Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-05 Thread Michael B Allen
Yeah, but you can just ignore it and it's not the default Users
or Computers containers. Still, is there a safe way to remove
those? Similarly there's a safe way to remove the Default-First-Site-Name
stuff too?

Mike

On Mon, 04 Dec 2006 20:28:42 -0800
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:

 http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
 http://www.sbslinks.com/images/wp5z50vd.gif
 
 Joe?  Deji?  Got some forks?
 
 Laura A. Robinson wrote:
  Please tell me that you're making that up. Otherwise I'll have to stab
  myself in the eye with a fork. My Business 
 
  Words fail me. :-)
 
  Laura

  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
  Sent: Monday, December 04, 2006 9:13 PM
  To: ActiveDir@mail.activedir.org
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
  We install the Kitchen Sink service too don't forget  ;-)
 
  (wait until we start talking about the My Business 
  OU...that's usually good for another freak out or two)
 
  Laura A. Robinson wrote:
  
  Small point- dcpromo creates those zones as mentioned in 

  the original 
  
  question  *if* you have not configured DNS beforehand, *if* 

  you tell 
  
  dcpromo to go ahead and do it for you, and *if* you're building the 
  forest root domain. If you have configured DNS beforehand, how the 
  zones get created (as stub zones, as subdomains, etc.) will 

  depend on 
  
  that preconfiguration. If you're not building the forest 

  root domain, 
  
  the subdomain already exists and dcpromo is just populating it.
 
  I bring this up only because there are many companies that have 
  existing DNS infrastructures and it's important to know 

  that default 
  
  is not equivalent to mandatory. It is not a requirement that the 
  _msdcs zone be either a separate zone or a subdomain in an existing 
  zone, whether it's a stub or a full zone, etc.
 
  Of course, since we're talking SBS, all of this goes out the window 
  (no pun intended). SBS is its own freaky little animal.
 
  Laura
 


  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Hans 
  Halbmayr
  Sent: Monday, December 04, 2006 1:06 PM
  To: ActiveDir@mail.activedir.org
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
  Usually dcpromo creates all these zones. Windows creates 
  
  these zones 
  
  in a forest partition. If you have a linux DNS server just create 
  another slave zone of _msdcs.example.com.
  The gray one is only the delegation. 
 
  Hans
 
 
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 5:39:26 PM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
  Ok, so basically _msdcs is just a separate zone. Do Windows DNS 
  setups usually do this? I'm using SBS.
 
  I have a bind DNS server running on a linux machine with a 
  
  slave zone 
  
  for example.com. The AXFR doesn't have those records 
  
  (aside from the 
  
  NS record). So what you're saying is that I need to setup another 
  slave zone for the _msdcs subdomain?
 
  Mike
 
  On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr 
  [EMAIL PROTECTED] wrote:
 
  
  
  Hi Mike,
 
  the gray one is the delegation of the zone. The _msdcs ist


  a subdomain of your forest root. Because it is needed all over the 
  forest it is delegated.
  
  
  Regards
  Hans
 
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 12:15:29 AM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
  I'm not sure I understand. In DNS admin I see two zones. One for 
  _msdcs.example.com with all the usual _msdcs records and one for 
  example.com which incedentally has an NS record for 
  _msdcs.example.com. The little folder thingy for this


  _msdcs is grey
  
  
  which I guess signifies that it's some kind of link to the


  other zone?
  
  
  So I understand why the _msdcs records other than the one 

  NS record 
  
  are not transferring but I don't understand why the


  structure is split
  
  
  into two zones and if I can/should do something about it.
 
  Mike
 
  On Fri, 1 Dec 2006 11:27:14 -0800
  Akomolafe, Deji [EMAIL PROTECTED] wrote:
 


  Seen this? http://support.microsoft.com/kb/817470
 
 
  Sincerely

Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-05 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

Put duct tape over the top and forget about them.

Seriously...you mess with those (especially the OU stuff)  and you will 
break some wizards in SBS.  Kinda like the Kitchen Sink stuff you 
live with it or if you do mess with 'em, please do so not on a client's 
box and only on your own that only you will touch because if there's one 
thing that will make me take forks out and start stabbing folks is when 
you mess up a clients box. 

Truly... when a SBSer who knows the quirks about SBS comes into a 
network and sees stuff screwed around with, they will 
swingmigration/flatten it and get it back to a known state because it 
costs the client more in the long run when it's not default.  Granted 
that default may not be what big server land considers default... but 
it is what it is.


I'll ping you up with Paula aka Lanwench... the world wide Former 
Enterprisers who hate the quirks of SBS but deal with them anyway is 
starting new chapters daily.


Michael B Allen wrote:

Yeah, but you can just ignore it and it's not the default Users
or Computers containers. Still, is there a safe way to remove
those? Similarly there's a safe way to remove the Default-First-Site-Name
stuff too?

Mike

On Mon, 04 Dec 2006 20:28:42 -0800
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:

  

http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
http://www.sbslinks.com/images/wp5z50vd.gif

Joe?  Deji?  Got some forks?

Laura A. Robinson wrote:


Please tell me that you're making that up. Otherwise I'll have to stab
myself in the eye with a fork. My Business 


Words fail me. :-)

Laura
  
  

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

Sent: Monday, December 04, 2006 9:13 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR

We install the Kitchen Sink service too don't forget  ;-)

(wait until we start talking about the My Business 
OU...that's usually good for another freak out or two)


Laura A. Robinson wrote:


Small point- dcpromo creates those zones as mentioned in 
  
  
the original 


question  *if* you have not configured DNS beforehand, *if* 
  
  
you tell 


dcpromo to go ahead and do it for you, and *if* you're building the 
forest root domain. If you have configured DNS beforehand, how the 
zones get created (as stub zones, as subdomains, etc.) will 
  
  
depend on 


that preconfiguration. If you're not building the forest 
  
  
root domain, 



the subdomain already exists and dcpromo is just populating it.

I bring this up only because there are many companies that have 
existing DNS infrastructures and it's important to know 
  
  
that default 


is not equivalent to mandatory. It is not a requirement that the 
_msdcs zone be either a separate zone or a subdomain in an existing 
zone, whether it's a stub or a full zone, etc.


Of course, since we're talking SBS, all of this goes out the window 
(no pun intended). SBS is its own freaky little animal.


Laura

  
  
  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hans 
Halbmayr

Sent: Monday, December 04, 2006 1:06 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR

Usually dcpromo creates all these zones. Windows creates 


these zones 


in a forest partition. If you have a linux DNS server just create 
another slave zone of _msdcs.example.com.
The gray one is only the delegation. 


Hans


- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


Ok, so basically _msdcs is just a separate zone. Do Windows DNS 
setups usually do this? I'm using SBS.


I have a bind DNS server running on a linux machine with a 


slave zone 


for example.com. The AXFR doesn't have those records 


(aside from the 


NS record). So what you're saying is that I need to setup another 
slave zone for the _msdcs subdomain?


Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr 
[EMAIL PROTECTED] wrote:






Hi Mike,

the gray one is the delegation of the zone. The _msdcs ist
  
  
  
a subdomain of your forest root. Because it is needed all over the 
forest it is delegated.




Regards
Hans

- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


I'm not sure I

Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-05 Thread Michael B Allen
Ok, thanks. It's only a testing machine. I'll leave it alone.

Mike

On Tue, 05 Dec 2006 00:10:56 -0800
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:

 Put duct tape over the top and forget about them.
 
 Seriously...you mess with those (especially the OU stuff)  and you will 
 break some wizards in SBS.  Kinda like the Kitchen Sink stuff you 
 live with it or if you do mess with 'em, please do so not on a client's 
 box and only on your own that only you will touch because if there's one 
 thing that will make me take forks out and start stabbing folks is when 
 you mess up a clients box. 
 
 Truly... when a SBSer who knows the quirks about SBS comes into a 
 network and sees stuff screwed around with, they will 
 swingmigration/flatten it and get it back to a known state because it 
 costs the client more in the long run when it's not default.  Granted 
 that default may not be what big server land considers default... but 
 it is what it is.
 
 I'll ping you up with Paula aka Lanwench... the world wide Former 
 Enterprisers who hate the quirks of SBS but deal with them anyway is 
 starting new chapters daily.
 
 Michael B Allen wrote:
  Yeah, but you can just ignore it and it's not the default Users
  or Computers containers. Still, is there a safe way to remove
  those? Similarly there's a safe way to remove the Default-First-Site-Name
  stuff too?
 
  Mike
 
  On Mon, 04 Dec 2006 20:28:42 -0800
  Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:
 

  http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
  http://www.sbslinks.com/images/wp5z50vd.gif
 
  Joe?  Deji?  Got some forks?
 
  Laura A. Robinson wrote:
  
  Please tell me that you're making that up. Otherwise I'll have to stab
  myself in the eye with a fork. My Business 
 
  Words fail me. :-)
 
  Laura


  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
  Sent: Monday, December 04, 2006 9:13 PM
  To: ActiveDir@mail.activedir.org
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
  We install the Kitchen Sink service too don't forget  ;-)
 
  (wait until we start talking about the My Business 
  OU...that's usually good for another freak out or two)
 
  Laura A. Robinson wrote:
  
  
  Small point- dcpromo creates those zones as mentioned in 


  the original 
  
  
  question  *if* you have not configured DNS beforehand, *if* 


  you tell 
  
  
  dcpromo to go ahead and do it for you, and *if* you're building the 
  forest root domain. If you have configured DNS beforehand, how the 
  zones get created (as stub zones, as subdomains, etc.) will 


  depend on 
  
  
  that preconfiguration. If you're not building the forest 


  root domain, 
  
  
  the subdomain already exists and dcpromo is just populating it.
 
  I bring this up only because there are many companies that have 
  existing DNS infrastructures and it's important to know 


  that default 
  
  
  is not equivalent to mandatory. It is not a requirement that the 
  _msdcs zone be either a separate zone or a subdomain in an existing 
  zone, whether it's a stub or a full zone, etc.
 
  Of course, since we're talking SBS, all of this goes out the window 
  (no pun intended). SBS is its own freaky little animal.
 
  Laura
 



  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Hans 
  Halbmayr
  Sent: Monday, December 04, 2006 1:06 PM
  To: ActiveDir@mail.activedir.org
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
  Usually dcpromo creates all these zones. Windows creates 
  
  
  these zones 
  
  
  in a forest partition. If you have a linux DNS server just create 
  another slave zone of _msdcs.example.com.
  The gray one is only the delegation. 
 
  Hans
 
 
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 5:39:26 PM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
  Ok, so basically _msdcs is just a separate zone. Do Windows DNS 
  setups usually do this? I'm using SBS.
 
  I have a bind DNS server running on a linux machine with a 
  
  
  slave zone 
  
  
  for example.com. The AXFR doesn't have those records 
  
  
  (aside from the 
  
  
  NS record). So what you're saying is that I need to setup another 
  slave zone for the _msdcs subdomain?
 
  Mike
 
  On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr 
  [EMAIL PROTECTED] wrote:
 
  
  
  
  Hi Mike,
 
  the gray one

Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-04 Thread Hans Halbmayr
Usually dcpromo creates all these zones. Windows creates these zones in a 
forest partition. If you have a linux DNS server just create another slave zone 
of _msdcs.example.com. The gray one is only the delegation. 

Hans


- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
usually do this? I'm using SBS.

I have a bind DNS server running on a linux machine with a slave zone
for example.com. The AXFR doesn't have those records (aside from the
NS record). So what you're saying is that I need to setup another slave
zone for the _msdcs subdomain?

Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr [EMAIL PROTECTED] wrote:

 Hi Mike,
 
 the gray one is the delegation of the zone. The _msdcs ist a subdomain of 
 your forest root. Because it is needed all over the forest it is delegated.
 
 Regards
 Hans
 
 - Original Message 
 From: Michael B Allen [EMAIL PROTECTED]
 To: ActiveDir@mail.activedir.org
 Cc: [EMAIL PROTECTED]
 Sent: Saturday, December 2, 2006 12:15:29 AM
 Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
 I'm not sure I understand. In DNS admin I see two zones. One
 for _msdcs.example.com with all the usual _msdcs records and
 one for example.com which incedentally has an NS record for
 _msdcs.example.com. The little folder thingy for this _msdcs is grey
 which I guess signifies that it's some kind of link to the other zone?
 
 So I understand why the _msdcs records other than the one NS record are
 not transferring but I don't understand why the structure is split into
 two zones and if I can/should do something about it.
 
 Mike
 
 On Fri, 1 Dec 2006 11:27:14 -0800
 Akomolafe, Deji [EMAIL PROTECTED] wrote:
 
  Seen this? http://support.microsoft.com/kb/817470
  
  
  Sincerely, 
 _
(, /  |  /)   /) /)   
  /---| (/_  __   ___// _   //  _ 
   ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
  (_/ /)  
 (/   
  Microsoft MVP - Directory Services
  www.akomolafe.com - we know IT
  -5.75, -3.23
  Do you now realize that Today is the Tomorrow you were worried about 
  Yesterday? -anon
  
  
  
  From: Michael B Allen
  Sent: Fri 12/1/2006 9:40 AM
  To: ActiveDir@mail.activedir.org
  Subject: [ActiveDir] _msdcs not propagated in AXFR
  
  
  Does anyone know why the _msdcs records are not returned in an AXFR DNS
  query? This means that slave zones will not have those records and that
  software querying for a domain controller may not find one.
  
  Mike
  
  -- 
  Michael B Allen
  PHP Active Directory SSO
  http://www.ioplex.com/
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
  
 
 
 -- 
 Michael B Allen
 PHP Active Directory SSO
 http://www.ioplex.com/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 
 
  
 
 Do you Yahoo!?
 Everyone is raving about the all-new Yahoo! Mail beta.
 http://new.mail.yahoo.com
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 


-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


 

Need a quick answer? Get one in minutes from people who know.
Ask your question on www.Answers.yahoo.com
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-04 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

(the red flag of SBS brings out you know who)

SBS does the best when it is the DNSer... and when it is the DNSer... it 
does all that you need when it's installed.


SBS does the necessary DNS zones when it's set up to be the main 
cheese of the network. how did you set up this box?


Ask a SBSer what dcpromo is and we go dc-what?.

Our install wizard does that for us... we don't ever use the command 
dcpromo ... unless we are migrating a SBS box into an existing network 
or Swing migratin' from one to another.


Hans Halbmayr wrote:
Usually dcpromo creates all these zones. Windows creates these zones in a forest partition. If you have a linux DNS server just create another slave zone of _msdcs.example.com. The gray one is only the delegation. 


Hans


- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
usually do this? I'm using SBS.

I have a bind DNS server running on a linux machine with a slave zone
for example.com. The AXFR doesn't have those records (aside from the
NS record). So what you're saying is that I need to setup another slave
zone for the _msdcs subdomain?

Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr [EMAIL PROTECTED] wrote:

  

Hi Mike,

the gray one is the delegation of the zone. The _msdcs ist a subdomain of your 
forest root. Because it is needed all over the forest it is delegated.

Regards
Hans

- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of link to the other zone?

So I understand why the _msdcs records other than the one NS record are
not transferring but I don't understand why the structure is split into
two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
Akomolafe, Deji [EMAIL PROTECTED] wrote:



Seen this? http://support.microsoft.com/kb/817470


Sincerely, 
   _
  (, /  |  /)   /) /)   
/---| (/_  __   ___// _   //  _ 
 ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)  
   (/   
Microsoft MVP - Directory Services

www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? 
-anon



From: Michael B Allen
Sent: Fri 12/1/2006 9:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] _msdcs not propagated in AXFR


Does anyone know why the _msdcs records are not returned in an AXFR DNS
query? This means that slave zones will not have those records and that
software querying for a domain controller may not find one.

Mike

--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

  

--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


 


Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/





  


--
Letting your vendors set your risk analysis these days?  
http://www.threatcode.com


If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will 
hunt you down...
http://blogs.technet.com/sbs

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-04 Thread Michael B Allen
I have confirmed that this is indeed the solution and that it works.

For posterity here's what I did.

I enabled Zone transfers under DNS  Forward Lookup Zones 
_msdcs.example.com  Properties  Zone Transfers and tested that from
the Linux machine with:

  $ dig -t AXFR @192.168.1.1

Then I added the following to the Linux named.conf (in addition to the
other slave zone for example.com):

  zone _msdcs.example.com IN {
  type slave;
  file data/slave-_msdcs.example.com;
  masters { 192.168.1.1; };
  };

and restarted named. Then I tested with:

  $ dig -t SRV _ldap.dc._msdcs.example.com

Thanks,
Mike

On Mon, 4 Dec 2006 10:06:10 -0800 (PST)
Hans Halbmayr [EMAIL PROTECTED] wrote:

 Usually dcpromo creates all these zones. Windows creates these zones in a 
 forest partition. If you have a linux DNS server just create another slave 
 zone of _msdcs.example.com. The gray one is only the delegation. 
 
 Hans
 
 
 - Original Message 
 From: Michael B Allen [EMAIL PROTECTED]
 To: ActiveDir@mail.activedir.org
 Cc: [EMAIL PROTECTED]
 Sent: Saturday, December 2, 2006 5:39:26 PM
 Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
 Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
 usually do this? I'm using SBS.
 
 I have a bind DNS server running on a linux machine with a slave zone
 for example.com. The AXFR doesn't have those records (aside from the
 NS record). So what you're saying is that I need to setup another slave
 zone for the _msdcs subdomain?
 
 Mike
 
 On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
 Hans Halbmayr [EMAIL PROTECTED] wrote:
 
  Hi Mike,
  
  the gray one is the delegation of the zone. The _msdcs ist a subdomain of 
  your forest root. Because it is needed all over the forest it is delegated.
  
  Regards
  Hans
  
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 12:15:29 AM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
  
  
  I'm not sure I understand. In DNS admin I see two zones. One
  for _msdcs.example.com with all the usual _msdcs records and
  one for example.com which incedentally has an NS record for
  _msdcs.example.com. The little folder thingy for this _msdcs is grey
  which I guess signifies that it's some kind of link to the other zone?
  
  So I understand why the _msdcs records other than the one NS record are
  not transferring but I don't understand why the structure is split into
  two zones and if I can/should do something about it.
  
  Mike
  
  On Fri, 1 Dec 2006 11:27:14 -0800
  Akomolafe, Deji [EMAIL PROTECTED] wrote:
  
   Seen this? http://support.microsoft.com/kb/817470
   
   
   Sincerely, 
  _
 (, /  |  /)   /) /)   
   /---| (/_  __   ___// _   //  _ 
) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
   (_/ /)  
  (/   
   Microsoft MVP - Directory Services
   www.akomolafe.com - we know IT
   -5.75, -3.23
   Do you now realize that Today is the Tomorrow you were worried about 
   Yesterday? -anon
   
   
   
   From: Michael B Allen
   Sent: Fri 12/1/2006 9:40 AM
   To: ActiveDir@mail.activedir.org
   Subject: [ActiveDir] _msdcs not propagated in AXFR
   
   
   Does anyone know why the _msdcs records are not returned in an AXFR DNS
   query? This means that slave zones will not have those records and that
   software querying for a domain controller may not find one.
   
   Mike
   
   -- 
   Michael B Allen
   PHP Active Directory SSO
   http://www.ioplex.com/
   List info   : http://www.activedir.org/List.aspx
   List FAQ: http://www.activedir.org/ListFAQ.aspx
   List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
   
  
  
  -- 
  Michael B Allen
  PHP Active Directory SSO
  http://www.ioplex.com/
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
  
  
   
  
  Do you Yahoo!?
  Everyone is raving about the all-new Yahoo! Mail beta.
  http://new.mail.yahoo.com
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
  
 
 
 -- 
 Michael B Allen
 PHP Active Directory SSO
 http://www.ioplex.com/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 
 
  
 
 Need a quick answer? Get one in minutes from people who know.
 Ask your question on www.Answers.yahoo.com
 List info   : http://www.activedir.org

Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-04 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

We install the Kitchen Sink service too don't forget  ;-)

(wait until we start talking about the My Business OU...that's usually 
good for another freak out or two)


Laura A. Robinson wrote:

Small point- dcpromo creates those zones as mentioned in the original
question  *if* you have not configured DNS beforehand, *if* you tell dcpromo
to go ahead and do it for you, and *if* you're building the forest root
domain. If you have configured DNS beforehand, how the zones get created (as
stub zones, as subdomains, etc.) will depend on that preconfiguration. If
you're not building the forest root domain, the subdomain already exists and
dcpromo is just populating it.

I bring this up only because there are many companies that have existing DNS
infrastructures and it's important to know that default is not equivalent
to mandatory. It is not a requirement that the _msdcs zone be either a
separate zone or a subdomain in an existing zone, whether it's a stub or a
full zone, etc.

Of course, since we're talking SBS, all of this goes out the window (no pun
intended). SBS is its own freaky little animal.

Laura

  

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Hans Halbmayr

Sent: Monday, December 04, 2006 1:06 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR

Usually dcpromo creates all these zones. Windows creates 
these zones in a forest partition. If you have a linux DNS 
server just create another slave zone of _msdcs.example.com. 
The gray one is only the delegation. 


Hans


- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


Ok, so basically _msdcs is just a separate zone. Do Windows 
DNS setups usually do this? I'm using SBS.


I have a bind DNS server running on a linux machine with a 
slave zone for example.com. The AXFR doesn't have those 
records (aside from the NS record). So what you're saying is 
that I need to setup another slave zone for the _msdcs subdomain?


Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr [EMAIL PROTECTED] wrote:



Hi Mike,

the gray one is the delegation of the zone. The _msdcs ist 
  
a subdomain of your forest root. Because it is needed all 
over the forest it is delegated.


Regards
Hans

- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


I'm not sure I understand. In DNS admin I see two zones. One for 
_msdcs.example.com with all the usual _msdcs records and one for 
example.com which incedentally has an NS record for 
_msdcs.example.com. The little folder thingy for this 
  
_msdcs is grey 

which I guess signifies that it's some kind of link to the 
  

other zone?

So I understand why the _msdcs records other than the one NS record 
are not transferring but I don't understand why the 
  
structure is split 


into two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
Akomolafe, Deji [EMAIL PROTECTED] wrote:

  

Seen this? http://support.microsoft.com/kb/817470


Sincerely, 
   _
  (, /  |  /)   /) /)   
/---| (/_  __   ___// _   //  _ 
 ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)  
   (/   
Microsoft MVP - Directory Services

www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were 

worried about 


Yesterday? -anon



From: Michael B Allen
Sent: Fri 12/1/2006 9:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] _msdcs not propagated in AXFR


Does anyone know why the _msdcs records are not returned 

in an AXFR 

DNS query? This means that slave zones will not have 

those records 

and that software querying for a domain controller may 


not find one.


Mike

--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: 
http://www.mail-archive.com/activedir@mail.activedir.org/




--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: 
http://www.mail-archive.com/activedir@mail.activedir.org/



 

  

__


__
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
List info   : http://www.activedir.org/List.aspx
List FAQ: http

RE: [ActiveDir] _msdcs not propagated in AXFR

2006-12-04 Thread Laura A. Robinson
Please tell me that you're making that up. Otherwise I'll have to stab
myself in the eye with a fork. My Business 

Words fail me. :-)

Laura
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
 Sent: Monday, December 04, 2006 9:13 PM
 To: ActiveDir@mail.activedir.org
 Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 We install the Kitchen Sink service too don't forget  ;-)
 
 (wait until we start talking about the My Business 
 OU...that's usually good for another freak out or two)
 
 Laura A. Robinson wrote:
  Small point- dcpromo creates those zones as mentioned in 
 the original 
  question  *if* you have not configured DNS beforehand, *if* 
 you tell 
  dcpromo to go ahead and do it for you, and *if* you're building the 
  forest root domain. If you have configured DNS beforehand, how the 
  zones get created (as stub zones, as subdomains, etc.) will 
 depend on 
  that preconfiguration. If you're not building the forest 
 root domain, 
  the subdomain already exists and dcpromo is just populating it.
 
  I bring this up only because there are many companies that have 
  existing DNS infrastructures and it's important to know 
 that default 
  is not equivalent to mandatory. It is not a requirement that the 
  _msdcs zone be either a separate zone or a subdomain in an existing 
  zone, whether it's a stub or a full zone, etc.
 
  Of course, since we're talking SBS, all of this goes out the window 
  (no pun intended). SBS is its own freaky little animal.
 
  Laura
 

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Hans 
  Halbmayr
  Sent: Monday, December 04, 2006 1:06 PM
  To: ActiveDir@mail.activedir.org
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
  Usually dcpromo creates all these zones. Windows creates 
 these zones 
  in a forest partition. If you have a linux DNS server just create 
  another slave zone of _msdcs.example.com.
  The gray one is only the delegation. 
 
  Hans
 
 
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 5:39:26 PM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
  Ok, so basically _msdcs is just a separate zone. Do Windows DNS 
  setups usually do this? I'm using SBS.
 
  I have a bind DNS server running on a linux machine with a 
 slave zone 
  for example.com. The AXFR doesn't have those records 
 (aside from the 
  NS record). So what you're saying is that I need to setup another 
  slave zone for the _msdcs subdomain?
 
  Mike
 
  On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr 
  [EMAIL PROTECTED] wrote:
 
  
  Hi Mike,
 
  the gray one is the delegation of the zone. The _msdcs ist

  a subdomain of your forest root. Because it is needed all over the 
  forest it is delegated.
  
  Regards
  Hans
 
  - Original Message 
  From: Michael B Allen [EMAIL PROTECTED]
  To: ActiveDir@mail.activedir.org
  Cc: [EMAIL PROTECTED]
  Sent: Saturday, December 2, 2006 12:15:29 AM
  Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
  I'm not sure I understand. In DNS admin I see two zones. One for 
  _msdcs.example.com with all the usual _msdcs records and one for 
  example.com which incedentally has an NS record for 
  _msdcs.example.com. The little folder thingy for this

  _msdcs is grey
  
  which I guess signifies that it's some kind of link to the

  other zone?
  
  So I understand why the _msdcs records other than the one 
 NS record 
  are not transferring but I don't understand why the

  structure is split
  
  into two zones and if I can/should do something about it.
 
  Mike
 
  On Fri, 1 Dec 2006 11:27:14 -0800
  Akomolafe, Deji [EMAIL PROTECTED] wrote:
 

  Seen this? http://support.microsoft.com/kb/817470
 
 
  Sincerely, 
 _
(, /  |  /)   /) /)   
  /---| (/_  __   ___// _   //  _ 
   ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
  (_/ /)  
 (/   
  Microsoft MVP - Directory Services
  www.akomolafe.com - we know IT
  -5.75, -3.23
  Do you now realize that Today is the Tomorrow you were
  
  worried about
  
  Yesterday? -anon
 
 
 
  From: Michael B Allen
  Sent: Fri 12/1/2006 9:40 AM
  To: ActiveDir@mail.activedir.org
  Subject: [ActiveDir] _msdcs not propagated in AXFR
 
 
  Does anyone know why the _msdcs records are not returned
  
  in an AXFR
  
  DNS query? This means that slave zones will not have
  
  those records
  
  and that software querying for a domain controller may
  
  not find one.
  
  Mike
 
  --
  Michael B Allen
  PHP Active Directory SSO
  http://www.ioplex.com/
  List info   : http

Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-02 Thread Hans Halbmayr
Hi Mike,

the gray one is the delegation of the zone. The _msdcs ist a subdomain of your 
forest root. Because it is needed all over the forest it is delegated.

Regards
Hans

- Original Message 
From: Michael B Allen [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR


I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of link to the other zone?

So I understand why the _msdcs records other than the one NS record are
not transferring but I don't understand why the structure is split into
two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
Akomolafe, Deji [EMAIL PROTECTED] wrote:

 Seen this? http://support.microsoft.com/kb/817470
 
 
 Sincerely, 
_
   (, /  |  /)   /) /)   
 /---| (/_  __   ___// _   //  _ 
  ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
 (_/ /)  
(/   
 Microsoft MVP - Directory Services
 www.akomolafe.com - we know IT
 -5.75, -3.23
 Do you now realize that Today is the Tomorrow you were worried about 
 Yesterday? -anon
 
 
 
 From: Michael B Allen
 Sent: Fri 12/1/2006 9:40 AM
 To: ActiveDir@mail.activedir.org
 Subject: [ActiveDir] _msdcs not propagated in AXFR
 
 
 Does anyone know why the _msdcs records are not returned in an AXFR DNS
 query? This means that slave zones will not have those records and that
 software querying for a domain controller may not find one.
 
 Mike
 
 -- 
 Michael B Allen
 PHP Active Directory SSO
 http://www.ioplex.com/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 


-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


 

Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-02 Thread Michael B Allen
Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
usually do this? I'm using SBS.

I have a bind DNS server running on a linux machine with a slave zone
for example.com. The AXFR doesn't have those records (aside from the
NS record). So what you're saying is that I need to setup another slave
zone for the _msdcs subdomain?

Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr [EMAIL PROTECTED] wrote:

 Hi Mike,
 
 the gray one is the delegation of the zone. The _msdcs ist a subdomain of 
 your forest root. Because it is needed all over the forest it is delegated.
 
 Regards
 Hans
 
 - Original Message 
 From: Michael B Allen [EMAIL PROTECTED]
 To: ActiveDir@mail.activedir.org
 Cc: [EMAIL PROTECTED]
 Sent: Saturday, December 2, 2006 12:15:29 AM
 Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
 
 
 I'm not sure I understand. In DNS admin I see two zones. One
 for _msdcs.example.com with all the usual _msdcs records and
 one for example.com which incedentally has an NS record for
 _msdcs.example.com. The little folder thingy for this _msdcs is grey
 which I guess signifies that it's some kind of link to the other zone?
 
 So I understand why the _msdcs records other than the one NS record are
 not transferring but I don't understand why the structure is split into
 two zones and if I can/should do something about it.
 
 Mike
 
 On Fri, 1 Dec 2006 11:27:14 -0800
 Akomolafe, Deji [EMAIL PROTECTED] wrote:
 
  Seen this? http://support.microsoft.com/kb/817470
  
  
  Sincerely, 
 _
(, /  |  /)   /) /)   
  /---| (/_  __   ___// _   //  _ 
   ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
  (_/ /)  
 (/   
  Microsoft MVP - Directory Services
  www.akomolafe.com - we know IT
  -5.75, -3.23
  Do you now realize that Today is the Tomorrow you were worried about 
  Yesterday? -anon
  
  
  
  From: Michael B Allen
  Sent: Fri 12/1/2006 9:40 AM
  To: ActiveDir@mail.activedir.org
  Subject: [ActiveDir] _msdcs not propagated in AXFR
  
  
  Does anyone know why the _msdcs records are not returned in an AXFR DNS
  query? This means that slave zones will not have those records and that
  software querying for a domain controller may not find one.
  
  Mike
  
  -- 
  Michael B Allen
  PHP Active Directory SSO
  http://www.ioplex.com/
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
  
 
 
 -- 
 Michael B Allen
 PHP Active Directory SSO
 http://www.ioplex.com/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 
 
  
 
 Do you Yahoo!?
 Everyone is raving about the all-new Yahoo! Mail beta.
 http://new.mail.yahoo.com
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 


-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


RE: [ActiveDir] _msdcs not propagated in AXFR

2006-12-01 Thread Akomolafe, Deji
Seen this? http://support.microsoft.com/kb/817470


Sincerely, 
   _
  (, /  |  /)   /) /)   
/---| (/_  __   ___// _   //  _ 
 ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)  
   (/   
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? 
-anon



From: Michael B Allen
Sent: Fri 12/1/2006 9:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] _msdcs not propagated in AXFR


Does anyone know why the _msdcs records are not returned in an AXFR DNS
query? This means that slave zones will not have those records and that
software querying for a domain controller may not find one.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] _msdcs not propagated in AXFR

2006-12-01 Thread Michael B Allen
I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of link to the other zone?

So I understand why the _msdcs records other than the one NS record are
not transferring but I don't understand why the structure is split into
two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
Akomolafe, Deji [EMAIL PROTECTED] wrote:

 Seen this? http://support.microsoft.com/kb/817470
 
 
 Sincerely, 
_
   (, /  |  /)   /) /)   
 /---| (/_  __   ___// _   //  _ 
  ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
 (_/ /)  
(/   
 Microsoft MVP - Directory Services
 www.akomolafe.com - we know IT
 -5.75, -3.23
 Do you now realize that Today is the Tomorrow you were worried about 
 Yesterday? -anon
 
 
 
 From: Michael B Allen
 Sent: Fri 12/1/2006 9:40 AM
 To: ActiveDir@mail.activedir.org
 Subject: [ActiveDir] _msdcs not propagated in AXFR
 
 
 Does anyone know why the _msdcs records are not returned in an AXFR DNS
 query? This means that slave zones will not have those records and that
 software querying for a domain controller may not find one.
 
 Mike
 
 -- 
 Michael B Allen
 PHP Active Directory SSO
 http://www.ioplex.com/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
 


-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/