RE: [ActiveDir] [ActiveDir[OT]] Search Mailbox

2006-09-21 Thread Ayers, Diane
ExMerge allows you to search on certain parameters such as subject, attachments, date/time, etc. It runs with privileged credentials to access and search through the mailboxes. Downloadable from the MS download page Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan

RE: [ActiveDir] Remove Defunct domains..

2006-08-02 Thread Ayers, Diane
dusting off old NT 4.0 sectors Check your WINS database if you are using WINS. Part of the browsing data comes from WINS and the database will tell you where those records are coming from. You can address it viathe hosts if it's coming from there or clean up your WINS db. Diane From:

RE: [ActiveDir][OT] Is there a way to force users to logon to domain?

2006-05-15 Thread Ayers, Diane
I'm getting the list at home and at work. Outlook 2K3 via POP3 is coming in fine. Outlook 2K3 via Exchange and MAPI is coming in blank. Both the non-SP standard builds of Outlook. Exchange is still @ E2K... Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent:

RE: [ActiveDir][OT] Is there a way to force users to logon to domain?

2006-05-15 Thread Ayers, Diane
The POP3 is just via my local Telco ISP (not a major Telco). I'm not sure what they are using but it's not Exchange. Mirapoint MOS 3.7.0-GA is what I glean from the headers but I'm not familiar with it. Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent:

RE: [ActiveDir] Quiet? DEC? Related?

2006-03-29 Thread Ayers, Diane
Maybe we should ask a question on the merits of doubling down on an 11 when the dealer has a face card showing... :-) Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge deSent: Wednesday, March 29, 2006 9:35 AMTo:

RE: [ActiveDir] Single Sign-on

2006-01-29 Thread Ayers, Diane
Russ: We pursuing a "reduced" sign on environment as opposed to a single sign on. Fortunately we've been able to leverage AD as our "authoritative source" for IDs and passwords but due to the plethora of heterogeneous applications, not all of them can leverage AD as the authentication and

RE: [ActiveDir] [List Owner] Mailing list is 5 today!

2006-01-13 Thread Ayers, Diane
16 more years and we can start drinking... WooHoo.. My cranial capacity on AD has grown immensely through the sharing on the list. Thanks much to you and the members of the list. Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent:

RE: [ActiveDir] remove logon script?

2005-12-05 Thread Ayers, Diane
Try ADmodify for a GUI tool... Diane http://tinyurl.com/5ruog From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, DevonSent: Monday, December 05, 2005 12:40 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] remove logon script? How can I remove the

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Ayers, Diane
IIRC in the conversations that I had with MS around MONAD was that one goal was intended to fix the issue of inconsistencies of the various command line tools (different switches, piping options, etc.). The other goal was to ensure that every option that was available via the GUI was exposed via

RE: [ActiveDir] Trusts.....

2005-11-28 Thread Ayers, Diane
You mention that it is a legacy trust. I don't know how far back it goes legacy wise but I ran into an issue where a legacy trust could not be upgraded (modified) as the trust existed prior to upgrade (way back in NT 4.0 land) and the solution was to delete the trust entirely and recreate.

RE: [ActiveDir] exporting group membership

2005-11-28 Thread Ayers, Diane
here is a script that you can use. It dumps the group to a spreadsheet with column headers. Modify as you see fit Diane On Error Resume Next CRLF=CHR(13)+CHR(10) strADName = InputBox("Enter Complete LDAP DN for desired group","Group

RE: [ActiveDir] Schema Updates

2005-10-10 Thread Ayers, Diane
Title: Schema Updates You ever find that often times the products are already bought before your input is requested? The better question is when do they ever check with you before they buy a product? Nope... They usually ask someone that has no clue of the impact to the production systems

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-07 Thread Ayers, Diane
does it work? Do you use LDAP to look at the membership? If so, you probably have a whole in the implementation. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: Thursday, October 06, 2005 2:20 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-06 Thread Ayers, Diane
We run a simple process that monitors the members of elevated privilege groups. Any changes trigger a notification. Doesn't address the prevention but will allow you to capture the occurrence and deal with it appropriately. Diane -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] Precreating sites and subnets

2005-09-01 Thread Ayers, Diane
Tom: I used Robbie Allen's script to do this. You can glean from his script the techniques for doing this. I sent you a copy under a separate email Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, September 01, 2005

RE: [ActiveDir] Database Corruption

2005-08-19 Thread Ayers, Diane
My preferred approach would be to demote the box to member server and re-promote to a domain controller to ensure a good fresh copy of the DIT. YMMV as the specific requirements at your location may prevent this. We have only run into this once early in our AD days and this was the approach

RE: [ActiveDir] Biggest AD Gripes

2005-08-03 Thread Ayers, Diane
Not a AD gripe but a tools gripe. The AD Sites and Services snap-in sucks canal water as Laura sez. MS said they would fix it in Win2K3 but it still sucks. Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, August 02, 2005 9:25

RE: [ActiveDir] Account lockout

2005-08-02 Thread Ayers, Diane
Title: Account lockout Look in the security event logs on the domain controller and it will tell you what machine the lockout is coming from. You will have to check all the DCs until you find the one that is authenticating the account and locking it out. MS has tools to do this for you.

RE: [ActiveDir] Doubletake(OT)

2005-07-07 Thread Ayers, Diane
We use DoubleTake on a number of DAS based File/Print servers in our distributed environment that are fairly large (~1 TB). We implemented it when we had some server failures that created extended outages for clients while we recovered data from backup tapes. Our current implementation is

RE: [ActiveDir] Doubletake(OT)

2005-07-07 Thread Ayers, Diane
@mail.activedir.org Subject: RE: [ActiveDir] Doubletake(OT) Can you elaborate further on why you don't feel comfortable using it with Exchange as well as what you think the limitations are, if you don't mind? Thanks a lot. Ayers, Diane wrote: We use DoubleTake on a number of DAS based File/Print

RE: [ActiveDir] Load balancing LDAP request among my DCs

2005-06-13 Thread Ayers, Diane
Not to hijack the thread but has anyone used a hardware based load balancer such as a BigIP appliance to load balance and/or fail over LDAP? We have some apps that have to be configured to a specific host and this was one idea floated up. Diane -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] lastlogontimestamp-

2005-05-31 Thread Ayers, Diane
. If this were the architecture of NT4, the PDC would have burned to the ground in any decent sized enterprise. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: Friday, May 27, 2005 7:18 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir

RE: [ActiveDir] lastlogontimestamp-

2005-05-27 Thread Ayers, Diane
In NT4, all updates go up to the PDC. This is why you will get a true last login report Not that my small wattage can hold a candle to the brain power for the others on the list but isn't this incorrect? IIRC, under NT 4.0 the last logon went to the authenticating DC. That is why you had to

RE: [ActiveDir] Exchange and AD

2005-04-18 Thread Ayers, Diane
Brenda: Fire up ADSIedit and take a look at the Exchange Services container in AD.(CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=com) and verify that the Exchange groups have been applied to the container correctly. Exchange Domain Servers group "should" (don't have

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-12 Thread Ayers, Diane
than February to another machine to free space. If I don't need to ever backup those transaction logs, then I will just delete them once I have verified that the backups are working correctly. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers

RE: [ActiveDir] Update Your PayPal Account Information

2005-04-10 Thread Ayers, Diane
JS/Stealus.gen trojan as well -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Devan Pala Sent: Sunday, April 10, 2005 3:40 PM To: [EMAIL PROTECTED] Cc: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Update Your PayPal Account Information Hi

RE: [ActiveDir] OT: Exchange Transaction logs

2005-04-05 Thread Ayers, Diane
Not to be nit picky but it means you are not backing it up _correctly_ As Doug mentions, a correct on-line exchange backup will purge the logs on completion of the backup process. Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stelley, Douglas

RE: [ActiveDir] OT:RPC over HTTP vs OWA

2005-03-23 Thread Ayers, Diane
FWIW, there was a long conversation covering PRC over HTTP on the security basics mailing list. You can look at the archives to see if there was anything worth gleaning from the conversation Diane http://www.securityfocus.com/archive/105/389606/2005-02-04/2005-02-10/1 From: [EMAIL

RE: [ActiveDir] AD Database Corrupt

2005-03-08 Thread Ayers, Diane
The one instance that we had a corrupt database, we used this method as well. Fortunately we had enough redundancy to allow the demotion of the server and not affect any services. Is was also fortunate that we had high connectivity between the DCs to allow a full copy of the directory to be

RE: [ActiveDir] Citrix GPO Application

2005-02-08 Thread Ayers, Diane
We have a very similar situation. The Citrix MetaFrame boxes are the same OU as other servers. We created two policies for the Citrix settings. One for the machine policies and one for the user policies. We also created two groups, one for the Citrix machines and one for the Citrix users. The

RE: [ActiveDir] Printing Distribution Lists

2004-12-13 Thread Ayers, Diane
here's my "I'm not a programmer but I play one on TV" approach... Dumps to an excel spreadsheet. Easily modifiable to even the programming challenged like me... Diane --- On Error Resume Next CRLF=CHR(13)+CHR(10) strADName =

RE: [ActiveDir] Exchange Latency

2004-12-06 Thread Ayers, Diane
One option is to have the users switch to Outlook 2003 and run it in "local cached mode" Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan DeStefanoSent: Monday, December 06, 2004 9:06 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Exchange Latency A couple of our

RE: [ActiveDir] Exchange Latency

2004-12-06 Thread Ayers, Diane
You can use Outlook 2003 against Exchange 2000. The local cached mode is a specific configuration of the Outlook 2003 on the client side, No server config work is required. Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan DeStefanoSent: Monday, December 06, 2004

RE: [ActiveDir] Stress testing and performance analysis of domain controllers

2004-12-06 Thread Ayers, Diane
Wouldn't this be dependent on the volume of changes that you see in your environment? With Exchange and its accompanying volume of changes, moving the log files to separate spindles is as you say, a no no-brainer. However in our AD environment, we see very low volume of changes. We get maybe 50

RE: [ActiveDir] Master Browser

2004-11-16 Thread Ayers, Diane
Dusting off the old NT 4.0 memories... Key point is that browsing is not related to name resolution at all. Browsing is a simple NetBIOS based directory that allows users to find resources. Conecting to the resource either by clicking on an object in the browse list or by manually connecting

RE: [ActiveDir] Master Browser

2004-11-16 Thread Ayers, Diane
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: Tuesday, November 16, 2004 9:36 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Master Browser Dusting off the old NT 4.0 memories... Key point is that browsing is not related to name

RE: [ActiveDir] 64 Bit?

2004-11-09 Thread Ayers, Diane
Title: RE: [ActiveDir] 64 Bit? I guess my questions are general. I can see some advantages on shifting to a 64 bit platform for AD services but since the company I work for is definitely not bleeding edge, I was looking for what the general adoption rate of the 64 bit platform was. Our

[ActiveDir] 64 Bit?

2004-11-08 Thread Ayers, Diane
All: Is anyone looking at using the 64 bit platform for their AD domain controllers? We're doing a life cycle replacement of our hardware next year and was wondering if anyone has gone down this path. I sat though some of the Web casts but is there anyone running 64 bit in the real world ;-)

RE: [ActiveDir] AD OpenLDAP

2004-11-04 Thread Ayers, Diane
Just to Echo Justin's comment, the BIG difference between NT 4.0 and Active Directory is the integration/dependence on your DNS environment. In addition to the integration into your other LDAP sources, DNS is an area that you should focus some time on before you create your Active directory

RE: [ActiveDir] Mac OS X and SMB

2004-11-04 Thread Ayers, Diane
I don't know squat about apple but you probably have SMB signing set in your domain policies and Apple probably does not support SMB signing. Once you moved the server into AD, it received the domain policies and breaking the Apple access. Diane From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] BDC upgrade

2004-10-20 Thread Ayers, Diane
Title: RE: [ActiveDir] BDC upgrade Ditto. Used it once to "demote" a BDC that was also a time source in the NT 4.0 world. wanted to keep the server but didn't want it to be a BDC anymore. Best $99 bucks spent as far as saved time, etc. Diane From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: Re[2]: [ActiveDir] DNS naming confused

2004-10-16 Thread Ayers, Diane
Your Exchange STMP addresses are assigned separately. Your domain could be JoeBagOfDoughnuts.com and your email address can be DoughnutHoles.com Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sveta Sent: Saturday, October 16, 2004 5:35 PM To:

RE: [ActiveDir] Off-topic sorta

2004-10-06 Thread Ayers, Diane
Bad idea to place an exchange server in the DMZ. Better choice would be to use ISA 2004 in the DMZ to publish OWA. OMA and http over RPC to the external users. See http://www.isaserver.org for more info. I was fairly impressed with ISA 2004. Not as a firewall but being able to securely

RE: [ActiveDir] Off-topic sorta

2004-10-06 Thread Ayers, Diane
I'm not a DMZ/firewall person but generally the shear number of ports, etc that you have to open between the DMZ and the internal network is not a "good thing". Additionally for boxes that are in the DMZ, they should be configured as highly secure boxes and that tends to break Exchange. I

RE: [ActiveDir] Off-topic sorta

2004-10-06 Thread Ayers, Diane
. From: [EMAIL PROTECTED] on behalf of Ayers, Diane Sent: Wed 10/6/2004 5:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Off-topic sorta I'm not a DMZ/firewall person but generally the shear number of ports, etc that you have to open between the DMZ and the internal

RE: [ActiveDir] OT:Exhange size limit require restart?

2004-09-23 Thread Ayers, Diane
It takes a while to take affect (~ 2 hrs). Take a look at the KB below to see how to modify this behavior Diane http://support.microsoft.com/default.aspx?scid=kb;%5bLN%5d;327378 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. LongSent: Thursday, September 23,

RE: [ActiveDir] Unauthorized DHCP Requests

2004-09-13 Thread Ayers, Diane
Hunter: With Cisco ACS, how are you going to deal with non-MS based devices that get DHCP addresses? That's always been the hang-up for us to shift to a setup like you describe. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, HunterSent: Monday, September 13,

RE: [ActiveDir] OT: Server backup

2004-08-31 Thread Ayers, Diane
Backup to disks IMHO will become more the norm as the disk capacity continue to outstrip the tape backup capabilities. We do this for all our Exchange boxes and has worked very well. We keep 2-3days of backup files on a secondary server. All backups are sucked off the disks onto tape(s) for

RE: [ActiveDir] Schema Gurus needed - SAP has buggered my 2003 up grade attempt

2004-08-05 Thread Ayers, Diane
Unfortunately, I don't know, and the SAP guy who installed it doesn't remember either. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: Wednesday, August 04, 2004 7:20 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Schema Gurus needed - SAP has

RE: [ActiveDir] Schema Gurus needed - SAP has buggered my 2003 up grade attempt

2004-08-04 Thread Ayers, Diane
Ken: Do you recall which version of the SAP portal it was that made the schema changes? I'm asking since we are testing the SAP portal against AD in our lab with our SAP folks. I know that the initial version that they came to us with required a schema change (version 5?) and before we got it

RE: [ActiveDir] AD and printer admins

2004-07-29 Thread Ayers, Diane
I'm sorry, I must be missing something. Can't you just add them desktop support team to the local power users group on the servers that you create the print shares on? That what we do and it seems to work. The only thing that they can't do is to create new IP ports for shares if they are

RE: [ActiveDir] LSASS.EXE!

2004-07-27 Thread Ayers, Diane
My bets are on Sasser. Reapply MS04-011 and reboot. Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert Sent: Tuesday, July 27, 2004 7:28 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LSASS.EXE! What started this? Was it after

RE: [ActiveDir] win2k pro or server?

2004-07-21 Thread Ayers, Diane
It may be more than you want but what the heck. I'm not a programmer so YMMV Diane - On Error Resume Next Set Network = WScript.CreateObject(WScript.Network) strComputer = InputBox (Enter NETBIOS name of computer, GetComputerLocation In AD,

RE: [ActiveDir] Moving Roaming profiles

2004-06-03 Thread Ayers, Diane
It seems that outside of the FRS / replication issues, using DFS would be a good way of virtualizing the storage location of the profiles. If you used a DFS root to designate your storage location and you needed to migrate/replace this location, you could update the DFS root without having to

RE: [ActiveDir] exchange 5.5, active directory and ADC

2004-06-01 Thread Ayers, Diane
I'll second Nick's comment to test your implementation in a lab setup first before doing it live. There are some subtle (and not so subtle) things that you can do to hose your production setup. The first lab run we did hosed our lab but we learned. That's what labs are for Diane

RE: [ActiveDir] Mixed network PC and Mac - AD or XServe

2004-05-18 Thread Ayers, Diane
Don't even get me started on PERC raid controllers... I'll share my stories after a few "adult beverages"... Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent WestmorelandSent: Tuesday, May 18, 2004 4:02 AMTo: [EMAIL PROTECTED]Subject: Re: [ActiveDir] Mixed

RE: [ActiveDir] OT: explorer.exe hangs on folder access

2004-05-18 Thread Ayers, Diane
SWAG but we've run into issues with the thumbs.db file being corrupted. thumbs.db (hidden system) is created when you do the thumbnails view. Try deleting that and see if it helps. Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael WassellSent: Tuesday, May 18,

RE: [ActiveDir] VPN users and their AD passwords

2004-05-18 Thread Ayers, Diane
Gee... you givethem remote access to the company via the internet from anywhere and their complaining about having to hit cancel? I would tell them to get over it... :-) Actually with my client, I can just type in my password in the ctrl-alt-del login box and just ignore the VPN client if

RE: [ActiveDir] OT: Ad hoc queries from within Excel

2004-05-14 Thread Ayers, Diane
We wrote a basic one that allows users to dump DL memberships to a spreadsheet w some of the attributes. Basically it was for the clerical folks that create phone lists for depts. and floors. I don't know if we can share. Also It's hard coded to our domains and OUs Diane From: [EMAIL

RE: [ActiveDir] HELP I just deleted an OU

2004-05-03 Thread Ayers, Diane
Unplug a DC before it replicates From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grantham, CaronSent: Monday, May 03, 2004 10:05 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] HELP I just deleted an OU How can I get the OU with all objectes restored immediately

RE: [ActiveDir] AD screw up

2004-04-16 Thread Ayers, Diane
Title: Message Have you read the Branch Office guides? http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/branchoffice/default.aspfor Windows 2000 http://www.microsoft.com/downloads/details.aspx?FamilyID=9353a4f6-a8a8-40bb-9fa7-3a95c9540112DisplayLang=enfor Windows

RE: [ActiveDir] Password Never Expires...

2004-04-02 Thread Ayers, Diane
Also, just as an FYI, If you're on XP, you can use the Win2K3version ADUC which allows you to build a query in the GUI itself for all accounts that are configured as you described. It will work aganst both Win2K and Win2K3 domains. Diane -Original Message-From: [EMAIL

RE: [ActiveDir] [MailServer Notification]To Recipient file blocking settings matched and action taken.

2004-03-11 Thread Ayers, Diane
Crap. Our bad too. sorry guys... Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 11, 2004 7:00 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] [MailServer Notification]To Recipient file blocking settings matched

RE: [ActiveDir] Experiences with DFS.....

2004-03-11 Thread Ayers, Diane
We looked at a DFS / FRS combo and quickly rejected it based on the problems with FRS. For data replication, FRS is a PoS (to be brutally honest). MS needs to start from scrtach on that one. Any efficient data replication scheme would utilize a block level or some other low levelreplication

RE: [ActiveDir] Experiences with DFS.....

2004-03-11 Thread Ayers, Diane
Title: Message Yes. FRS today would trigger the replication of the entire file with a change to that file. There are also issues with open files. You coulod configure a less frequent replication schedule but... Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris

RE: [ActiveDir] OU design quandary

2004-03-04 Thread Ayers, Diane
For us, our user management is centralized so the user objects were placed in a single OU broken into sub OUs by type (users, administrators, service, restricted). Computer support is more decentralized so we have computer objects in geographic based OUs with sub OUs by function (servers,

RE: [ActiveDir] Site Configurations and SMS2003

2004-02-19 Thread Ayers, Diane
Of Ayers, Diane Sent: Wednesday, February 18, 2004 11:18 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Site Configurations and SMS2003 All: I know that this is somewhat off topic (SMS) but I had a recent conversation with some folks in regards to AD and SMS 2003. We are looking at possibly

[ActiveDir] Site Configurations and SMS2003

2004-02-18 Thread Ayers, Diane
All: I know that this is somewhat off topic (SMS) but I had a recent conversation with some folks in regards to AD and SMS 2003. We are looking at possibly deploying SMS 2003 and looking at some deployment scenarios. Anyway the conversation turn to the AD sites and what is the best

RE: [ActiveDir] Site Configurations and SMS2003

2004-02-18 Thread Ayers, Diane
defining a location to be in a separate site. Just my $.02. Coming out of lurking mode. Great list. Thanks for being here. John McGlinchey, MCSA, MCSE, CCNA Bristol-Myers Squibb Company _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On

RE: [ActiveDir] MS04-007 checking

2004-02-14 Thread Ayers, Diane
You have any pointers to info the "proof of concept"? I'm not interested in code but would like to look at the info and we may want to pull the trigger at our organization. We're working the rollout for 007but may want to deployquicker than we currently have mapped out. Diane From:

RE: [ActiveDir] Where did Additional Acct Info tab go to?

2004-02-09 Thread Ayers, Diane
dope slap to self on forehead No wonder I could never make that DLL work. Ipretty much use the find function exclusively. I too ass-umed it was me... Diane From: deji Agba [mailto:[EMAIL PROTECTED] Sent: Monday, February 09, 2004 7:21 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir]

RE: [ActiveDir] Other Listsrvs

2004-02-09 Thread Ayers, Diane
Ditto I dropped all the sunbelt lists due to the high signal-to-noise ratio Diane -Original Message- From: Martin Tuip [mailto:[EMAIL PROTECTED] Sent: Monday, February 09, 2004 1:28 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Other Listsrvs Personally I'm not too fond of the

RE: [ActiveDir] Other Listsrvs

2004-02-09 Thread Ayers, Diane
hope you didn't mean that as arrogantly as it sounds. :) But I do agree it's a little to much for me sometimes too. So tell me what lists do you consider the best ones for Exchange? Thanks, Julie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers

RE: [ActiveDir] I: Quest to aquire Aelita

2004-01-29 Thread Ayers, Diane
But they wouldn't be able to shift to a new paradigm... From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Thursday, January 29, 2004 6:05 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] I: Quest to aquire Aelita Wouldnt it be refreshing just once to

RE: [ActiveDir] GPO and the Outlook Dumpster

2004-01-15 Thread Ayers, Diane
Title: Message Following this thread, a related question (taking it even more OT) comes up. Often in email discovery cases, we use ExMerge to suck the dumpster off a server to look at what's there. Would DumpsterAlwaysOn on the host that ExMerge is run from have an effect on what data is

RE: [ActiveDir] Search for phone numbers????

2003-12-11 Thread Ayers, Diane
We simply modified the form for address book searches to include phone number. Individuals can now search one phone numbers for those mail enabled objects in AD. For us that meet the requirements 99% of the time. Diane -Original Message- From: Douglas M. Long [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] Inter-site Urgent replication

2003-11-18 Thread Ayers, Diane
lto:[EMAIL PROTECTED]] On Behalf Of Ayers, Diane Sent: Monday, November 17, 2003 6:04 PM To: [EMAIL PROTECTED] Greetings In an effort to localize our authentication traffic, we recently implemented a multi-site configuration moving away from our single mega-site (single domain). All DCs a

RE: [ActiveDir] Inter-site Urgent replication

2003-11-17 Thread Ayers, Diane
at urgent intersite replication observes the intersite replication schedule. You can work around this by enabling intersite notifications, but then that effectively circumvents any replication schedule. That's my understanding anyway. -gil -----Original Message- From: Ayers, Diane [mailto:

RE: [ActiveDir] Inter-site Urgent replication

2003-11-17 Thread Ayers, Diane
site with the same frequency that they are propagated within the source site, including changes that warrant urgent replication. From: Ayers, Diane Sent: Monday, November 17, 2003 5:02 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Inter-site Urgent replication We are at SP3. I've gone

RE: [ActiveDir] NTDIS Size

2003-10-14 Thread Ayers, Diane
Breaking the DB, logs and SysVol into separate logical partitions on the same physical spindles doesn't buy youmuch. Your still sharing the same spindles, head and I/O amongst the three logical partitions. I'd just create a D: volume and be done with it but that's just my opinion. Diane

RE: [ActiveDir] Editing directory permissions

2003-09-17 Thread Ayers, Diane
Title: Message If you want a GUI, I recommend "Security Explorer" from Small Wonders. I've found it to be very useful at times Diane http://www.smallwonders.com/SecurityExplorer.htm -Original Message-From: Abbiss, Mark [mailto:[EMAIL PROTECTED]Sent: Wednesday, September 17,

RE: [ActiveDir] Windows 2003 DC issue

2003-09-10 Thread Ayers, Diane
Title: Message We use a type of ACL for our Bind stuff. Only our DCs have the "rights" to do dynamic updates to our AD zoneon the bind server. Other hosts are updated in DNS via the DHCP server (Cisco) or other processes. The access rights are based on the source IP address. Not 100% secure

RE: [ActiveDir] Adding machines to OU directly

2003-07-16 Thread Ayers, Diane
Title: Message I couldn't help but laugh reading this. How true. In our internal documentation, we discribe this setting and that they need to change when setting up computer accounts. We even have a huge screenshot with red circles and big arrows highlighting the point. I still get calls on

RE: [ActiveDir] AD, Logon times Custom messages

2003-07-08 Thread Ayers, Diane
Title: Message I stil prefer the upgraded version, bIg stIckĀ® Diane -Original Message-From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]Sent: Tuesday, July 08, 2003 7:37 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] AD, Logon times Custom messages I ordered 10

RE: [ActiveDir] Domain Rename

2003-07-02 Thread Ayers, Diane
Jan: I was browsing the Win2K tools page and saw this. Not sure if you've seen these or not. Windows Server 2003 Domain Rename Tools http://www.microsoft.com/windowsserver2003/downloads/domainrename.mspx Diane -Original Message- From: Jan Wilson [mailto:[EMAIL PROTECTED] Sent:

RE: [ActiveDir] Domain Rename

2003-07-01 Thread Ayers, Diane
thread hijack H Out of curiosity, has anyone moved their production domains to Win2K Forest Functional Mode yet? Diane /thread hijack -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 01, 2003 5:09 PM To: [EMAIL PROTECTED] Subject: RE:

RE: [ActiveDir] Updating pwdLastSet

2003-06-16 Thread Ayers, Diane
IIRC, that is not a writeable attribute. We went through a similar exercise and found that we could not change that attribute. Diane -Original Message- From: Rex Wheeler [mailto:[EMAIL PROTECTED] Sent: Monday, June 16, 2003 10:05 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Updating

RE: [ActiveDir] OT- Quest Fastlane tools (maybe not OT?)

2003-06-05 Thread Ayers, Diane
Title: OT- Quest Fastlane tools (maybe not OT?) Stephen: We have gone through an evaluation of products including the ActiveRoles and Migrator tools. Contact me off list and I can give you some input on what we found. Diane AyersTeam Lead, System Server SupportPacific Gas Electric

RE: [ActiveDir] AD/Exchange Question

2003-05-30 Thread Ayers, Diane
One forest = One exchange Org irregardless of the domains within the forest. Diane -Original Message- From: Ellis, Debbie [mailto:[EMAIL PROTECTED] Sent: Thursday, May 29, 2003 6:35 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] AD/Exchange Question My company is getting ready to

RE: [ActiveDir] admt v2.0

2003-02-19 Thread Ayers, Diane
to it anyway. The controller running the PES must have the high encryption pack installed. Tony -- Original Message -- From: Ayers, Diane [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 18 Feb 2003 14:56:56 -0800 Graham: The password export server is only

RE: [ActiveDir] admt v2.0

2003-02-18 Thread Ayers, Diane
Graham: The password export server is only required for migration of accounts from Win2K to Win2K. It is not required for NT 4.0 to Win2K migrations. Diane -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 18, 2003 10:40 AM To: [EMAIL

RE: [ActiveDir] Authentication ?

2003-01-16 Thread Ayers, Diane
Title: Message Ditto for us. Heavily mixed environment (~20K users) with no impact from going native. Go for it :-) Diane -Original Message-From: Fugleberg, David A [mailto:[EMAIL PROTECTED]]Sent: Thursday, January 16, 2003 8:54 AMTo: [EMAIL PROTECTED]Subject: RE:

RE: [ActiveDir] AD restore to dissimilar hardware

2003-01-07 Thread Ayers, Diane
Is this the only DC you have? If not, why don't you just build a new box and run DCpromo to make it a DC with new data replicated from your other DCs? Diane -Original Message- From: osman filiz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 07, 2003 5:19 AM To: [EMAIL PROTECTED]

RE: [ActiveDir] ADMT 2.0

2002-12-23 Thread Ayers, Diane
Even though ADMT is on the .Net RC CD, the tool itself (IIRC) is not a beta version. Diane -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brad MartinSent: Monday, December 23, 2002 7:55 AMTo: Active Directory Mailing ListSubject:

RE: [ActiveDir] Script to find last logged on date

2002-12-16 Thread Ayers, Diane
Title: Message How about this? http://cwashington.netreach.net/depo/view.asp?Index=717ScriptType=vbscript -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Byrne, SteveSent: Monday, December 16, 2002 6:59 PMTo: [EMAIL PROTECTED]Subject:

RE: [ActiveDir] Anyone Heard of UltraBac?

2002-11-14 Thread Ayers, Diane
We use Ultrabac in our org as our standard backup product for single server tape backup. We have been pretty happy with it as far as backup to tape goes. You can email me direct if you want more info. Diane -Original Message- From: Eric [mailto:Eric;ch13-12westtex.org] Sent: Wednesday,

RE: [ActiveDir] OT: Exchange install

2002-11-13 Thread Ayers, Diane
Our Exchange boxes have 4 GB of memory. Initial plan was to run standard version. Our first live box began generating memory fragmentation issues. Supposedly this was fixed in SP3 as per PSS but no go. The only fix was to upgrade to Advanced and use the /3gb switch in the boot.ini (only

RE: [ActiveDir] OT: Exchange install

2002-11-13 Thread Ayers, Diane
by the time it gets errors I'll be long gone. -Original Message- From: Ayers, Diane [mailto:DMA8;pge.com] Sent: Wednesday, November 13, 2002 2:13 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT: Exchange install Our Exchange boxes have 4 GB of memory. Initial plan was to run

RE: [ActiveDir] Question about Active Directory

2002-11-12 Thread Ayers, Diane
Very early in our AD deployment we had one server reporting AD corruption. The other servers were OK. We simply demoted the server, waited for replication so that the server was removed from AD and re-promoted the server. At this point it got a new copy of the database and problem solved. Not

RE: [ActiveDir] Psched error?

2002-11-08 Thread Ayers, Diane
Are you running NetIQ AppManager agents on this box by chance? -Original Message- From: Chris J. Popp [mailto:chris.popp;sharpeengineering.com] Sent: Thursday, November 07, 2002 12:58 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Psched error? I am constantly getting the following in

  1   2   >