RE: [ActiveDir] Active Directory wish list

2005-10-12 Thread Al Mulnick
PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list How's that better than having a live, writeable version handy? The limitations of a RODC seem to be unwieldy and otherwise clumsy on it's own. In most every branch DC I have seen, there was no serious need

RE: [ActiveDir] Active Directory wish list

2005-10-11 Thread Al Mulnick
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, October 10, 2005 9:07 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list :o) Don't even need to worry about multiple ports. It is all hierarchical. I can

RE: [ActiveDir] Active Directory wish list

2005-10-11 Thread joe
of the legacy intact? Huh? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, October 11, 2005 11:19 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Expand? Even better in my opinion would

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread neil.ruston
Maybe you should read about eDIR/NDS... :) Novell did this back in '93. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: 06 October 2005 01:51 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'd

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Al Mulnick
is though. -ajm CCBW From: [EMAIL PROTECTED] Reply-To: ActiveDir@mail.activedir.org To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Date: Mon, 10 Oct 2005 08:52:25 +0100 Maybe you should read about eDIR/NDS... :) Novell did this back in '93. -Original Message

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread neil.ruston
]. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: 10 October 2005 15:10 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list While I generally agree this would be great, I have to ask about eDir and it's

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Charlie Kaiser
] On Behalf Of Al Mulnick Sent: Monday, October 10, 2005 7:10 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'm curious, Charlie and Neil. What services do these SMB's offer that they need multiple instances of DC's? I realize that a best practice

Re: [ActiveDir] Active Directory wish list

2005-10-10 Thread Al Mulnick
] On Behalf Of Al Mulnick Sent: Monday, October 10, 2005 7:10 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'm curious, Charlie and Neil. What services do these SMB's offer that they need multiple instances of DC's? I realize that a best practice is to have

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Charlie Kaiser
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, October 10, 2005 10:28 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Active Directory wish list I agree. SMB business can be very complex. Can you expand on the idea that VM's

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Bernard, Aric
as well... Aric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Monday, October 10, 2005 12:42 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list The limitations of the VMs are the underlying hardware

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Al Mulnick
To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list The limitations of the VMs are the underlying hardware, in our case. I have 9 VMs running on one server. It's choking for more RAM, but management won't foot the bill for the additional riser card and ram. Otherwise

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread joe
: Monday, October 10, 2005 4:03 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Sounds like we need an LDAP.SYS that is similar to HTTP.SYS in that it can act as a routing, queuing, and parsing mechanism to determine which LDAP namespace/partition or domain

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread Bernard, Aric
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, October 10, 2005 2:09 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I don't think the issue is there. When you make an LDAP call, you specify where you want to go, the hierarchy is all

RE: [ActiveDir] Active Directory wish list

2005-10-10 Thread joe
running ADAM using ADAM for the backend principal store? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Monday, October 10, 2005 6:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Agreed

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread DeStefano, Dan
To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Im not saying we need a better solution here, and there are factors due to the internal/external nature of our business that PSS (I think) recommended the design we have. When we built it, the empty root

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread Tim Vander Kooi
Do it all the time, never had a problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, October 06, 2005 7:52 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list You have never used TS Manager

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread joe
] Active Directory wish list Do it all the time, never had a problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, October 06, 2005 7:52 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list You have

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread joe
joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DeStefano, DanSent: Friday, October 07, 2005 8:46 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list I would like a better way of making bulk changes to AD. There seems to be caveats

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread Darren Mar-Elia
Of joeSent: Friday, October 07, 2005 9:07 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list It is suprisingno one has responded to this with the "pat" answer... this is describing MIIS and the workflowpiece they havebuilt into it and theidea being that AD

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread Rich Milburn
!) Rich From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, October 07, 2005 11:07 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list It is suprisingno one has responded to this with the pat answer... this is describing MIIS

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread Ed Crowley [MVP]
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Friday, October 07, 2005 9:07 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list It is suprisingno one has responded to this with the "pat" answer... this is describing MIIS and the wor

RE: [ActiveDir] Active Directory wish list

2005-10-07 Thread deji
10/7/2005 12:18 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Active Directory wish list when you say,you need to understand more than os config twidlling, what does that mean? what would you call just knowing ..os config twiddling in a AD admin context? Do you mean deeper knowldge

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rob MOIR
: Wed 05/10/2005 22:47 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Not being an OS architect, I'm not sure how MS would make it work (obviously it's not easy) but I would think something along the lines of different IP addresses per domain and using DNS

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rich Milburn
not do, in order that I may learn how to do it. - Pablo Picasso -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, October 05, 2005 7:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Tim Vander Kooi
, October 06, 2005 9:35 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list There seem to be several schools of thought on the password policy issue... - the execs and exec admins who should have the 4th most complex passwords (next to HR, accounting, and IT maybe

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rob MOIR
: [ActiveDir] Active Directory wish list There seem to be several schools of thought on the password policy issue... - the execs and exec admins who should have the 4th most complex passwords (next to HR, accounting, and IT maybe) but lack the computer literacy to understand why and so

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Bernard, Aric
: [ActiveDir] Active Directory wish list I don'tmakerecommendations based onvaporware or rumors... Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rich Milburn
@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Then we should be looking at user authentication by other means than just passwords. But that isn't a utopia either. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn Sent: 06

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rob MOIR
@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I have not been in many biometric/smart card discussions, but the ones I have been in have never addressed one particular issue: Ok, so logons are now secured very nicely. So how secure is the background mechanism

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread Rich Milburn
; ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list As I say, it isn't utopia. And what about fallback positions? * You use fingerprint technology and that hand is encased in plaster and hence can't work with your fingerprint scanner. Now what? * You use smart

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread joe
] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP]Sent: Wednesday, October 05, 2005 8:55 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list You're hardly alone in this. It took a little while before the touted security of the empty root model was blown open

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread joe
I can't sniff, my nose is plugged up. I ran out of Claritin-D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn Sent: Thursday, October 06, 2005 12:22 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I

RE: [ActiveDir] Active Directory wish list

2005-10-06 Thread joe
Subject: RE: [ActiveDir] Active Directory wish list As I say, it isn't utopia. And what about fallback positions? * You use fingerprint technology and that hand is encased in plaster and hence can't work with your fingerprint scanner. Now what? * You use smart-cards and leave it at home one

Re: [ActiveDir] Active Directory wish list

2005-10-06 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
of Claritin-D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn Sent: Thursday, October 06, 2005 12:22 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I have not been in many biometric/smart card

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Katherine Coombs
, October 04, 2005 9:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'd also like to see the ability to run DCs for multiple domains on the same server. SMBs with limited resources balk at having to buy additional server hardware for redundancy on multiple

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Ed Crowley [MVP]
6:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'd also like to see the ability to run DCs for multiple domains on the same server. SMBs with limited resources balk at having to buy additional server hardware for redundancy on multiple domains

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Rich Milburn
, October 04, 2005 9:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Yeah I can say that it isn't in Longhorn. As the dev guys put it, this is a tough one. It wouldn't just be a nobrainer if they had separate instances of AD, there are just tons of other things

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Brian Desmond
:[EMAIL PROTECTED] On Behalf Of Rich Milburn Sent: Wednesday, October 05, 2005 1:48 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I think the biggest reason people want to be able to run multiple domains on one server is the same reason practically no one

Re: [ActiveDir] Active Directory wish list

2005-10-05 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, October 04, 2005 9:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Yeah I can say that it isn't in Longhorn. As the dev guys put it, this is a tough one. It wouldn't just be a nobrainer

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Rich Milburn
: Re: [ActiveDir] Active Directory wish list As a representative of the SBS community there is not a day that goes by that the 'can we cluster SBS' or 'can I have a hot server' doesn't come up. [if you have SA you can have a cold server] With 9/11, with Katrina, with the potential

Re: [ActiveDir] Active Directory wish list

2005-10-05 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
: Wednesday, October 05, 2005 1:12 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Active Directory wish list As a representative of the SBS community there is not a day that goes by that the 'can we cluster SBS' or 'can I have a hot server' doesn't come up. [if you have SA you can

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Rob MOIR
, at least multiple domains on one hardware box *sounds* cool. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Tuesday, October 04, 2005 6:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Bernard, Aric
: Wednesday, October 05, 2005 1:12 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Active Directory wish list As a representative of the SBS community there is not a day that goes by that the 'can we cluster SBS' or 'can I have a hot server' doesn't come up. [if you have SA you can

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Charlie Kaiser
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Wednesday, October 05, 2005 10:07 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list You can. It's called Microsoft Virtual Server. Ed Crowley MCSE+Internet MVP

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Rich Milburn
, October 05, 2005 3:17 PM To: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list How would LDAP apps easily address multiple AD domains hosted on one server? What if you wanted to make this box a GC for more than one domain? How easily can

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread DeStefano, Dan
Of joe Sent: Tuesday, October 04, 2005 9:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Yeah I can say that it isn't in Longhorn. As the dev guys put it, this is a tough one. It wouldn't just be a nobrainer if they had separate instances of AD

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Brian Desmond
] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Wednesday, October 05, 2005 5:47 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Not being an OS architect, I'm not sure how MS would make it work (obviously it's not easy) but I would think

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Tyson Leslie
RenoufSent: Wednesday, October 05, 2005 1:37 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Active Directory wish list My question would be: for a small directory of 5000 users, why do you have 3 domains? If it is for separate password policies, then perhaps a better wish list item would

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Ed Crowley [MVP]
To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list Not being an OS architect, I'm not sure how MS would make it work (obviously it's not easy) but I would think something along the lines of different IP addresses per domain and using DNS to resolve the domain

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Ed Crowley [MVP]
the world from PSTs and Bricked Backups! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich MilburnSent: Wednesday, October 05, 2005 2:29 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list Im not saying we need a better solution here

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Bernard, Aric
Subject: RE: [ActiveDir] Active Directory wish list You're hardly alone in this. It took a little while before the touted security of the empty root model was blown open by my esteemed colleagues at HP (then Compaq). Lots and lots of organizations have adopted empty-root and other multiple

RE: [ActiveDir] Active Directory wish list

2005-10-05 Thread Ed Crowley [MVP]
: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Active Directory wish list Actually, it may rumor has it that there may be some licensing changes coming for the virtualized Windows world Aric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP]Sent

RE: [ActiveDir] Active Directory wish list

2005-10-04 Thread joe
a bit late to add major changes but your ideas could make it into a later rev. joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven WoodSent: Monday, October 03, 2005 3:46 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Active Directory wish list Hi, Wi

RE: [ActiveDir] Active Directory wish list

2005-10-04 Thread Charlie Kaiser
PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Active Directory wish list Hi, With Windows Vista on it's way what's on people's wish list as far as Active Directory is concerned? Also are there any big enhancements due? Thanks Steven List info : http

RE: [ActiveDir] Active Directory wish list

2005-10-04 Thread joe
To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory wish list I'd also like to see the ability to run DCs for multiple domains on the same server. SMBs with limited resources balk at having to buy additional server hardware for redundancy on multiple domains, especially when

[ActiveDir] Active Directory wish list

2005-10-03 Thread Steven Wood
Hi, With Windows Vista on it's waywhat's on people's wish list as far as Active Directory is concerned?Alsoare there anybig enhancements due? Thanks Steven