RE: [ActiveDir] ADAM-ADSIEDIT and adam-user-based administration.. (ADAM SP1)

2006-10-25 Thread Ansar Mohammed
Use ldapeditor (http://www.ldapeditor.com) Version 3 supports simple binds, ntlm and anonymous logins. New version due in November should support Kerberos and Digest. -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Dmitri Gavrilov Sent:

RE: [ActiveDir] OT: Issue with remote assistance offers

2006-10-25 Thread Mike Guest
Thanks for this. I checked the settings. DCOM is unrestricted (for administrators) Users are allowed to access computer from the network. I'm in the remote assistance users list, both as an admin and as my own id We're not using a local (xp or 3rd party) software firewall. The only thing I

RE: [ActiveDir] ADAM-ADSIEDIT and adam-user-based administration.. (ADAM SP1)

2006-10-25 Thread F. Javier Jarava
Thanks for the tip... It's much more user-friendly than ldp (that’s not saying much, I know :) -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de Ansar Mohammed Enviado el: miércoles, 25 de octubre de 2006 9:03 Para: ActiveDir@mail.activedir.org Asunto: RE:

RE: [ActiveDir] OT: Issue with remote assistance offers

2006-10-25 Thread Ken Schaefer
Interesting that the client would be failing on that port. In a normal RA session, where the novice asks an expert to provide assistance (e.g. via Messenger or file etc), the novice's computer attempts to open a connection to the expert's computer on a high-order port. If the expert's computer

[ActiveDir] Need some advices....

2006-10-25 Thread Yann
Hello all ;)Due tonetwork outagethat is scheduled for 4 hourson a active directory site, i'd like to leave our DCs upwithoutshut them down.Question: Could il leave all my DCs up despite they can not communicate with each others for 4 hours ?Willthatcause anyissues (repl, auth,etc..)? or

RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda
No compressed files that I could find. It seems to be mostly images; htm, gif and jpg. I think there are PowerPoints converted to html pages. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Wednesday, October 25, 2006 12:14 AM To:

RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda
There seems to be mostly small files; 5 to 7 K. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parag Nagwekar Sent: Tuesday, October 24, 2006 11:26 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] quota issues I guess he is probably trying to

RE: [ActiveDir] Need some advices....

2006-10-25 Thread Vinnie Cardona
No issuesthe DCs will just complain that it couldnt contact its replication partners(event logs riddled with these errors/warnings) Itll backfill once its back on line. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann Sent: Wednesday, October 25, 2006 8:23 AM

RE: [ActiveDir] Need some advices....

2006-10-25 Thread WATSON, BEN
There shouldnt be any reason why this would cause any issues. ~Ben From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann Sent: Wednesday, October 25, 2006 7:23 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Need some advices Hello all ;)

RE: [ActiveDir] quota issues

2006-10-25 Thread Mike Guest
Just a couple of thoughts Have you tried searching the disk for other files marked with him as owner perhaps from a legacy share which no longer exists? Alternatively, is it possible that one of the files hes copying has streams? I understand the space used by a stream does not get

Re: [ActiveDir] quota issues

2006-10-25 Thread Mark Parris
Do you store the users profile in this partition? Regards, Mark Parris Base IT Ltd Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: Antonio Aranda [EMAIL PROTECTED] Date: Tue, 24 Oct 2006 14:55:12 To:ActiveDir@mail.activedir.org Subject: [ActiveDir] quota

RE : RE: [ActiveDir] Need some advices....

2006-10-25 Thread Yann
Ben and Vinnie,Thanks for your answers, i'm confident now :)Have a nice day,Yann"WATSON, BEN" [EMAIL PROTECTED] a écrit: There shouldn’t be any reason why this would cause any issues.~Ben From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of YannSent:

RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda
No profiles, all users have one subdirectory they have access to and that’s all. Its there personal backup network drive, it gets mapped via their Ad account settings Home folder. They can not write or even browse any where else other then their own subdirectory. -Original Message-

RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda
Im sorry but I dont know what you mean by files having streams. Can you explain that attribute to me? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Guest Sent: Wednesday, October 25, 2006 10:06 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir]

RE: [ActiveDir] Need some advices....

2006-10-25 Thread Brian Desmond
If the domain was created in Windows 2000 or 2003 R2, youve got 60 days to fix it, 2003 domains you have 180 days. This is assuming you havent tweaked the tombstone lifetime. 4 hours is nothing. :) Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL

[ActiveDir] List Groups I'm In?

2006-10-25 Thread Michael B Allen
Was is the easiest way for a user (say on a stock XP client) to list what groups they're in? Specifically I'd like the user to be able to just type a command like 'net user list groups' or some such and get a list of NT Account names for tokenGroups. Or if there is a dialog somewhere that's good

Re: [ActiveDir] quota issues

2006-10-25 Thread Mark Parris
Okay - just wondered if there was a hidden recycler folder. Regards, Mark Parris Base IT Ltd Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: Antonio Aranda [EMAIL PROTECTED] Date: Wed, 25 Oct 2006 11:07:54 To:ActiveDir@mail.activedir.org Subject: RE:

Re: [ActiveDir] Need some advices....

2006-10-25 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
If memory serves me right the forest/trees tombstone values whatevers (you know those things we never worry about in SBSland) are different depending on how that SP1 got on the box... 2003 RTM you have 60 days 2003 SP1 (clean install) you have 180 days 2003 R2 (clean install) you have 60

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Ed Choinski
Try GPRESULT You'll get more information than you need but it will list the groups the logged on user is in as well as the groups the computer is in. Thanks, Ed Choinski Sr. Consultant - Microsoft Consulting Services -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE : RE: [ActiveDir] Need some advices....

2006-10-25 Thread Yann
interesting thing about tombstone lifetime depending on version of AD For my information, do you know why MS revers back the tombstome lifetime from 180 days in AD 2003 to 60 days in ADR2 ? Thanks, Yann --- Brian Desmond [EMAIL PROTECTED] a écrit : If the domain was created in Windows

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Akomolafe, Deji
whoami -group Sincerely, _ (, / | /) /) /) /---| (/_ __ ___// _ // _ ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Ryan Conrad
Whoami.exe should do the trick. The /groups switch will show them what groups they are in. Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B Allen Sent: Wednesday, October 25, 2006 12:47 PM To: ActiveDir@mail.activedir.org Subject:

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread AFidel
http://www.joeware.net/win/free/tools/memberof.htm I don't believe there's any builtin tool that will provide this information. Thanks, Andrew Fidel Michael B Allen [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/25/2006 12:46 PM Please respond to ActiveDir@mail.activedir.org To

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Free, Bob
whoami /groups C:\Admin\Utilwhere whoami C:\Program Files\Support Tools\whoami.exe Not exacty stock but then again I consider Support Tools as an essential part of an installation :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B Allen

RE: [ActiveDir] Need some advices....

2006-10-25 Thread Brian Desmond
That sounds right - I forgot about the SP1 change Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Wednesday, October 25, 2006

RE: [ActiveDir] quota issues

2006-10-25 Thread Coleman, Hunter
http://www.google.com/search?sourceid=navclientie=UTF-8rls=GGLD,GGLD:2004-22,GGLD:enq=windows+alternate+data+stream http://support.microsoft.com/kb/814594/en-us From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio ArandaSent: Wednesday, October 25, 2006 10:17 AMTo:

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Thommes, Michael M.
Hi Deji, My version of whoami shows the usage as: whoami /groups. Thanks for pointing me at this; I always just used whoami. Mike Thommes From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji Sent: Wednesday, October 25, 2006 11:58 AM To:

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Matt
You can also use a _vbscript_ from the scripting center URL below and follow the path below the URL.http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx?mfr=true Script Center Home Script Repository Active Directory GroupstnxmmOn 10/25/06,

RE: [ActiveDir] quota issues

2006-10-25 Thread Dave Wade
Its not to do with SIZE ON DISK against amount of data? For small files on a large disk the overhead per file on 4k clusters will be on average 2k. If there a lot of files of 5K there over head will be typically 3k per file. Not sure if quota counts actual data or clusters...

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Steve Szwejbka
Return Receipt Your RE: [ActiveDir] List Groups I'm In? document:

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Michael B Allen
On Wed, 25 Oct 2006 10:06:53 -0700 Free, Bob [EMAIL PROTECTED] wrote: whoami /groups C:\Admin\Utilwhere whoami C:\Program Files\Support Tools\whoami.exe Not exacty stock but then again I consider Support Tools as an essential part of an installation :-) Well I can't ship that with my

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Brett Shirley
What groups you are in, is a question that has different answers in different contexts ... Ask your domain's DC get one answer, ask another domain get a 2nd answer (which one is relevant often depends on the domain of the computer you logged onto / authenticated to), ask your workstation (local

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Jason_Centenni
Return Receipt Your RE: [ActiveDir] List Groups I'm In? document:

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread James (njan) Eaton-Lee
Michael B Allen wrote: On Wed, 25 Oct 2006 10:06:53 -0700 Free, Bob [EMAIL PROTECTED] wrote: whoami /groups C:\Admin\Utilwhere whoami C:\Program Files\Support Tools\whoami.exe Not exacty stock but then again I consider Support Tools as an essential part of an installation :-) Well I can't

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Akomolafe, Deji
You never mentioned anything about a "product". Anywhooo, see http://www.rlmueller.net/primary_group.htm, then go see what Richard did in http://www.rlmueller.net/Programs/EnumUserGroups.txt Sincerely, _ (, / | /) /) /) /---| (/_ __ ___// _ // _ ) / |_/(__(_) //

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Michael B Allen
On Wed, 25 Oct 2006 21:00:24 +0100 James (njan) Eaton-Lee [EMAIL PROTECTED] wrote: The vbscript you've written won't tell you if a user is a member of the cute_pink_bunnies group which is a member of the Enterprise Admins group, for instance - whoami /groups will. Are you sure? I know the

RE: [ActiveDir] List Groups I'm In?

2006-10-25 Thread joe
The WinNT provider will not show same scope nesting. i.e. GG in GG, DLG in DLG, etc As Brett stated, group membership is something with different answers depending on where you ask in the environment. For instance, DLG memberships in foreign domains will not show in your local interactive token.

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread James (njan) Eaton-Lee
Michael B Allen wrote: Are you sure? I know the LDAP provider won't expand nested groups but I used the WinNT provider. The WinNT provider returns the primary group. Fairly - I've just tested this with an account that's a member of nested groups, and it only returns the groups the user is

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread Michael B Allen
On Wed, 25 Oct 2006 23:30:30 +0100 James (njan) Eaton-Lee [EMAIL PROTECTED] wrote: Michael B Allen wrote: Are you sure? I know the LDAP provider won't expand nested groups but I used the WinNT provider. The WinNT provider returns the primary group. Fairly - I've just tested this with an

Re: [ActiveDir] List Groups I'm In?

2006-10-25 Thread James (njan) Eaton-Lee
Michael B Allen wrote: Well I'd say that's fairly conclusive. Thanks for checking. No worries; I realised I wasn't completely sure myself, I wanted to make certain. 0:) - James. -- James (njan) Eaton-Lee | 10807960 | http://www.jeremiad.org Semper Monemus Sed Non Audiunt, Ergo

[ActiveDir] LastlogonTimestamp Missing

2006-10-25 Thread WATSON, BEN
I have a Windows 2003 R2 single domain/forest. This domain/forest was built upon Windows 2003 R2 so it has never had to go through any upgrades. I wanted to query for the true last logon time/date for various users and noticed that the LastlogonTimestamp is not an available attribute for the

RE: [ActiveDir] LastlogonTimestamp Missing

2006-10-25 Thread joe
Are you in DFL2? Just building an R2 forest from scratch won't set your functional levels, you still have to switch from mixed to native, then your domains to DFL2 and then your forest to FFL2. Though lastLogonTimestamp will start getting populated for your domains as you hit DFL2. joe --

[ActiveDir] Restore ACE on User Object

2006-10-25 Thread Steve Evans
Because of something called FERPA (Federal Student Privacy Act) I had written a script that goes through our Students OU and removes the ACE for Authenticated Users. This prevented the students private information from being viewable by non-admin staff. Now I have been given a better view for

[ActiveDir] get information with wmic

2006-10-25 Thread Yann
Hello,i was trying to use wmic to get these information from a list of DCs: Name (oh DC), TotalPhysicalMemory,InitialSize of pagefile, MaximumSize of pagefile on one line or in an excel file.I use this wmic PAGEFILESET list writeable that list the values of InitialSize MaximumSize Name