Overlapping AD Subnet Boundarieshello,
just to stop the troll...
Do you understand my others post about your network ?
Is you DC set up on its network interface with a 255.255.0.0 netmask ?
Your setup will work fine from an AD point of view (dssite.msc) , but not an IP
routing point of view if
Have you configured your AD Sites properly in AD Sites and Services MMC?
Cheers
Ken
From: [EMAIL PROTECTED] on behalf of senthil Kumar
Sent: Sun 28/01/2007 9:32 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Changing Logon server authentication !!
Yes. We have configured separate sites. Both sites have separate GC in each
site.
Regards,
Senthil
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Schaefer
Sent: Sunday, January 28, 2007 4:50 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
check the SITES and SUBNETS configuration...make sure the subnet of the Citrix
servers in defined in AD and assigned to the correct site.
also make sure the server (DC) B has not registered service records for the
site of the Citrix servers. This can happen when that site initially does not
Sorry - that should be AD Sites and Subnets...
Cheers
Ken
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Schaefer
Sent: Sunday, 28 January 2007 10:20 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Changing Logon server authentication !!
Have you
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of senthil Kumar
Sent: Sunday, January 28, 2007 4:53 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Changing Logon server authentication !!
Yes. We have configured separate sites. Both sites have separate GC in each
site.
Regards
...
Regards,
Chuck
-Original Message-
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Sun, 28 Jan 2007 3:01 AM
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
hello,
just to stop the troll...
Do you understand my others post about your network ?
Is you DC
://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU
Sent: Saturday, January 27, 2007 3:17 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
I know there is not a direct relation
Of Brian Desmond
Sent: Saturday, January 27, 2007 7:39 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
You can whack notes with ldifde or something. MIIS is a convenient way to do
it though.
Thanks,
Brian Desmond
[EMAIL PROTECTED
cc
Subject
RE: [ActiveDir] Overlapping AD Subnet Boundaries
I think that someone knowing this wouldn't have post the question.
I don't agree with this part. A lot of people don't think you can supernet
AD subnets. In fact I have had people tell me outright it is impossible to
do
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, January 25, 2007 5:21 PM
To: ActiveDir@mail.activedir.org
Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED]
Subject: Re: [ActiveDir] AD Security Auditing
AdFind.exe -sddc++ -b DC=example,DC
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Sunday, January 28, 2007 10:00 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Overlapping AD Subnet Boundaries
I think that someone knowing this wouldn't have post the question
://www.joeware.net/win/ad3e.htm
--
*From:* [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED] *On Behalf Of *Brian Desmond
*Sent:* Saturday, January 27, 2007 7:39 PM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] How to find non-primary SMTP addresses?
Slightly OT
*You
Nowhere does the OP say he's assigned a /16 mask to any interface.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU
Sent: Sunday, January 28, 2007 4:02 AM
To: ActiveDir@mail.activedir.org
Subject: Re
times.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Sunday, January 28, 2007 9:24 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
My advice would have
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
I agree that MIIS could be convenient but only if it is already there or you
have other plans for it. If this was the only reason for it I would be more apt
to put something else together
Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter
Sent: Tuesday, January 23, 2007 12:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Adfind + Admod help
I agree with Al in that I
/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Sunday, January 28, 2007 12:24 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
What? Like simplesync?
I was beginning to wonder
Just an FYI, I kept reading in the responses about move... This doesn't
move the mailbox, it creates a new one at the new HomeMDB URL location and
the old mailbox is sitting there disconnected in the old store location.
This is something that can be done for normal users to get dialtone back
@mail.activedir.org
Subject: Re: [ActiveDir] Disable CD ROM through GP
Why not setting up a test network/machine in VirtualPC/Vmware?
Haritwal, Dhiraj wrote:
Hi All,
I want to disable CD ROM on all client machines through GP. I found
the KB http://support.microsoft.com/kb/555324 created
Subject: RE: [ActiveDir] Overlapping AD Subnet Boundaries
it will go for the second site 10.10.41.0/24 (= best matching)
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC
]
[mailto:[EMAIL PROTECTED] On Behalf Of Haritwal, Dhiraj
Sent: Samstag, 27. Januar 2007 09:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disable CD ROM through GP
If anyone had done the same, kindly guide me...
Bcoz right now donot have this mucb of time.
-Original Message
Edition -
http://www.joeware.net/win/ad3e.htm
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fuller, Stuart
Sent: Friday, January 26, 2007 1:46 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
Here
4:17 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
In my opinion, there is a pure TCP/IP network issue...
A sample example:
The DC is 10.10.0.1 with a netmask of 255.255.0.0 (/16 as indicated).
if you try to ping 10.10.41.104, it will try
PM
Subject: RE: [ActiveDir] Overlapping AD Subnet Boundaries
While your math is right you should look up supernetting and subnetting
somewhere.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
-Original Message-
From: [EMAIL PROTECTED] [mailto:ActiveDir-
[EMAIL PROTECTED
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
hi,
i am coming from network job, so i am used to sub/super netting somehow
:)
thanks anyway !
Regards,
Mathieu CHATEAU
http://lordoftheping.blogspot.com
- Original Message -
From: Brian Desmond
://lordoftheping.blogspot.com
- Original Message -
From: Brian Desmond [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Saturday, January 27, 2007 6:58 PM
Subject: RE: [ActiveDir] Overlapping AD Subnet Boundaries
OK well you don't need a layer 2 link to do what the OP wants...
Thanks,
Brian
Active directory will use the most specific network address that applies to
it. For instance, I set up a class-A address (or multiple in some companies)
that applies to all of the network space of the company and assign that to
the primary data center location. Then I start making more focused
Third Edition -
http://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU
Sent: Friday, January 26, 2007 4:34 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
is it really
://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson
Sent: Friday, January 26, 2007 12:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
Have you looked at MIIS
://lordoftheping.blogspot.com
- Original Message -
From: joe
To: ActiveDir@mail.activedir.org
Sent: Saturday, January 27, 2007 9:03 PM
Subject: RE: [ActiveDir] Overlapping AD Subnet Boundaries
You are mistaking machine subnetting and subnetting defined in AD. They are
not connected
: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
Ewww. :)
Unless there are other needs that require MIIS I don't think I would deploy it
for this. MIIS is a 50 caliber when all that was probably needed was foam
pellet gun.
I have seen folks doing this before, usually
-
From: [EMAIL PROTECTED] [mailto:ActiveDir-
[EMAIL PROTECTED] On Behalf Of Mathieu CHATEAU
Sent: Saturday, January 27, 2007 1:34 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
i don't agree.
the /24 is included in the /16.
You won't have layer 3
anyway).
I believe this was added in SP1.
--Paul
- Original Message -
From: Almeida Pinto, Jorge de [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Friday, January 26, 2007 7:05 AM
Subject: RE: [ActiveDir] remove orphan DC from the domain
I forgot to mention:
* If the DC
this was added in SP1.
--Paul
- Original Message -
From: Almeida Pinto, Jorge de
To:
Sent: Friday, January 26, 2007 7:05 AM
Subject: RE: [ActiveDir] remove orphan DC from the domain
I forgot to mention:
* If the DC that died had FSMO roles, you need to seize them (check which DC
had FSMO
, it tries a XFER and then does a Seize (as
that's the
logic for the Seize anyway).
I believe this was added in SP1.
--Paul
- Original Message -
From: Almeida Pinto, Jorge de
To:
Sent: Friday, January 26, 2007 7:05 AM
Subject: RE: [ActiveDir] remove
( Mobile : +31-(0)6-26.26.62.80
* E-mail : see sender address
From: [EMAIL PROTECTED] on behalf of Paul Williams
Sent: Fri 2007-01-26 09:25
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] remove orphan DC from the domain
If the DC that died had FSMO
@mail.activedir.org
*Subject:* Re: [ActiveDir] Add or Remove Programs GPO
I did, but the local administrators group has full control on the file.
And ofcourse, my AD admin account is part of the local administrators group
on the workstations (naturally).
That's the reason I absolutely don't have
PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Friday, January 26, 2007 9:05 AM
Subject: Re: RE : Re: [ActiveDir] remove orphan DC from the domain
Just what it says... it first attempts to transfer the FSMO roles from the
one to the other...and it if can't find the proper DC.. it merely seizes
.microsoft.com/WindowsServer/en/library/819bea8b-3889-4479-850f-1f031087693d1033.mspx?mfr=true
--Paul
- Original Message -
From: Yann
To: ActiveDir@mail.activedir.org
Sent: Friday, January 26, 2007 8:43 AM
Subject: RE : Re: [ActiveDir] remove orphan DC from the domain
Really
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: How to find non-primary SMTP addresses?
Were the answers along the lines of it can't be done?
http://www.akomolafe.com/Portals/1/Write%20out%20the%20SMTP%20Addresses%
20of%20users%20OR%20Groups.txt
YMWV
Sincerely
Subject: Re: [ActiveDir] How to find non-primary SMTP addresses?
In addition to what Ulf said, there also isn't any practical way to
query
for users that have secondary addresses vs. only having a primary and
there
isn't any practical way to just get the secondary addresses out
It should also update the 'mail' attribute to the new primary SMTP: address.
--James
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, January 26, 2007 7:38 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find
Nope, that's it.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, January 26, 2007 8:38 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
Out of curiosity, when setting
Huh. you're right.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Wells, James
Arthur
Sent: Friday, January 26, 2007 8:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
It should also update
, 2007 7:49 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
Huh. you're right.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Wells, James
Arthur
Sent: Friday, January 26, 2007 8:44 AM
To: ActiveDir
Ah, yes, good call. Almost forgot that it changes that, too.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Wells, James
Arthur
Sent: Friday 26 January 2007 08:44
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP
/26/2007 09:47 AM
Please respond to
ActiveDir@mail.activedir.org
To
ActiveDir@mail.activedir.org
cc
Subject
RE: [ActiveDir] How to find non-primary SMTP addresses?
Ah, yes, good call. Almost forgot that it changes that, too.
-Original Message-
From: [EMAIL PROTECTED
:31 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
Yeah JoeK is right on, nothing in LDAP will help you with this. The
proxyAddresses attribute is case insensitive so there is no way to query
to
just get addresses that are secondary.
AdFind
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Bart Van den Wyngaert
Sent: Thursday, January 25, 2007 4:31 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Add or Remove Programs GPO
I did, but the local administrators group has full control on the file
/26/2007 12:51 PM
Please respond to
ActiveDir@mail.activedir.org
To
ActiveDir@mail.activedir.org
cc
Subject
RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
Have you looked at MIIS?
Laura
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas W Stelley
Overlapping AD Subnet Boundariesis it really 10.10.0.0/16 or a mistake (/24) ?
Because your first site won't be able to joint the other one as it will think
it's local and won't sent packet to the gateway (if it's really a /16).
If it's a real /24, then it will works as expected (10.10.41.104
I don't know how AD would handle it. However, if someone else chimes in
with That will blow everything up! then it seems like maybe you could
go with /19 or /20 networks at the primary site in AD and then manually
add any of the other ones that don't fit nicely. Maybe that could save
you some
An AD client will try to associate itself with the site that it is most
specific for its IP.
Mike Thommes
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, January 26, 2007 3:20 PM
To: ActiveDir@mail.activedir.org
Stelley
To: ActiveDir@mail.activedir.org
Sent: Friday, January 26, 2007 3:13 PM
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
I really don't see that much in the enterprise version of MIIS that'll
justify the cost. We have some tools/program files that query LDAP
What is the criteria you are using to say you need another site? That's the
first question to ask - maybe you think you need one and you don't --
Chuck
it will go for the second site 10.10.41.0/24 (= best matching)
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
( Tel : +31-(0)40-29.57.777
(
.
From: [EMAIL PROTECTED] on behalf of Joe Kaplan
Sent: Fri 26/01/2007 22:50
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
I'd be pretty surprised if you can get ADSI to query Domino via LDAP, as
ADSI likes
What I would be interested to find out is:
1. What is the WAN link speed for the proposed 2nd AD site?
2. How much free available bandwidth do you have between the two desired
sites?
3. How many users sit in the proposed 2nd AD site?
If you have a fast reliable WAN connection (like a pair of
of thing).
Joe K.
- Original Message -
From: Dave Wade [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Friday, January 26, 2007 6:30 PM
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses? Slightly OT
If you want to query Notes and AD in the same script you don't
Yes. I have done this in organizations with hundreds of sites and a well
designed subnetting scheme.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, January 26, 2007 4:20 PM
To:
to logon to
their usual PCs anyway.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, January 26, 2007 7:36 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Overlapping AD Subnet Boundaries
Brian,
Thanks for the feedback - yes I think two T-1s or maybe even one is overkill.
But you do have to consider the WAN infrastructure before determining sites.
The number of users is a factor if you consider each user is probably on a
workstation. In the scenario we never had the
Why not setting up a test network/machine in VirtualPC/Vmware?
Haritwal, Dhiraj wrote:
Hi All,
I want to disable CD ROM on all client machines through GP. I found
the KB http://support.microsoft.com/kb/555324 created the attached
test.adm file. Actually I don’t have any testing machine
ADMT (even in V3) doesn't support this directly, however, you can still use it
to do the re-ACLing if you want, since you can feed it with a list of SID
mappings. You would still have to perform the bulk of the work yourself, which
would be to re-create matching groups in AD and to add the
What other things did you change in the same or other GPOs that apply to the
machine you're logging on as admin? If you've applied some lockdown GPOs for
file-system permissions, those will also apply for your admins
/Guido
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bart
No NTFS or other restrictions set in that GPO or the PC GPO.
Only some other restrictions like no access to control panel, no messenger,
... stuff.
These apply to the specific Users OU + Computer OU, making a User PC
configuration for those PC's + Users (certain department).
My admin account
@mail.activedir.org
Subject: Re: [ActiveDir] Add or Remove Programs GPO
No NTFS or other restrictions set in that GPO or the PC GPO.
Only some other restrictions like no access to control panel, no messenger, ...
stuff.
These apply to the specific Users OU + Computer OU, making a User PC
configuration
as well check it
out.
*From:* [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED] *On Behalf Of *Bart Van den Wyngaert
*Sent:* Donnerstag, 25. Januar 2007 12:00
*To:* ActiveDir@mail.activedir.org
*Subject:* Re: [ActiveDir] Add or Remove Programs GPO
No NTFS or other restrictions set in that GPO or the PC
Robocopy with the /B-Switch should work.
Ulf
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Donnerstag, 25. Januar 2007 13:10
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] OT: maintaining creation date when copying
directories?
What
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ulf B.
Simon-Weidner
Sent: Thursday, January 25, 2007 6:52 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: maintaining creation date when copying
directories?
Robocopy with the /B-Switch should work.
Ulf
You can register records like this by messing up a reverse lookup record
addition using DNSCMD.
--Paul
- Original Message -
From: EIS Lists
To: ActiveDir@mail.activedir.org
Sent: Wednesday, January 24, 2007 9:28 PM
Subject: RE: [ActiveDir] [OT] Odd Folder under Forward
Of Bart Van den
Wyngaert
Sent: Thursday, January 25, 2007 4:31 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Add or Remove Programs GPO
I did, but the local administrators group has full control on the file. And
ofcourse, my AD admin account is part of the local administrators
It could also mean you have a problem with the tool, right?
Are you seeing some other symptoms that caused you to look at this tool?
Time? you can check that pretty easily by checking the time on your machine
and comparing to a DC in your environment.
What do you see in your system event log?
PROTECTED] On Behalf Of Al Mulnick
Sent: Thursday, January 25, 2007 11:24 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Kerberos Question
It could also mean you have a problem with the tool, right?
Are you seeing some other symptoms that caused you to look at this tool?
Time? you
I think you are seeing your Kerberos tickets start to reach their
expiration time. The kerbtray icon will go from green to red. I think
the last 5 or 15 minutes the default configuration will also issue an
audible (and very distinctive) sound. The tickets will renew
automatically (and the icon
Cool - sounds good to me!
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes,
Michael M.
Sent: Thursday, January 25, 2007 11:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Kerberos Question
I think you are seeing your Kerberos tickets start to reach
Subject: RE: [ActiveDir] Kerberos Question
The Time is the same on the PDC emulator as my PC - no event logs I could find
- I guess it might be a problem with the tool - I don't have any firewalls
between my PC and the DC. The loss of the ticket information is what raised the
flag for me.
From
: Re: [ActiveDir] [OT] Odd Folder under Forward Lookup Zone
You can register records like this by messing up a reverse lookup record
addition using DNSCMD.
--Paul
- Original Message -
From: EIS Lists mailto:[EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Wednesday
://msmvps.org/UlfBSimonWeidner
Website: blocked::http://www.windowsserverfaq.org/
http://www.windowsserverfaq.org
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Donnerstag, 25. Januar 2007 14:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT
AdFind.exe -sddc++ -b DC=example,DC=com -resolvesids -f
|(objectcategory=container)(objectcategory=organizationalUnit)
OU_ACL.txt
Thanks,
Andrew Fidel
Casey Robertson [EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
01/23/2007 05:41 PM
Please respond to
ActiveDir@mail.activedir.org
To
It should be removed. We have the same situation on our site in the past
and used the same article. We did a search on the AD later and found the
odd piece of data hanging around in AD which we tidied up.
Which domain controllers held which FSMO roles? Were any on the DC that you
have lost? Have
the AD metadata cleanup is nothing more then removal/deletion of objects that
belong to a DC that is not live anymore. Just other like other object deletions
(user, group, etc) the deletions will replicate to other DCs (assuming
replication is working fine) that host the same partitions from
Hi Stu,
I don't think there's a way to expose mulitvalued attributes with CSVDE -
you'd either have to use LDIFDE or VBScript or anything else to view all
values of those attributes.
Gruesse - Sincerely,
Ulf B. Simon-Weidner
Profile Publications:
Thanks for your logic. I hope so in the remaining Dc it will do
automatically.
Regards,
Senthil
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto,
Jorge de
Sent: Friday, January 26, 2007 5:10 AM
To: ActiveDir@mail.activedir.org
Subject: RE
6:00 PM
Subject: RE: [ActiveDir] How to find non-primary SMTP addresses?
Hi Stu,
I don't think there's a way to expose mulitvalued attributes with CSVDE -
you'd either have to use LDIFDE or VBScript or anything else to view all
values of those attributes.
Gruesse - Sincerely,
Ulf B. Simon
I'm guessing you didn't like the answers you got on the exchange list?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Sent: Thursday, January 25, 2007 6:53 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] How to find
is on
the subdirectory folders? Thanks much!
Mike Thommes
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ulf B.
Simon-Weidner
Sent: Thursday, January 25, 2007 3:41 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: maintaining creation date when
LMAO...I thought my Outlook rule was broken for a second...
On 1/25/07 5:12 PM, Michael B. Smith [EMAIL PROTECTED] wrote:
I'm guessing you didn't like the answers you got on the exchange list?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Sent: Thursday,
: Michael B. Smith
Sent: Thu 1/25/2007 5:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: How to find non-primary SMTP addresses?
I'm guessing you didn't like the answers you got on the exchange list?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
://www.joeware.net/win/ad3e.htm
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Kaplan
Sent: Thursday, January 25, 2007 7:52 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] How to find non-primary SMTP addresses?
In addition to what Ulf said
-26.26.62.80
* E-mail : see sender address
From: [EMAIL PROTECTED] on behalf of senthil Kumar
Sent: Fri 2007-01-26 01:00
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] remove orphan DC from the domain
Thanks for your logic. I hope so in the remaining Dc
, Michael M.
Sent: Freitag, 26. Januar 2007 02:21
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: maintaining creation date when copying
directories?
Hi Ulf,
I don't have any problems with the creation date on files. It's the
creation date on the directory folders
Hello Ulf,
Thanks so much for such explainations ! That rocks !
2 interesting points you pointed to me
So if i understand, it is good practice, in my case, to disable automatic
site coverage ?
After checking our production, Automatic site coverage is effectively set to
Hi Deji,
Good article with lots of usefull informations.
Thanks again,
Yann
Akomolafe, Deji [EMAIL PROTECTED] a écrit :
Read http://www.netpro.com/forum/files/authentication_topology.pdf
Sincerely,
_
(, / | /)
- Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday?
-anon
-
From: Yann
Sent: Tue 1/23/2007 2:16 PM
To: ActiveDir@mail.activedir.org
Subject: RE : RE: [ActiveDir
] On Behalf Of Michael B.
Smith
Sent: Tuesday, January 23, 2007 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question
I'm forced to ask - why do you want to move SystemMailboxes? You
shouldn't ever need to. There is a reason that the move mailbox wizard
doesn't move them
forum. But I'd be happy and appreciative to take any ideas here
if offered.
Thanks
Jerry
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Tuesday, January 23, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir
Just curious. Are you sure its not something like AV scanning network
files on access? Generally once scanned they add them to a temp db of
known good list to prevent scanning when accessed later. If so, that
would explain slow performance when first accessing the files but
better responses when
Website: blocked::http://www.windowsserverfaq.org/
http://www.windowsserverfaq.org
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Yann
Sent: Mittwoch, 24. Januar 2007 11:19
To: ActiveDir@mail.activedir.org
Subject: RE : RE: [ActiveDir] Question about DNS SRV registration
1 - 100 of 36751 matches
Mail list logo
