RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Craig Cerino
As far as SNMP goes - -I really like What'sUp Gold - -Unfortunately when the did the newest version release - the Went to What's Up Pro -- and it if FAR inferior to their previous product. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent:

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Thommes, Michael M.
http://www.serversalive.com/ Works for us and the price is right! Mike Thommes -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Monday, October 17, 2005 8:34 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Server Monitoring

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Peter Johnson
Are you simply looking for server going down or service availability? I.E. do want something at a lower, or higher level, than just a simple ping/SNMP status check? Have a look, based on budget, at NetIQ AppManager or MS MOM 2005. I have a preference for AM myself. -Original Message-

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread DeStefano, Dan
Have you looked at MOM? http://www.microsoft.com/mom/default.mspx Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Monday, October 17, 2005 9:34 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Server Monitoring Hello

Re: [ActiveDir] Server Monitoring

2005-10-17 Thread mike kline
We use big brother for monitoring and paging http://www.bb4.org/ I haven't used this one but the free version of power admin may do the trick for you http://www.poweradmin.com/ServerMonitor/Free.asp I've used uptime in the past as well and have had success with it. You can download it from

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread John Parker
Thank you all for your suggestions.I definitely have some homework to do for now. Thank you again... John Parker, MCSEIS Admin.Senior Technical SpecialistAlpha Display Systems. Alpha Video7711 Computer Ave.Edina, MN. 55435952-896-9898 Local800-388-0008 Watts952-896-9899

RE: [ActiveDir] rebooting a patched, but stubborn DC

2005-10-17 Thread Thommes, Michael M.
Hi Steven/Freddy/Douglas, This time the server is a Compaq, running with an Intel(R) PRO/1000 XF Server Adapter, no DRAC-type cards, RAID-controller is builtin. Some Googling did bring up some hits regarding Exchange and I wonder what kind of communication breakdown happens between a GC that

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Harding, Devon
Could I add multiple reg key changes to this vbs? I would have to define a new sPath at the end right? -Devon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Friday, October 14, 2005 5:51 PM To:

RE: [ActiveDir] salary(OT)

2005-10-17 Thread Hutchins, Mike
Robbie kills me... :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, October 17, 2005 6:40 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] salary(OT) Joe, I'm not sure what you've been smoking lately, but

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Brian Desmond
Nagios does the trick (free too) - www.nagios.org. MOM is another one (www.microsoft.com). Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Monday, October 17, 2005 9:34 AM

[ActiveDir] NDTS.DIT sizes

2005-10-17 Thread Mike Hogenauer
Odd question I have 8 different DCs in a few sites; replication seems to be working great, all servers windows 2003 ENT. All servers have plenty of disk space. When I look at the actual size of my ntds.dit file, its relatively the same on all DCs except for one which is 30 MB

Re: [ActiveDir] Server Monitoring

2005-10-17 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
In the SBS consultant space we see more of www.levelplatforms.com and hyblue.com than MOM... Brian Desmond wrote: Nagios does the trick (free too) - www.nagios.org. MOM is another one (www.microsoft.com). Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original

Re: [ActiveDir] Server Monitoring

2005-10-17 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Remote administration, IT infrastructure management, IT management software: http://www.kaseya.com/ Forgot one more. Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: In the SBS consultant space we see more of www.levelplatforms.com and hyblue.com than MOM... Brian Desmond wrote:

RE: [ActiveDir] NDTS.DIT sizes

2005-10-17 Thread neil.ruston
A more likely explanation (assuming 30Mb is small compared to the overall DIT file size) is that this database is more fragmented than the other databases on the other DCs. The amount of whitespace consumed within a database can be ascertained via this KB:

RE: [ActiveDir] NDTS.DIT sizes

2005-10-17 Thread Bernard, Aric
In many environments, 30 MB would be considered a small difference in sizes between DITs. In a very small environment I have, the difference is 18 MB. In large environments I have seen differentials in the GBs. In many cases larger differentials are due to white space in the DIT. As

[ActiveDir] Global Catalog

2005-10-17 Thread Pete
Hi Just a quick and easy question to profs: Can AD domain controller of one domain (one.com) with Global Catalog function enabled somehow process logon request of user from different domain (other.biz), in case when all domain controllers for that other domain (other.biz) are not reachable?

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Condra, Jerry W Mr HP
Not sure if it's been mentioned but we've had good success for red or green status with WhatsUp Gold. It can also be configured to send an alert when something goes down. Has a web based interface that can be monitored from the desktop if desired. Jerry -Original Message- From: [EMAIL

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Alain Lissoir
Look at http://www.lissware.net, Volume 1, Sample 1.01 to 1.25 - WSHScript.vbs, which uses a series of functions. In this list of functions, you will find two generic routines to play with: ReadRegistryFunction.vbs and WriteRegistryFunction.vbs. With these two, you are all set. I reproed the

[ActiveDir] slightly OT: MissionControl for MIIS

2005-10-17 Thread McClure David
Hi listers, I'm considering MIIS for a project haven't been able to find much non-MS information about MIIS out there on the web. Hoping for help from y'all. One of the minor knocks against MIIS seems to be a lack of mgmt/troubleshooting tools. Netpro claims to have filled this gap with

RE: [ActiveDir] slightly OT: MissionControl for MIIS

2005-10-17 Thread Gil Kirkpatrick
Hi David, The licensing scheme is per-production-MIIS-server-processor (like MIIS), plus a charge for each 5 management agents. Test servers, or processors not used by MIIS aren't counted. The rest of the questions I'll leave to others, as I suspect my opinions are biased :) You might get more

Re: [ActiveDir] RIS WinPE Question

2005-10-17 Thread Kamlesh Parmar
I am running WinPE on W2k3 server, only change I have done in .SIf is OsLoadOptions = /noguiboot /fastdetect /minint imagetype = WinPE You might find great help related to WinPE on : http://www.911cd.net/forums/ -- Kamlesh On 10/16/05, Dan Holme [EMAIL PROTECTED] wrote: I hope

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Harding, Devon
Which method is preferred, WSH or WMI? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain Lissoir Sent: Monday, October 17, 2005 12:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Kix to VBS Look at http://www.lissware.net, Volume 1,

RE: [ActiveDir] Global Catalog

2005-10-17 Thread Almeida Pinto, Jorge de
Yes you are correct. The answer is No. A domain within a forest is the authentication boundary. So when all DCs of domain other.biz are unavailable the users from other.biz will not be able to log on as there is no DC available to authenticate the user at logon and create the access token.

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Salandra, Justin A.
Whats Up Gold -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Monday, October 17, 2005 9:34 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Server Monitoring Hello all... We are searching for a tool that will monitor server

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Nathan Henderson
GFI's Network Server Monitor is another to check out.. Works well for us. http://www.gfi.com/nsm/ Nate - Nathan Henderson Network Engineer Northwest University ph 425.889.5358 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Rich Milburn
Devon, my personal opinion is to avoid WSH when possible, just because I have run into cases wehre I used a vbscript custom action in an MSI package, and the WSH is unavailable [1] to the Windows Installer. Since I ran that, if I think I might need to use this cool new thing I figured out how to

RE: [ActiveDir] Documenting AD

2005-10-17 Thread Almeida Pinto, Jorge de
Joe, You're right... Sorry for that... Let me guess... Because objectCategory is indexed and because objectClass is not although you suggest to index it? ;-) Cheers, Jorge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, October 13,

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread Craig Cerino
Agreed ( not WUP) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, October 17, 2005 1:15 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Server Monitoring Whats Up Gold -Original Message- From:

RE: [ActiveDir] Server Monitoring

2005-10-17 Thread WILLIAMS, J.D.
We use ActiveXperts (.com), it used to be the same engine as the GFI tool, but the GFI tool has a much better UI for creating the monitors - I'd go with GFI at this point. It's fairly inexpensive, not really 'enterprise' ready (based on rule creation), but the number of rules that you can create

[ActiveDir] DFS using a Hidden Share

2005-10-17 Thread Salandra, Justin A.
Is it possible to create a DFS Root that is hidden using the $ symbol in the name \\domainname.org\dfsroot$ Thanks Justin A. Salandra MCSE Windows 2000 2003 Network and Technology Services Manager Catholic Healthcare System 646.505.3681 - office 917.455.0110 - cell [EMAIL

RE: [ActiveDir] DFS using a Hidden Share

2005-10-17 Thread Almeida Pinto, Jorge de
Yep, no problem jorge From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Mon 10/17/2005 9:41 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] DFS using a Hidden Share Is it possible to create a DFS Root that is hidden using the $ symbol

RE: [ActiveDir] Global Catalog

2005-10-17 Thread Ulf B. Simon-Weidner
Hmm - I wouldn't 100% call the domain the authentication boundary. Authentication in a W2k+ Network without any mods not to rely on the GC is done - as you said - via DC of the same domain the account resides plus any GC of the forest - not necessarily that a GC which resides in the same domain

RE: [ActiveDir] salary(OT)

2005-10-17 Thread Ulf B. Simon-Weidner
BTW - let us know when we can start the ad-campaign in our blogs / websites ;-) Ulf |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of |[EMAIL PROTECTED] |Sent: Monday, October 17, 2005 2:40 PM |To: ActiveDir@mail.activedir.org |Subject: RE:

RE: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Ulf B. Simon-Weidner
I've discussed something like this recently: display a monitoring summary at every admin login, e.g. instead of the annoying configure your server thingie ;-) There are just to many admins not paying any attention to the event logs, so if they don't go into event logs bring the event logs to them

Re: [ActiveDir] slightly OT: MissionControl for MIIS

2005-10-17 Thread Phil Renouf
I'd be interested in hearing if any of you have been using this. Having used MIIS a bit lately I'd love to hear about anything that makes it easier to manage. Phil On 10/17/05, Gil Kirkpatrick [EMAIL PROTECTED] wrote: Hi David,The licensing scheme is per-production-MIIS-server-processor

RE: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Ulf B. Simon-Weidner
Another Hmm. I'd still like to see that better configured that putting it into the AD if the infos are already there (or configurable). We could request to make it default to log that kind of info. And as far as we are talking about looking into every server: Where's ACS? And also SNMP would be

RE: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Brian Desmond
ACS is now integrated into MOM3 which is coming I don't know when. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: Monday, October 17, 2005 5:37 PM To:

RE: [ActiveDir] Global Catalog

2005-10-17 Thread Almeida Pinto, Jorge de
Well, I call it that way because a user can authenticate with only DCs from its domain available (assuming the requirement for a GC is disabled) but cannot authenticate without a DC from its domain while having a GC available. You are correct that any GC in the forest may be used if the GC

RE: [ActiveDir] Global Catalog

2005-10-17 Thread Ulf B. Simon-Weidner
|So why don't you agree with the general - forest is the |security boundary - statement? Cause IMHO the domain is a security boundary against accidential security issues, the forest against malicious/criminal. Companies usually trust their admins of different domains but might want to protect

RE: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Free, Bob
Where's ACS? As the beta came to a end, the last I was told the agent would be in R2 (free) and the collector would be a separate product (!free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: Monday, October 17, 2005 2:37

RE: [ActiveDir] Global Catalog

2005-10-17 Thread Gil Kirkpatrick
I think it is better to describe a domain as a policy and administration boundary (and a replication boundary), rather than a weak security boundary. It is more precise, and IMO, given the automatic domain trusts in a forest, there is not much of a security boundary between domains. And given the

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Alain Lissoir
If you are Windows and above and don't need REG_MULTI_SZ updates, I would go for WSH (pretty simple model). If you need to do more complex stuffs, I would use WMI (which is actually used from WSH as it is the scripting engine). /Alain -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Al Mulnick
Not sure that's going to fix the issue though, unless I'm missing something. Wherever the information gets put, it should be a) done as the default yet configurable b) centrally viewable (I should NOT have to visit each DC in my forest to find the data) and c) be included in the base product.

Re: [ActiveDir] Knowing when users were deleted.

2005-10-17 Thread Al Mulnick
Is there a line? 'Cause if there's a line, I'd just like to know :) Regarding this thread. I have to say it's interesting to see the many sides differences based on experience and scale. But I think to bring this back a bit, I'm not sure that the SBS concept can work as well in the scaled

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Derek Harris
I've always had better luck with WMI. YMMV -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Monday, October 17, 2005 10:45 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Kix to VBS Which method is preferred, WSH or WMI?

RE: [ActiveDir] rebooting a patched, but stubborn DC

2005-10-17 Thread Freddy HARTONO
Patched another one of my production DC yesterday via windows update instead of updateexpert and - same issues with the dell server (strangely). Had to do shutdown /r /f via rcmd to get it back online. However the other domain controller with updateexpert is rebooting fine.. Will be doing mass

RE: [ActiveDir] rebooting a patched, but stubborn DC

2005-10-17 Thread Thommes, Michael M.
Hi Freddy, Thanks for the feedback! I hope your mass patching goes well. It's a lot easier to notice this kind of stuff when you're doing one-sies where you can keep track of a server's connectivity during a reboot with a repeating ping. Be aware of the issues brought forth by MS05-051

RE: [ActiveDir] Kix to VBS

2005-10-17 Thread Alain Lissoir
I meant if you are Windows 2000 and above ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain Lissoir Sent: Monday, October 17, 2005 5:12 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Kix to VBS If you are Windows and above and

[ActiveDir] AD/Group policy KBs

2005-10-17 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
The Register DNS records with connection-specific DNS suffix policy setting does not work correctly in Windows Server 2003: http://support.microsoft.com/?kbid=896615 A duplicate access control entry is added to child records in a DNS zone when you add security groups to the root of the DNS