RE: [ActiveDir] Forest trust - domain drop down list

2006-07-14 Thread Laura A. Robinson
Or you could just get users accustomed to using UPNs for logon and avoid the problem. :-) Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Friday, July 14, 2006 10:42 AM To: ActiveDir@mail.activedir.org Subject:

RE: [ActiveDir] Moving a Certificate Authority

2006-07-14 Thread Laura A. Robinson
 I've not looked at the log, but you can't just move a CA to another machine with the same name. You have to back up the old CA's keys anddatabase and install Certificate Services on the new machine, performing an advanced setup and telling it that you have an existing key to use for the

RE: [ActiveDir] Moving a Certificate Authority

2006-07-14 Thread Laura A. Robinson
 Ah, gotcha. Quick question, then- have you tried backing up the keys and certs again, then uninstalling and reinstalling certificate services on the machine? Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BENSent: Friday, July 14, 2006 1:30

RE: [ActiveDir] Moving a Certificate Authority

2006-07-14 Thread Laura A. Robinson
 Also, one last item- you said that this is a standalone CA, correct? (sorry for missing your first e-mails; I didn't read far enough down. I blame ADD.) Standalone CAs don't use or store information in AD; enterprise CAs do. If you're trying to obtain certificates from a standalone CA via

RE: [ActiveDir] Moving a Certificate Authority

2006-07-14 Thread Laura A. Robinson
 Okay, skimming back to your original mail, I suspect that you did not have a standalone CA in the first place, which may be the cause of your problem. You probably should try reinstalling the CA as an enterprise CA and see if your problems clear up. Sorry for the multiple responses; I'm

RE: [ActiveDir] Group Policy won't rerun

2006-07-14 Thread Laura A. Robinson
Title: Group Policy won't rerun No, but if you ghosted the laptop after you uninstalled via Add/Remove programs, you ghosted the registry entries that are keeping it from reinstalling. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu PackettSent:

RE: [ActiveDir] Why not browsing - was Multihomed Domain Controllers

2006-07-16 Thread Laura A. Robinson
With the Print Management Consolethat was introduced with Win2K3 R2, managing printers is *significantly* easier and ACLing them appropriately becomes a more realistic task. It's also now downloadable separately from R2 and will run on Win2K3 SP1+.

RE: [ActiveDir] Enumerating Group type and Mebership...

2006-07-25 Thread Laura A. Robinson
What is "everything [you] need", specifically? Thanks, Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike HogenauerSent: Tuesday, July 25, 2006 2:49 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Enumerating Group type and Mebership...

RE: [ActiveDir] Managing Third-Party Users

2006-07-25 Thread Laura A. Robinson
ADFS, at this time, is able to consume SAML 1.1 tokens. It does not, however, fully support either the SAML 1.1 or 2.0 specifications. ADFS does not currently construct SAML 1.1 or 2.0 tokens, does not support the rest of the SAML specifications and does not support consumption of SAML 2.0 tokens.

RE: [ActiveDir] Managing Third-Party Users

2006-07-26 Thread Laura A. Robinson
Whoops, folks, I need to amend one statement below- ADFS does construct SAML 1.1 tokens (assertions), but not 2.0. Thanks! Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Tuesday, July 25, 2006 3:49 PM

RE: [ActiveDir] Question on restricted group policy.

2006-07-26 Thread Laura A. Robinson
If you delete what? The GPO? Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John StrongoskySent: Wednesday, July 26, 2006 7:08 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Question on "restricted group" policy. Hey, Created a

RE: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Laura A. Robinson
Two quick questions- 1. Are you positive there are no IPsec policies applied to this machine? 2. Are you also positive that the machines from which you've been testing *also* have no IPsec policies in place? I can't think of a reason why this problem would surface only after you'd

RE: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Laura A. Robinson
all configuration:--- Operational mode = DisableThis is increasingly looking like a bug in the tcpip stack --what do you think laura ? activedir group ? On 7/29/06, Laura A. Robinson [EMAIL PROTECTED] wrote: Two quick quest

RE: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Laura A. Robinson
al mode = DisableThis is increasingly looking like a bug in the tcpip stack --what do you think laura ? activedir group ? On 7/29/06, Laura A. Robinson [EMAIL PROTECTED] wrote: Two quick questions- 1. Are you positive there are no IPsec policies applied to th

RE: [ActiveDir] R2 In-Place Upgrade bug ?

2006-07-29 Thread Laura A. Robinson
http://support.microsoft.com/kb/898060 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Falde Sent: Saturday, July 29, 2006 5:19 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] R2 In-Place Upgrade bug ? I would definitely get

RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-31 Thread Laura A. Robinson
Joe, isn't the below kind of like yelling, "OMG! Elvis!" in a McDonald's restaurant in Kalamazoo and following it up with, "nobody ask for his autograph"? ;-) Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Monday, July 31, 2006 3:13 PMTo:

RE: [ActiveDir] Revoke domain administrator's right to create GPO?

2006-07-31 Thread Laura A. Robinson
Is it possible to change who can create and/or edit GPOs? Sure. Will what you propose accomplish what you want it to? Nope. Your Domain Admins can just put themselves into the GP Creator Owners group, for example. Or in the root domain, they could put themselves into the Enterprise Admins

RE: [ActiveDir] 80/20 ..... Was: Read-Only Domain Controller and Server Core

2006-08-02 Thread Laura A. Robinson
At the bottom of every single message sent to this list, you'll see the following link: List FAQ: http://www.activedir.org/List.aspx ...which brings you to this: The list provides a discussion forum for those wishing to discuss aspects of Microsoft's Active Directory. It is intended for

RE: [ActiveDir] Remove Defunct domains..

2006-08-02 Thread Laura A. Robinson
That would depend upon whether or not the domains are appearing because of metadata, or whether they're appearing because of "bad" browsing information. Do the domains appear anywhere besides Network Neighborhood? Is WINS in use? If so, are there entries in WINS representing the domains?

RE: [ActiveDir] machine GP load

2006-08-09 Thread Laura A. Robinson
If by "loading", you mean applying the settings, yes, there are things in AD/GP that would affect workstation application of policies, including ACLs on the policies, OU structures, use of blocking and application of loopback processing. Laura From: [EMAIL PROTECTED]

RE: [ActiveDir] Computer bootup speeds

2006-08-09 Thread Laura A. Robinson
Misconfigured scopes. Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Wednesday, August 09, 2006 10:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Computer bootup speeds Here's a thought -

RE: [ActiveDir] Windows 2003 R2 Issue

2006-08-12 Thread Laura A. Robinson
Read the last line of the original post. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Sunday, August 13, 2006 12:38 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Windows 2003 R2 Issue Hes trying to read a

RE: [ActiveDir] Windows 2003 R2 Issue

2006-08-12 Thread Laura A. Robinson
To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Windows 2003 R2 Issue But aren't we assuming that the permissions on that other exchange server where it does work are default? Laura A. Robinson wrote: Read the last line of the original post. Laura

RE: [ActiveDir] Windows 2003 R2 Issue

2006-08-12 Thread Laura A. Robinson
I don't know; that's why I pointed it out. Obviously, it's readable. The question is, why is it readable on a Win2K3 machine, but not on a Win2K3 R2 machine? In order to figure that out, we need the information that Al asked for. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Windows 2003 R2 Issue

2006-08-13 Thread Laura A. Robinson
Which is why I say we need the information that Al has asked for. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Sunday, August 13, 2006 2:18 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Windows 2003 R2 Issue

RE: [ActiveDir] ADFind Query

2006-08-15 Thread Laura A. Robinson
It's part of SFU (now in R2), but if you just want a downloadable grep for Windows, you could try http://www.wingrep.com Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BENSent: Tuesday, August 15, 2006 12:28 AMTo:

RE: [ActiveDir] Secure LDAP queries from the outside -- problem solved

2006-08-23 Thread Laura A. Robinson
Windows 2000 RTM, by default, does not perform CRL checking; XP and 2003 do. However, there are behavior variances on an application-by-application basis. For more information: http://www.microsoft.com/technet/security/topics/cryptographyetc/tshtcrl.msp x#ES3AE Laura -Original

RE: [ActiveDir] OU tareq

2006-08-24 Thread Laura A. Robinson
Create a restricted groups policy and link it to the OU in question. http://support.microsoft.com/Default.aspx?kbid=279301 http://www.windowsecurity.com/articles/Using-Restricted-Groups.html Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of tareq

RE: [ActiveDir] AD Site replication settings/costs

2006-08-30 Thread Laura A. Robinson
Intervals vary by company, domain structure, network topology and latency tolerances. That said, there is nothing inherently wrong with the replication parameters you list below. Are they the best parameters for your environment? That depends. Is this a Windows 2000 environment? Is automatic

RE: [ActiveDir] AD Site replication settings/costs

2006-08-30 Thread Laura A. Robinson
bandwidth site in question only has one replication partner, yet we see connections to it from a large number of our DCs on a regular basis. Is this normal? _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Wednesday, August 30, 2006 11:12 AM To: ActiveDir

RE: [ActiveDir] AD Site replication settings/costs

2006-08-30 Thread Laura A. Robinson
Is it a GC? If so, then yes, that's to be expected. You may have *thought* that you gave it only one replication partner, but if you're seeing additional connection objects, then it has more than one replication partner. When planning replication, you must be aware of every partition that

RE: [ActiveDir] AD Site replication settings/costs

2006-08-30 Thread Laura A. Robinson
No. GCs can replicate partitions thatthey don't own to other GCs. They can't replicate them to DCs for the domains in question, but they *can* replicate their read-only partitions to other GCs. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David

RE: [ActiveDir] Seperate Administrator password policy

2006-09-01 Thread Laura A. Robinson
As a side note to the other discussions, you do not need to set minPwdLength *and* uASCompat. minPwdLength is for a Win2K3 domain, and uASCompat is for a Windows 2000 domain. In Windows 2000, you can also just directly edit the GP template (.adm). Laura From: [EMAIL PROTECTED]

RE: OT - RE: [ActiveDir] W. in hell

2006-09-03 Thread Laura A. Robinson
Okay, has anybody considered the possibility that this was an accident? I know I've accidentally sent mail to the wrong addresses before by letting autofill kick in an not paying attention to what actually got autofilled, and this seems like a very strange thing to send to this list intentionally.

[ActiveDir] Completely OT: Maroons

2006-09-04 Thread Laura A. Robinson
://www.akomolafe.com www.akomolafe.com - we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Laura A. Robinson Sent: Sun 9/3/2006 5:41 PM To: ActiveDir@mail.activedir.org Subject: RE: OT - RE

RE: [ActiveDir] Completely OT: Maroons

2006-09-04 Thread Laura A. Robinson
Oh, and: http://www.randomhouse.com/wotd/index.pperl?date=19970731 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Monday, September 04, 2006 3:49 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Completely OT

RE: [ActiveDir] Completely OT: Maroons

2006-09-04 Thread Laura A. Robinson
Has anybody figured out what's causing the blank posts, or is it just me who got blank replies from Mark and Neil? Thanks, Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Monday, September 04, 2006 4:15 AM To:

RE: [ActiveDir] Completely OT: Maroons

2006-09-04 Thread Laura A. Robinson
Are they using NOTES - - I find that happens in list environments a lot when the sender is using NOTES -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Monday, September 04, 2006 10:06 AM To: ActiveDir@mail.activedir.org Subject

RE: [ActiveDir] [OT]The last departmental picnic [list owner]

2006-09-06 Thread Laura A. Robinson
Given that the culprit hasn't received any of the "backlash", my guess is that it was still an accident. Can't anybody just cut the guy some slack? Yeesh. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig CerinoSent: Wednesday, September 06, 2006 9:20 AMTo:

RE: [ActiveDir] Strange password issue

2006-09-06 Thread Laura A. Robinson
Impossible/irrelevant.If it's a domain account, the policy applies regardless, because the account is stored in AD. If it's a local account, then the policy doesn't apply regardless; domain account policies don't apply to local accounts. Is this a local account or a domain account? Laura

RE: [ActiveDir] Is a Global Security group being used?

2006-09-06 Thread Laura A. Robinson
What do you mean by "being used"? Are you referring to it being in resource ACLs? Nested into other groups? Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Figueroa, JohnnySent: Wednesday, September 06, 2006 12:44 PMTo:

RE: [ActiveDir] Strange password issue

2006-09-06 Thread Laura A. Robinson
. The userAccountControl attribute of the user object was set to 512(not that i'm certain if setting the passwd_notreqd overrides the DDP). The domain/forest is at w2k3 FL. Thanks On 9/6/06, Laura A. Robinson [EMAIL PROTECTED] wrote: Impossible/irrelevant.If it's

RE: [ActiveDir] Is a Global Security group being used?

2006-09-06 Thread Laura A. Robinson
While that's an interesting approach, unless this is a very small environment (as in, there's no help desk that's going to be baffled by the screaming and no multi-gazillionaire CXOs who are going to be doing the screaming), that might not be such a good idea. ;-) Laura -Original

RE: [ActiveDir] Is a Global Security group being used?

2006-09-06 Thread Laura A. Robinson
Ouch. How large an environment are we talking about? You could use something like DumpSec to list the DACLs and SACLs (and it's important to list the SACLs, because the group could be being used for auditing purposes as well as permissions granting) and could then parse the output, but

RE: [ActiveDir] Strange password issue

2006-09-06 Thread Laura A. Robinson
is at w2k3 FL. Thanks On 9/6/06, Laura A. Robinson [EMAIL PROTECTED] wrote: Impossible/irrelevant. If it's a domain account, the policy applies regardless, because the account is stored in AD. If it's a local account, then the policy doesn't apply regardless; domain account

RE: [ActiveDir] Is a Global Security group being used?

2006-09-06 Thread Laura A. Robinson
There are lots of utilities to report ACLs. The issue is, depending upon the size of the environment, this could be a lot of work that may not be worth it, depending on how badly the OP wants to know if the group is being used anywhere. Laura From: [EMAIL PROTECTED]

RE: [ActiveDir] Separate Administrator password policy

2006-09-07 Thread Laura A. Robinson
Or use smartcards. Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, September 07, 2006 6:35 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Separate Administrator password policy Why not

RE: [ActiveDir] Strange password issue

2006-09-07 Thread Laura A. Robinson
confirmed. The userAccountControl attribute of the user object was set to 512(not that i'm certain if setting the passwd_notreqd overrides the DDP). The domain/forest is at w2k3 FL. Thanks On 9/6/06, Laura A. Robinson [EMAIL

RE: [ActiveDir] Is a Global Security group being used?

2006-09-07 Thread Laura A. Robinson
To: ActiveDir.org Subject: Re: [ActiveDir] Is a Global Security group being used? The question was a way - not the best way. This method was actually suggested by MS at TechED one year, so I am not totally insane. -Original Message- From: Laura A. Robinson [EMAIL PROTECTED] Date: Wed, 06 Sep

RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Laura A. Robinson
Can you elaborate? What do you mean by "protected groups", and how did modifying the membership of the Print Operators group cause you grief? Thanks! Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Derek HarrisSent: Thursday, September 07, 2006 12:36

RE: [ActiveDir] OT: Volume licensing activation

2006-10-04 Thread Laura A. Robinson
The process is nothing like that.There's a lot of hyperbole around this whole thing, IMO. It's really not as onerus as many of these speculative articles would have people believe. Seriously, folks, dig a little and you'll find things like this:

RE: [ActiveDir] OT: Volume licensing activation

2006-10-04 Thread Laura A. Robinson
Oh, one other thing- it most certainly *is* companies with 1000+ workstations who are exceeding their license purchases. They're typically not doing it intentionally, but they're most certainly doing it. (Of course, not *all* companies of any particular size do it, but there are far more

RE: [ActiveDir] what is the meaning of OT in front of the subject

2006-10-05 Thread Laura A. Robinson
Off-topic. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert Sent: Thursday, October 05, 2006 10:14 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] what is the meaning of OT in front of the subject Off Track?

RE: Goiong further OT :) RE: [ActiveDir] what is the meaning of OT in front of the subject

2006-10-05 Thread Laura A. Robinson
Funnily enough, there's a wiki entry about this... :-) http://en.wikipedia.org/wiki/Wikipedia:Introduction -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, October 05, 2006 11:08 AM To:

RE: [ActiveDir] OT: wikis

2006-10-05 Thread Laura A. Robinson
999,998 + 2 = 1,000,000, not 100,000. ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Nims Sent: Thursday, October 05, 2006 11:49 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: wikis It's funny how we quote wikis as

RE: [ActiveDir] Who keeps creating this folder files?!

2006-10-05 Thread Laura A. Robinson
1. Check the owner of the files 2. You may want to look at FSRMin Win2K3 R2; it allows you to restrict creation of files based on type, among other things. http://www.microsoft.com/windowsserver2003/R2/storage/default.mspx Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir]OT:OT: OT

2006-10-05 Thread Laura A. Robinson
] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Thursday, October 05, 2006 12:55 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: wikis 999,998 + 2 = 1,000,000, not 100,000. ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] Who keeps creating this folder files?!

2006-10-05 Thread Laura A. Robinson
Okay, then I'd recommend item #2 in my last response- rather than spending a bunch of time trying to figure out who's doing it (which could be multiple people), why not just prevent it in the first place? :-) Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J

RE: [ActiveDir] Who keeps creating this folder files?!

2006-10-05 Thread Laura A. Robinson
Okay, this is now my third time recommending FSRM in response to this query; are my replies not getting through to the list? *Seriously*, just address the issueby using FSRM and not allowing .mp3 files to be saved on the server in the first place. If anybody complains, you'll have your

RE: [ActiveDir] MORE OT OT: wikis

2006-10-05 Thread Laura A. Robinson
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Thursday, October 05, 2006 12:55 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: wikis 999,998 + 2 = 1,000,000, not 100,000. ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] MORE OT OT: wikis

2006-10-05 Thread Laura A. Robinson
AAARGH! TEN types! TEN! I need a nap. _ From: Laura A. Robinson [mailto:[EMAIL PROTECTED] Sent: Thursday, October 05, 2006 8:34 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] MORE OT OT: wikis There are two types of people in the world- those who understand binary

RE: [ActiveDir] MORE OT OT: wikis

2006-10-05 Thread Laura A. Robinson
TRIPLE AAARGH!!! 10! 10! I give up; I'm dain bramaged today. _ From: Laura A. Robinson [mailto:[EMAIL PROTECTED] Sent: Thursday, October 05, 2006 8:34 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] MORE OT OT: wikis There are two types of people in the world

RE: [ActiveDir] BIND allow-update

2006-10-06 Thread Laura A. Robinson
You either need to allow the dynamic updates or create the DC's records manually. Do the records need to be created in the zones for the server to be reachable? Yes. Do you have to allow dynamic updates in order to create them? No. One way or another, however, you need to get the records created,

RE: [ActiveDir] OT: Volume licensing activation

2006-10-08 Thread Laura A. Robinson
Correct. There is no requirement to implement an additional server for licensing purposes, and it is noted throughout the documentation that there is no such requirement. Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Sunday, October

RE: [ActiveDir] OT: A short and sweet KB

2006-10-10 Thread Laura A. Robinson
Only for you... ;-) Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Tuesday, October 10, 2006 5:40 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] OT: A short and sweet KB It appears to have disappeared?

RE: [ActiveDir] Attribute for Name Component of userPrincipalName?

2006-10-12 Thread Laura A. Robinson
There's a problem with this idea- the UPN (or, more specifically, the portion before the @) does not necessarily match the CN component of a DN, so there would be no reliability in your approach. Why are you unable to retrieve DNs? Laura -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] OT: File Server Permissions Design Question

2006-10-14 Thread Laura A. Robinson
 Whoops, I forgot to also add that because local group SIDs count towards the limit, you will not experience "can't log on, period". Rather, you may be able to log on to machines that aren't adding enough local group SIDs to your access token to exceed the ~1015 group limit if you are a

RE: [ActiveDir] SBS 2003 and exchange full vs on diff machine

2006-10-14 Thread Laura A. Robinson
Yes. You can even install SBS into an existing AD environment and it will automatically join the existing Exchange organization, if one exists. That's about the extent of my SBS knowledge, though, so you may want to wait until Susan replies before taking my word on it. :-) Laura -Original

RE: [ActiveDir] Latency in List

2006-10-17 Thread Laura A. Robinson
I've been noticing the latency for some time. Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Tuesday, October 17, 2006 5:09 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Latency in List I initially sent a

RE: [ActiveDir] Blocking IE7

2006-10-19 Thread Laura A. Robinson
" Toolkit Components:The toolkit contains two components: An executable blocker script A Group Policy Administrative Template (.ADM file) Blocker ScriptThe script creates a registry key and sets the associated value to block or unblock (depending on the command-line option used)

RE: [ActiveDir] quota issues

2006-10-24 Thread Laura A. Robinson
Does he have a lot of compressed (not zipped; compressed viaNTFS)files in the directory? Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio ArandaSent: Tuesday, October 24, 2006 3:55 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] quota

RE: [ActiveDir] Change a password over PPTP Windows Domain

2006-10-26 Thread Laura A. Robinson
I'm very confused (haven't had a lot of coffee today)... Is the laptop a member of the domain? How are you changing the password? What exactly isn't working? You should be able to simply press CTRL + ALT + DEL and change the password just as you would if you were connected to the network

RE: [ActiveDir] Change a password over PPTP Windows Domain

2006-10-26 Thread Laura A. Robinson
Is there anything that prevents the users from logging on via PPTP when they want to change their passwords? Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike HogenauerSent: Thursday, October 26, 2006 1:46 PMTo: ActiveDir@mail.activedir.orgSubject:

RE: [ActiveDir] DNS setup questions

2006-10-26 Thread Laura A. Robinson
I'd probably take a look at conditional forwarding and/or stub zones instead of doing Win2K-style secondaries. What version of BIND is in use in the other forest? BIND 8+ supports conditional forwarding, and BIND 9+ supports stub zones, IIRC. Laura -Original Message- From: [EMAIL

RE: [ActiveDir] DNS setup questions

2006-10-26 Thread Laura A. Robinson
http://technet2.microsoft.com/WindowsServer/en/library/358c7852-d23b-4668-ad f5-6ad2fe001e9f1033.mspx?mfr=true Sorry, probably should have dug up the link before sending my other response. :-) Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] DNS setup questions

2006-10-26 Thread Laura A. Robinson
Not at all. Both BIND and MS DNS support conditional forwarding (depending on BIND version and OS version, respectively). The destination for the conditional forwarding is irrelevant, since it's the servers receiving the queries from the clients that are responsible for forwarding (or not) the

RE: [ActiveDir] DNS setup questions

2006-10-26 Thread Laura A. Robinson
There seems to be a bit of confusion on a couple of fronts. First, neither stub zones nor conditional forwarding are dependent on the destination (e.g., external forest/external environment) DNS implementation. DNS servers respond to queries; that is what DNS does, no matter what version or

RE: [ActiveDir] OT - Backup Follies

2006-11-03 Thread Laura A. Robinson
What's the boot order in the BIOS on those machines? Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Albert Duro Sent: Friday, November 03, 2006 10:54 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT - Backup Follies Ah,

RE: [ActiveDir] OT - Backup Follies

2006-11-03 Thread Laura A. Robinson
Anderson IT Guy Kent Sporting Goods 433 Park Ave. S New London OH 44851 419-929-7021 x315 email: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Friday, November 03, 2006 10:52 AM To: ActiveDir

RE: [ActiveDir] Reverse DNS Lookup?

2006-11-03 Thread Laura A. Robinson
nslookup set type=A 192.168.1.15 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B Allen Sent: Friday, November 03, 2006 3:15 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Reverse DNS Lookup? Can someone tell me how to do a

RE: [ActiveDir] Reverse DNS Lookup?

2006-11-03 Thread Laura A. Robinson
Works fine on my Windows machines. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B Allen Sent: Friday, November 03, 2006 3:48 PM To: ActiveDir@mail.activedir.org Cc: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Reverse DNS Lookup?

RE: [ActiveDir] OT - Backup Follies

2006-11-03 Thread Laura A. Robinson
the restart procedure to say 'Power off the USB drive before the system restarts.' Bob IT Guy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Friday, November 03, 2006 11:41 AM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] OT - Backup Follies

2006-11-03 Thread Laura A. Robinson
and not the other way around. I have since update the restart procedure to say 'Power off the USB drive before the system restarts.' Bob IT Guy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Friday

RE: [ActiveDir] Subnet Object Question

2006-11-05 Thread Laura A. Robinson
Used for what? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Sunday, November 05, 2006 4:31 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Subnet Object Question Well yes, but Im wondering which one is the actual

RE: [ActiveDir] OT - USB HD no boot

2006-11-05 Thread Laura A. Robinson
: Friday, November 03, 2006 7:14 PM Subject: Re: [ActiveDir] OT - Backup Follies That's a great revelation. Thank you. I'll try it first thing in the morning. - Original Message - From: Laura A. Robinson [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
Susan, two questions- 1. Why are you now going by Patrick? 2. Do you plan to identify the event of which you write below for those who may not know? :-) Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS

RE: [ActiveDir] OT - USB HD no boot

2006-11-07 Thread Laura A. Robinson
.. what options do you see there? Laura A. Robinson wrote: And have you tried booting the server with the USB drive formatted as a system drive? So far, your original statement has not been proven, and if the server boots properly with that USB drive formatted in a bootable

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
for the women's restroom, whether or not Mountain Dew was readily available and what not... ;-) Now I did google for the PGE links Laura A. Robinson wrote: Susan, two questions- 1. Why are you now going by Patrick? 2. Do you plan to identify the event of which you write below

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
Okay, maybe my sense of humor is a little skewed. :-P -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Wednesday, November 08, 2006 12:48 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT for those

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
You may doubt it, but I don't. It's a moniker that implies (aside from childishness on the part of the person who uses it) that Microsoft is a company that is all about corporate greed. That's an unfair characterization and IMO, is insulting to the 75%+ of Microsoft employees who spend a

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
That's the secret share we use for the man. It's where we keep the collective intelligence that allows us to represent our single self as multiple entities. Laura I am Dsylexia of Borg. Your a$$ will be laminated. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] OT: M$

2006-11-10 Thread Laura A. Robinson
:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Friday, November 10, 2006 5:24 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] OT: M$ it's friday, can't we all just get along? -- Original message -- From: "Laura A. Robinson"

RE: [ActiveDir] OT: M$

2006-11-13 Thread Laura A. Robinson
Clearly there are differing opinions about whether it's merely "slang" or whether it's an inappropriate slur. Simpler just not to use it, don't you think? I mean, I don't refer to the USAF as the "useless air farce" and expect its members to think that's funny. I don't take offense when

RE: [ActiveDir] OT: M$

2006-11-13 Thread Laura A. Robinson
There's a reason for the "OT" portion of the subject line, you know. ;-) Laura From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert RutherfordSent: Monday, November 13, 2006 6:42 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] OT: M$

RE: [ActiveDir] OT: M$

2006-11-13 Thread Laura A. Robinson
Exactly. M$ just isn't funny. Borg, kool-aid, those are funny. M$ isn't. Go figure. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNASent: Monday, November 13, 2006 7:46 AMTo: ActiveDir@mail.activedir.orgSubject: RE:

RE: [ActiveDir] OT: M$

2006-11-13 Thread Laura A. Robinson
Disclaimer #1: "You" in the below refers to a generic "you", not a specific person. Disclaimer #2: My opinions are in no way intended to represent those of my employer. They're my own, and they were my opinions long before I became a Microsoft employee. That said... You know what I find

RE: [ActiveDir] Locating empty GPOs in a domain / forest

2006-11-16 Thread Laura A. Robinson
Darren is correct. A quick and simple test- create the following policy and link it to an OU where you've placed a test user account: 1. User Configuration\Administrative Templates\Start Menu and Taskbar\Remove Documents menu from Start menu- set to enabled 2. Run gpupdate if you're logged on

RE: [ActiveDir] Strange DC behavior and error

2006-11-16 Thread Laura A. Robinson
That's not entirely accurate, which may be why you see it not working as advertised. :-) http://technet2.microsoft.com/WindowsServer/en/library/71e76587-28f4-4272-a3 d7-7f44ca50c0181033.mspx?mfr=true Laura _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott,

[ActiveDir] Windows PowerShell now available for download

2006-11-16 Thread Laura A. Robinson
I may have missed it if somebody already posted this, but Windows PowerShell is now available for download: http://www.microsoft.com/downloads/details.aspx?FamilyID=10ee29af-7c3a-4057- 8367-c9c1dab6e2bfDisplayLang=en Enjoy! Laura List info : http://www.activedir.org/List.aspx List FAQ

RE: [ActiveDir] Kerberos is Killing Me!

2006-11-16 Thread Laura A. Robinson
Is this the same set of machines that are being talked about in the strange DC error thread? I don't remember who it was who originated that one and I want to make sure I'm not asking for something you've already provided. So, if the answer to the above is no, my next question is, can you

  1   2   >