Title: Message
Why not just create Sites for you branch
offices?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Drew
GainorSent: Friday, April 16, 2004 12:06 PMTo:
[EMAIL PROTECTED]Subject: [ActiveDir] AD screw
up
Not knowing what I
was doing I set up an AD at my
Title: Message
You can rename the NetBIOS name not the DNS name. It
doesn't sound like to me you need an empty root. Don't screw up your
existing domain, especially if Exchange is working in production. Create
sites for your branch offices and OU's if you want too. Put a GC at each
branch
Nope, I have one running just as you described.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra,
Justin A.
Sent: Wednesday, April 07, 2004 8:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Updating Schema to Windows 2003
If the forest prep
Have you run into issues with Exchange pointing to GC servers in your
subdomains and not being able to resolve recipients in Distribution list
unless the DL are Universal DL?
We have:
Root Forest Windows 2000 with Exchange 2000 and most user accounts,
Groups, DLs, etc
Subdomain Windows 2003
Nope you have a bug or have done something wrong.
Outlook will view contacts within Address List just as it views Users and
Distribution Groups.
Youmay have to wait for the address list to be
'generated' and viewable via Outlook.not sure
From: [EMAIL PROTECTED]
[mailto:[EMAIL
400+ Outlook clients over a T1. Have you looked at the bandwidth
utilization? Sounds like the T1 is saturated to me. What about subnet
in the remote office? Is it assigned to the correct site for
authentication?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Title: Message
If I am not mistaken, 'Changes' to DL
Memberships happen ona domain controller within AD. That information
is replicated to the Global Catalog servers as a Read-Only
Copy.
To be sure Global Catalogs that are queried maintain a
complete list of Distribution List Members, all
Title: Message
Youshould look closely at the product you choose for
the replication piece, 3rd party is advised, to see it's recommendations
about .pst files. Some don't like them.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris
FlesherSent: Thursday, March 11,
Title: AD Performance Monitors
Anyone have a pointer to a good paper about which NTDS counters to monitor and what the accepted thresholds for the counters should be. I have found some info on counters but not thresholds..
Windows 2000 AD.
Thanks in advance..
Shawn
Nobody here but us chickens...
Just kidding this is a very active list...very informativelots of
smart people not including myself
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Frank Buechler
Sent: Tuesday, February 03, 2004 10:36 AM
To: [EMAIL
I thought after the fact that I should have said Rubber Chickens.
Those monitoring the list for a while would understand
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Craig Cerino
Sent: Tuesday, February 03, 2004 10:50 AM
To: [EMAIL PROTECTED]
Title: Changing Group Scope
Hello Everyone,
I need help writing a script to change the group scope for all groups in our Domain. See KB article 271930 for an explanation whythis hit me as an oh by the way we forgot to mention...
Robbie Allen,
I have a copy of the AD Cookbook for Windows
We run Symantec AV corporate edition and don't exclude any directories.
We haven't had any problems related to AV software..
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob
Sent: Wednesday, December 10, 2003 11:42 AM
To: [EMAIL PROTECTED]
Title: Message
later versions of xcopy will too, if you don't have a
resource kit
xcopy /? will show you
how
From: Roger Seielstad
[mailto:[EMAIL PROTECTED] Sent: Tuesday, November 18, 2003
9:24 AMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] [Off-Topic] Moving files across volumes
Create a new pagefile specify same size for min and max
Delete current pagefile
Create new pagefile to replace deleted page file and specify same size
for min and max
This is Windows 2000 Enterprise edition, isn't it?
-Original Message-
From: Steve Shaff [mailto:[EMAIL PROTECTED]
Sent:
Dump the /3GB switch, it is for Enterprise Edition Only
-Original Message-
From: Steve Shaff [mailto:[EMAIL PROTECTED]
Sent: Monday, November 17, 2003 5:06 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Virtual Memory Fragmented
I will give this a try.
No, this is Windows 2003
Jim,
What Veritas product was this driver
for?
Thanks,
Shawn
From: Jim Patton [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 06, 2003 11:40 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Server Reboot
problem after SP4 installation
I
finally found the resolution to this
I believe a GPO was modified by someone with the appropriate 'rights',
but that person did not communicate changes were to be made and now we
see some strange issues
Issues are not the point of this question. Does anyone know of a way to
determine who modified the GPO?
Thanks in advance,
Great, but anything built in to the OS? Anyway I can point a finger at
a DBA that is poking is hands where they do not belong. Please don't
ask why they have rightsaarrgghhh
Shawn
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 28, 2003
File and Object auditing on the Sysvol and Policies directory explicitly
should do the trick???...At least this would show who was making
changes. At that point I can confront that person..
Sound correct?
Thanks Gil
Shawn
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL
Title: Message
Rick,
Thanks
for the input...I appreciate it.
Shawn
-Original Message-From: Kingslan, Rick
T. [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003
11:27 AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] Infrastructure and GC
Shawn,
You
can
Title: Windows 2003 AD
Any issues with having a Windows 2003 child domain below a Windows 2000 root?
And low bandwidth environment
Shawn
-Original Message-
From: England, Christopher M [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 9:13 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] What is SUS?
SUS is basically WindowsUpdate (or more specifically, Automatic
Title: Message
Just
to be sure DNS is working correctly.Can you surf the Internet on the
Exchange server? Are you talking about Exchange 5.5, 2000 or
2003?
Shawn
-Original Message-From: John Parker
[mailto:[EMAIL PROTECTED] Sent: Wednesday, September 03, 2003 9:15
Title: Message
Exchange 2000 System Console under the Information Store look at
Mailboxes.
Shawn
-Original Message-From: Rick Reynolds
[mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02, 2003
1:39 PMTo: [EMAIL PROTECTED]Subject:
[ActiveDir] Exchange 2000 question
Title: When to seize FSMO roles in a Disaster
Background:
A company we consult for has AD implemented in three sites. One Domain, AD is in Native Mode. A DNS and Global Catalog server exist in each site. Site locations are VB, NV and DC. VB is the hub with a leased line T1 to DC and two
Title: Message
use a
local SMTP engine (IIS SMTP ) and let DNS route the messages out for
you.
Shawn
-Original Message-From: Salandra, Justin
A. [mailto:[EMAIL PROTECTED] Sent: Thursday, August 07, 2003
8:57 AMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] OT:
Site to Site VPN connection between Firewalls and leave the firewall port
configuration alone...
Shawn
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 6:15 PM
To: ActiveDir
Subject: Re: [ActiveDir] Todd hijacked
Gil wrote an
Title: Message
srvmgr
is out of the box an available application Windows 2000 server located in the
system32 directory
srvmgr
from NT4 will also work. just copy the .exe to your local machine or run
it from the server, it is up to you.
Shawn
-Original Message-From:
I just read the initial thread ..
Server manager is not what you want to use, but will work!
Use Computer Manager and 'connect to' the machine you would like to
investigate or open Computer Manager on the machine in question.
Expand Shared Folders \ Sessions and you will see who is
Title: Message
Would
think it would decrease traffic in the long run because of users at that end on
the WAN pipe can retrieve locally cached lookups.
Shawn
-Original Message-From: Roger Seielstad
[mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003
4:20 PMTo: '[EMAIL
Title: Message
Our
company Netbios name has a .net extensionfrom previous
employees...
It has
caused us no problems with our AD. (Multisite Native
Mode)
Shawn
-Original Message-From: Brenden Bryan
[mailto:[EMAIL PROTECTED] Sent: Thursday, June 26, 2003
4:51 PMTo:
http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241
bfecd095e/w2ksp4_en.exe
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Title: Message
Yes
Shawn
-Original Message-From: Leeuwen van, JWJ
(Joost) [mailto:[EMAIL PROTECTED] Sent: Wednesday, June
25, 2003 8:44 AMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OT: Link to
Windows 2000 Service Pack 4
Is this the final version or a leaked
Sounds like the boys with Beta and Premier access are pissed we PUBLIC
only individuals can obtain this software at the same time or before
them.
Like any other software from MS, use at your own discretion and test,
test, test before production.
Enjoy or don't it is up to you.
AS long as you are in Native Mode. In mixed mode they are the same as
NT 4 domain controller based local groups
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2003 9:11 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Domain Local
Title: Message
Anyone
know where to obtain WinPE? It is hard for me to
find
Shawn
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Saturday, May 31, 2003 11:49 AMTo:
[EMAIL PROTECTED]Subject: Re: [ActiveDir] WinPE and
RIS
PE is for the
Yeah, I wish
Welcome to MD could I take your order please?
Could I get a mail system to go and hold the spam...
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 28, 2003 8:06 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Backup
So does
Showacls resource kit utility pipe to a text file
Cacls pipe to a text file
Xcacls pipe to a text file
-Original Message-
From: Burns, Clyde [mailto:[EMAIL PROTECTED]
Sent: Friday, March 21, 2003 2:57 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT: Program that gives folder
Title: Message
I
opened the security template xx.inf and made a batch file
to undo or remove additions and modifications made by the
template.
Thanks
to everyone for the responses
-Original Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07,
Title: Remove a Local Security Template
Does anyone know of a way to remove a Local Security Template and return the box to Gold? (W2K server)
Shawn Hayes, MCSE
Network Engineer
Compass Technology Management
Sound Business Sense for IT
www.compass.net
757.226.3328
Title: Message
What
about the registry changes the original template applied? I don't think
this would get it Thanks though
-Original Message-From: John
Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED] Sent: Friday,
March 07, 2003 3:26 PMTo:
[EMAIL PROTECTED]Subject:
Fault tolerance will come from multiple domain controllers in the same
domain
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 14, 2003 2:07 PM
To: '[EMAIL PROTECTED]'
Subject: RE: RE: [ActiveDir] Issue with loging
That's not how it works. You
I think the answer to your problem is spelled out in the bottom of a
Budweiser Light :-)
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 07, 2003 3:28 PM
To: ActiveDir (E-mail)
Subject: [ActiveDir] OT: OWA was unable to get your inbox
yes
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 27, 2003 1:58 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active Directory - Windows Server 2003
Is windows 2003 Windows .NET??
-Original Message-
From: Gil
Title: Minimum permission to Monitor AD
Does anyone know what the minimum permissions an account would need to successfully monitor AD replication using Replmon or any application for that matter?
Shawn Hayes, MCSE
Network Engineer
Compass Technology Management
Sound Business Sense for
And the two Exchange servers are in the same Windows site and Exchange
site?
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 11:31 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Protocols Required
So after you moved their mailboxes
Outlook will send a request from a high port on the local machine to
port 135 on the Exchange server. The Exchange server will listen on
Port 135 and respond on some high port.
TCP/IP communication
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]]
Sent:
As I understand it, Outlook MAPI calls are RPC based and of course if
you are using POP3 port 110
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 08, 2003 3:18 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Protocols Required
Sorry,
Title: Message
did
you make this box a GC server?
-Original Message-From: Garello, Kenneth
[mailto:[EMAIL PROTECTED]] Sent: Monday, January 06, 2003 4:36
PMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] AD Lab
Have you set that
server as a GC?
-Original
Title: Message
ADSIEdit -
User Display
Names:
Configuration container
DisplaySpecifiers
CN=409
CN-user-Display
createDialog - specify your display
value
we use
%sn,%givenNameequates to Last,
First
Contact Display
names:
Configuration container
DisplaySpecifiers
CN=409
Title: Message
oops I
read the thread and you already know this
-Original Message-From: Hayes, Shawn
Sent: Friday, December 20, 2002 9:40 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] AD
attributes
ADSIEdit -
User Display
Names:
Configuration container
Title: Message
That
is the only reason I have heard that may make it worth the extra $10 bucks a
year to register your name. Wouldn't this have also been the case if you
merged with a company with the same NetBIOS name in NT 4.0? What is the
probability of this happening?
We use Norton Antivirus for Gateways version 2.something. They have a
newer version 3.0 that will allow spam filtering by sender name and/or
spam lists(Spam lists by subscription $$$ from Mail Abuse Prevention
systems, L.L.C). I also use this product to block attachments :-)
-Original
Title: Message
mike
is wrong, neither need to be in native mode
-Original Message-From: Hutchins, Mike
[mailto:[EMAIL PROTECTED]] Sent: Thursday, December 12, 2002
11:31 AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] Native Mode ?
The
domain with E2K in it must be
Title: Message
We
have a native mode Exchange Organization in a mixed mode
domain.
-Original Message-From: Salandra, Justin
A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 12,
2002 2:34 PMTo: '[EMAIL PROTECTED]'Subject:
RE: [ActiveDir] Native Mode ?
You
I have done 5 enterprise sized production installations/implementations
of AD and have always used the .local dns suffix. AD's DNS does not
need to be globally routable.
Example:
NetBIOS domain name of ThanksBill
DNS domain name of ThanksBill.local
Internal DNS (unregistered DNS) and External
On Domain Controllers as I understand it.
-Original Message-
From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 20, 2002 4:10 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] System State
Is it true that you cant restore from a system state back up that is
Domain Level Policies regulate containers, but you can't apply a GPO
directly to a container.
-Original Message-
From: Andries Thijssen [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 19, 2002 8:31 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADC and Exch 5.5
One I can think
Title: Disabled Computer Accounts
I have disabled computer accounts in the computers container. Can anyone tell me how, without manually disabling them they became disabled. We upgraded an NT4 domain this past weekend and I thought it peculiar that I see disabled computer accounts.
Shawn
Title: LDAP Queries
I am looking for some good references for writing LDAP queries to access AD. Any suggestions?
Gets confusing when your host name and your NetBIOS names for the same
machine are different. Wins resolves NetBIOSDNS for host names (of
course you can add STATIC entries in WINS for the host name and an alias
in DNS for the NetBIOS name, but why would you?) I am with Justin on
this one,
Title: Message
No it
does not, but it is recommended because Exchange Enterprise gives you clustering
capabilities which you can not utilize with regular server.
-Original Message-From: Parker, Edward
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 13, 2002
12:30
Turn on Auditing for successful logons
-Original Message-
From: Rick Coloccia [mailto:coloccia;geneseo.edu]
Sent: Wednesday, November 13, 2002 2:29 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Logging Logins...
Hi Everyone-
I'm hoping someone has a suggestion for me: I want to log
8.5 and Exchange 2000
-Original Message-
From: Andy David [mailto:DavidA;veronissuhler.com]
Sent: Tuesday, November 12, 2002 12:47 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT: Exchange -1018 Error
What version are using? I run differential file backups every weekday
along
Roger, I don't think you read the last message completely. Exchange was
set to do a Full backup and Flush the logs, but that job specification
was part of a file system differential job.
-Original Message-
From: Roger Seielstad [mailto:roger.seielstad;inovis.com]
Sent: Tuesday, November
Diane did this server have any FSMOs you had to move or was it a Global
Catalog Server?
-Original Message-
From: Ayers, Diane [mailto:DMA8;pge.com]
Sent: Tuesday, November 12, 2002 2:58 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Question about Active Directory
Very early in
Use Ntdsutil and remove all references from DNS
-Original Message-
From: Garello, Kenneth [mailto:KGarello;worcester.edu]
Sent: Thursday, October 31, 2002 1:21 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Remove DC from Domain
Is there a proper way of removing a DC from a domain?
Insight Manager if the Insight Agents are loaded on the server
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Wednesday, October 30, 2002 10:53 AM
To: ActiveDir (E-mail)
Subject: [ActiveDir] OT: Compaq Servers
Does anyone know how to retrieve a
A person will have to walk over to the server to read the Serial Number
of the tag.
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Wednesday, October 30, 2002 11:04 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT: Compaq Servers
That is not
It has been my experience that if your controller fails and you replace
the controller with the same controller or a newer controller from the
same manufacturer (Compaq of course) then you will not loose your RAID 5
configuration. Compaq creates backward compatibility in their RAID
controllers to
Rick,
You are referring to IE5.5 and this discussion is about IE5. This link
about how to tell what version of IE you have list a version of IE 5.01
SP3 that is only obtainable with Windows SP3.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q164539
Shawn
-Original Message-
A three disk RAID 1 - news to me can you send me some literature about it? Would
this be a mirror with a spare? Later threads cleared this up, youâre more than a
couple of days late. A Mirrored set requires two drives to setup but will run on one
if one disk in the mirror fails.
Please explain how you will gain any performance increases when all three of your
arrays exist on the same SCSI channel. Seems to me you have a single pipe leading to
and from multiple arrays. It is not hard to figure where the bottle neck will be.
-Original Message-
From: Devan Pala
Title: Service Packs for Windows 2000
Did I read this or just imagine it?
Service Packs and Security Updates for IE 5 will be included with Windows 2000 Service Packs starting with SP3.
Shawn Hayes MCSE_2000, MCSE_NT4
Network Engineer
Compass Technology Management
Sound Business
Not at a hardware level RAID. Two and only Two drives
-Original Message-
From: Robert Moir [mailto:rim;LutonSFC.ac.uk]
Sent: Friday, October 18, 2002 2:37 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] RAID configuration on DC's
Far as I know, Raid 1 can
The by default the administrator account can not be locked out, but
there is a utility called passprop from the NT 4 resource kit that will
allow you to set the admin account up so it can be locked out
*
PASSPROP
77 matches
Mail list logo