M [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2003 8:51 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] MBSA Runas Greetings all, I am trying to get MBSA to run within another user context so I can scan

RE: [ActiveDir] MBSA Runas

2003-03-25 Thread England, Christopher M
:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2003 12:28 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] MBSA RunasC:\Documents and Settings\USERNAME\SecurityScans -Original Message-From: England, Christopher M [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25

[ActiveDir] OT: Windows Permissions View

2003-02-12 Thread England, Christopher M
Hey all, Is there a program out there that can list permissions on a folder (and subfolders), as well as inheritance and other settings like that? I have a couple users that do security permissions on some folders on my server and they get confused often. It would be helpful if there was a tool

RE: [ActiveDir] VNC and Terminal Services

2003-01-17 Thread England, Christopher M
I have done it for when I need to have something run that requires user intervention (like a log debugging tool). I used TightVNC (tightvnc.org) and I had no issues really. But I only had it on for that two day period when I needed it. Chris

[ActiveDir] Service Pack overwrite files?

2003-01-09 Thread England, Christopher M
Hey all, I am starting (finally) to deploy XP SP1 and 2000 SP3 to our 1500 clients. I am wondering if when they get updates (q-patches, etc) from Windowsupdate, a SUS server, or scripts that I run, if the Service Pack will overwrite any newer files. So say they get a patch that is Pre-SP2 and

RE: [ActiveDir] What's your group naming convention?

2003-01-08 Thread England, Christopher M
Here at Indiana University, we have a single domain architecture. Things become confusing if a standard naming convention is not used. We use various things to separate one machine/group/OU from others. What it comes down to is a hyphen-delimited name for each object. For example, we would have

[ActiveDir] Zap File Problem

2003-01-03 Thread England, Christopher M
Greetings all, I am having an issue with ZAP files recently. They worked fine before (for publishing software to Users), but now when you click Add in Add New Programs, the folder holding the zap file opens up instead. Does anyone have this problem? I am thinking it is a Service Pack 3 thing (on

RE: [ActiveDir] Software Update Services

2003-01-03 Thread England, Christopher M
Title: Message What kind of trouble are you having? I am having problems too. It says the iuident.cab is not accessible, even though permissions are set correctly. I am setting up a fresh server to try again. I will let you know if I get it working. Chris -Original

[ActiveDir] Gathering Computer Account Info via script

2002-12-16 Thread England, Christopher M
Greetings all, I need to query a portion of the Active Directory (the OUs that I control) and get a list of computer objects and some associated data (Operating System name and version, for example). Can I do this with VBS/WSH? Thanks in advance for any help! Chris

RE: [ActiveDir] Gathering Computer Account Info via script

2002-12-16 Thread England, Christopher M
-Original Message- From: England, Christopher M Sent: Monday, December 16, 2002 9:56 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Gathering Computer Account Info via script Greetings all, I need to query a portion of the Active Directory (the OUs that I control) and get a list

[ActiveDir] Partial AD Restore

2002-05-23 Thread England, Christopher M
Title: Message I did a silly thing and deleted some user groups out of an OU. I am not in charge of the domain, but I have asked the domain admins to attempt to restore those groups. Is this even possible with Active Directory? I have heard that an AD restore is all or nothing. Any info

RE: [ActiveDir] Partial AD Restore

2002-05-23 Thread England, Christopher M
instructions. I hope this helps. Scott -Original Message-From: England, Christopher M [mailto:[EMAIL PROTECTED]]Sent: Thursday, May 23, 2002 6:43 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Partial AD Restore I did a silly thing and deleted some user

RE: [ActiveDir] Partial AD Restore

2002-05-23 Thread England, Christopher M
-From: England, Christopher M [mailto:[EMAIL PROTECTED]]Sent: Thursday, May 23, 2002 7:18 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Partial AD Restore Does this affect other DC's? If they bring one DC down to do this, are the other 2 (or how many ever) still running

RE: [ActiveDir] Clusters - Good or Bad idea?

2002-03-05 Thread England, Christopher M
Joshua Morgan PH: (864) 250-1350 Ext 133 Fax: (413) 581-4936 [EMAIL PROTECTED] -Original Message-From: England, Christopher M [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 05, 2002 11:49 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir

RE: [ActiveDir] Server availibility/monitoring/management tools

2002-01-11 Thread England, Christopher M
I have implemented this package and I am quite impressed. I have not looked at their website much so pardon me if this question is answered there. But does anyone know if this integrates with IIS for added security? I know, IIS and security are difficult to use in the same sentence, but the

RE: [ActiveDir] Freeware / Shareware suggestions

2001-09-10 Thread England, Christopher M
I have used the following product, DameWare utilities to get a nice count of NT 4 domains. It seems to do a pretty good job at getting a count, and whatnot. http://www.dameware.com/ DameWare NT Utilities: http://www.dameware.com/dw2/products/dntu/ Chris

RE: [ActiveDir] Remote Administration

2001-09-06 Thread England, Christopher M
Ok, I think he knows to install the Adminpak. :) Chris -- Christopher England, MCP Server Administrator College Information Technology Office Indiana University -Original Message- From: Joe [mailto:[EMAIL PROTECTED]] Sent:

RE: [ActiveDir] Hiding Account Names

2001-08-27 Thread England, Christopher M
The student ID system here at Indiana University is SSN #'s, but we do have regular 8-character usernames for domain authentication. The SSN #'s become a problem when a faculty member begins to store rosters on his computer, and then gets hacked by CodeRed or something. I would recommend getting