[ActiveDir] Adcheck from NetIQ.

2006-11-29 Thread Yann
Hello all, For those who use the monitoring tool for AD Adcheck, i have a little question: When testing a Show DC status on a DC, i always have this error: Replication error detected the remote system is unvalabile..(For diagnostic purposes, the error number is= 1256 ) But

[ActiveDir] OT: Vista Stuck on Completing Upgrade

2006-11-29 Thread Harding, Devon
I know it's not AD realated but have anyone had any issues upgrading XP to Vista RTM and got stuck on 'Completing Upgrade (64%)...'? I've removed all AV burning related software it has been stuck at this position for over 12 hours now. When I force reboot, it rolls back to Windows XP. Any

RE: [ActiveDir] Updating cached credentials

2006-11-29 Thread Ken Cornetet
Ok, this is really strange... I tried Al Munick's suggestion of having the user change their password via a three-finger salute. That did not update cached group membership. I tried Guy Teverovsky's suggestion to do a runas while VPN connected. It did not update cached group membership. James

Re: [ActiveDir] Updating cached credentials

2006-11-29 Thread Al Mulnick
Curious. After trying those, how did you validate that the user's group membership wasn't affected? On 11/29/06, Ken Cornetet [EMAIL PROTECTED] wrote: Ok, this is really strange... I tried Al Munick's suggestion of having the user change their password via a three-finger salute. That did

RE: [ActiveDir] Updating cached credentials

2006-11-29 Thread Ken Cornetet
We had the user reboot, login using cached credentials, start the VPN, then run GPRESULT. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, November 29, 2006 11:56 AM To: ActiveDir@mail.activedir.org Subject: Re:

Re: [ActiveDir] Updating cached credentials

2006-11-29 Thread Al Mulnick
You said the gpresult didn't give you the group membership regardless, right? Just that the gpo was applied properly after the three finger salute. I do know that the three finger salute method, with Nortel's client will cache the user's credentials (i.e. the user's password) but was not sure if

RE: [ActiveDir] Updating cached credentials

2006-11-29 Thread Ken Cornetet
The three finger salute did NOT result in the GPO being applied. The only thing that made the GPO get applied was the Psynch ActiveX control. We have a recent version of the Nortel VPN client (May 2006). I do not know if it is the latest. Most, if not all security fixes applied to XP clients.

Re: [ActiveDir] Updating cached credentials

2006-11-29 Thread Al Mulnick
My suggestion on that is to check with Nortel without mentioning the psynch control and see what they recommend. SSL vpns are by nature a user-mode application but I'm not familiar with how Nortel recommends to use it. As for the gpresult, I'm sorry to say I do not know where it gets it's

RE: [ActiveDir] Exchange 2003 management tasks overview

2006-11-29 Thread Victor W.
Thanks man, great idea! Lots of tasks in there. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: maandag 27 november 2006 22:33 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Exchange 2003 management tasks overview You could

[ActiveDir] OT: Script or utility to dump certificates on a remote server?

2006-11-29 Thread Steve Szwejbka
We have certificates deployed to some unknown number of Windows (mostly 2k3, but some 2k) servers throughout the environment. The certificates were generated via some internal root server which apparently does not have a way to dump what certificates have been issued and when they expire. So,

RE: [ActiveDir] OT: Script or utility to dump certificates on a remote server?

2006-11-29 Thread Isenhour, Joseph
Oh great who let you onto this mailing list? Isn't there some kind of screening process? Sheesh. Kidding. Hi Steve, welcome. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Szwejbka Sent: Wednesday, November 29, 2006 1:17 PM To:

Re: [ActiveDir] OT: Script or utility to dump certificates on a remote server?

2006-11-29 Thread steve patrick
Certutil can do this like so: certutil -store \\mymachine\MY or you can use a capimon script and CAPICOM.Store or you can call CertOpenStore see http://msdn.microsoft.com/library/default.asp?url=/library/en-us/seccrypto/security/system_store_locations.asp System store locations are opened