RE: AD Organizational Units

2001-08-31 Thread David Strome
Heh...you don't...not automatically I don't think. Unless you have roaming profiles. Not sure how that works though. There is something called the User State Migration Tool somewhere. While I haven't used it, I believe you can run that on a machine, capture their profile, do your stuff, then rest

RE: AD Organizational Units

2001-08-31 Thread Anthony L. Sollars
Hmmm, just ran across this problem. How do you get the ADMT to mirgrate the users profile when migrating? -Original Message- From: David Strome [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 2:42 PM To: NT 2000 Discussions Subject: RE: AD Organizational Units Ya...it really

RE: AD Organizational Units

2001-08-31 Thread David Strome
Ya...it really depends on what you want to do...just because the features are there doesn't mean they'll help you...they might even make your life more difficult...especially in a 35user company. It's a zen thing. -Original Message- From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]] Se

RE: AD Organizational Units

2001-08-31 Thread Anthony L. Sollars
Thanks David, that just took all that information I read and put it into a nice perspective. Thanks. -TOny -Original Message- From: David Strome [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 2:30 PM To: NT 2000 Discussions Subject: RE: AD Organizational Units It all depends

RE: AD Organizational Units

2001-08-31 Thread David Strome
It all depends on your organisation and what you want to do. Study how GPOs work as well as delegation of authority. -Original Message- From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 2:26 PM To: NT 2000 Discussions Subject: RE: AD Organizational Units

RE: AD Organizational Units

2001-08-31 Thread David Strome
Well...you create OUs really for a few reasons...make it easier to manage, create GPOs, delegate authority. There are more reasons but you get the idea. Just moving a DC to another OU doesn't do a thing if there are no GPOs. But watch out if you have configured GPOs because as soon as you place a

RE: AD Organizational Units

2001-08-31 Thread Anthony L. Sollars
Is it common place to put user, computer and group accounts into the same OU, or is it better to create a specific OU for computer Accounts. What are the Pros & Cons to this? I can think of a few but I am leaning towards lumping them into their one respective OU. -TOny -Original Message

RE: AD Organizational Units

2001-08-31 Thread Anthony L. Sollars
Well that's just it, I am not totally sure what it will have an effect on. But, the positive side is we are only a 35 user company and I am rebuilding the domain from scratch, so their shouldn't be any hangups. Our new AD domain has nobody in it yet, I am getting the OU structure in place before t

RE: AD Organizational Units

2001-08-31 Thread David Strome
Do whatever you like, as long as you understand what effect the moves will have on resources and objects. Don't move something somewhere just for the sake of moving something. David. -Original Message- From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 2:

AD Organizational Units

2001-08-31 Thread Anthony L. Sollars
I have created our companies OU structure, but I am wondering if it's a good idea to move the global groups like domain users, domain controllers, domain admins and domain computers into my OU structure from the Builtin OU, "USERS", that was created by the system. Thanks for any input.

RE: filtering users by attribute in Active Directory

2001-08-31 Thread Evans Chris - cevans
Here are 2 VB scripts that will list all diabled accounts. Hope this helps. --- Script 1 --- Dim Domain Dim DomainName Dim UserAccount Dim Counter Counter = 0 DomainNa

filtering users by attribute in Active Directory

2001-08-31 Thread Chris
Hi everyone! I've read the following in Technet about using LDAP queries in advanced filters to display only users matching certain criteria. What I want to do is display all accounts that are currently disabled. Technet : "In advanced filters, you can use matching rules to implement search flag

RE: Win2K Home Folders Not Mapping...

2001-08-31 Thread Andrew Baker
Only Win2K systems and above can map to deep directories. http://www.ultratech-llc.com/KB/?File=MapDrive.TXT - ASB -Original Message- From: WinNT/2000 Discussion [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 29, 2001 7:40 PM To: NT 2000 Discussions Subject: Win2K Home Folders

RE: 2 mail servers primary and secondary using the DNS Manager

2001-08-31 Thread Scott.Wiseman
thanks... I wasn't sure... regards, Scott -Original Message- From: Kevin Miller [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 30, 2001 9:14 PM To: NT 2000 Discussions Subject: RE: 2 mail servers primary and secondary using the DNS Manager You set a value on it. From 1-100.. The s

RE: Win2K Home Folders Not Mapping...

2001-08-31 Thread WinNT/2000 Discussion
what software is needed to use the win98 machines?? What if DFS is not being used?? Rob Jones, Developer Lightspeed Systems www.lightspeedsystems.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 30, 2001 11:10 AM To: NT 2000 Discu

RE: AD Migration BestPractices

2001-08-31 Thread Anthony L. Sollars
Sorry guys, sent that one out by accident. Yes I got your message David, thank you for the input. I just finished rolling through a complete test migration of a client and server with full success. Now I am ready to document the whole process then test my roll back recovery. Back to the Grind

Has anybody try IIS Lockdown Tool from microsoft

2001-08-31 Thread Juan Rosas
I am trying to find more information about the IIS lock Down tool; I want to know if there is any problems or any reason why not to use this tool. Thank you. -- You are subscribed as archive@jab.org Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EM

RE: AD Migration BestPractices

2001-08-31 Thread David Strome
Are you asking this again or is this just the list being glitchy? This was already answered in detail yesterday. -Original Message- From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 10:35 AM To: NT 2000 Discussions Subject: AD Migration BestPractices

RE: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread Ed Esgro
Yep, just install the connector on the server in the DMZ. Yeah, you would have to be crazy to have anything besides a firewall sitting on a valid IP. -Original Message- From: Greg Saunders [mailto:[EMAIL PROTECTED]] Sent: Friday, August 31, 2001 11:57 AM To: NT 2000 Discussions Subject:

AD Migration BestPractices

2001-08-31 Thread Anthony L. Sollars
I have one Question along this same subject. I setup a fresh win2k AD domain, and am testing the migration process right now using the AD Migration tool. Is their a process I should follow as far as moving client user & computer accounts over first, or should I move our member resource

RE: Profiles ARGHHH - Help please

2001-08-31 Thread Jeffrey Kessler
Look at group policy. Computer configuration, System, Logon, and enable "Add the Administrator security group to the roaming user profile share". Jeffrey Kessler MCSE MCP+I Technology Coordinator Newport (NH) School District 603-863-2414 ext 1116 [EMAIL PROTECTED] > -Original Message

RE: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread Byron Kennedy
the host on the DMZ may or may not have public IP and therefore nat is not required on the DMZ. Using NAT on the DMZ will however (arguably) add a level a security. I've done it both ways. The internal exchange host forwards all e-mail to the public ip address of the relay on the DMZ who then u

RE: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread Greg Saunders
The DMZ holds valid internet IP addresses and the firewall does use NAT between our internal Exchange server and our SMTP server. For example our DMZ has our external web servers. By being in the DMZ we can have the firewall block everything except for HTTP, HTTPS, FTP, and another other ports w

My apologies for the OOAR's

2001-08-31 Thread Phil Labonte
Apparently I caused some agitation with my reply to Eric. I want to be clear so that everyone knows. I apologies for my reply and I will not be sending anymore OOAR to the list. Once again, I apologize. Phil Labonte -- You are subscribed as archive@jab.org Archives: http://www.swynk.com/s

Copying user accounts in AD

2001-08-31 Thread Minero Hector B DLVA
Hi all, I've got an easy one: In NT 4.0 when I copied user accounts, the following fields were also copied: Decription Terminal Server Profile Terminal Services Timeouts Now in Active Directory, none of these are copied. Is there a way to do it, automatically?

RE: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread Ed Esgro
I dont know I have my exchange connector on my dmz and my email servers on my internal LAN. I never had a problem in 2 years. But what ever makes you guys all warm and fuzzy inside. How could you have your SMTP server in a DMZ and not use NAT? Isn't the idea of a DMZ to not have a valid IP address

Re: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread [EMAIL PROTECTED]
Exactly because of these security issue... Using this no NAT is needed and there is no exposure of LAN resources... Thanks again... you are the greatest ! Laercio Santos Jr - Original Message - From: "Greg Saunders" <[EMAIL PROTECTED]> To: "NT 2000

Re: smtp;554 5.6.1 Body type not supported by Remote Host

2001-08-31 Thread [EMAIL PROTECTED]
It is working before this process was complete From Technet: How to Disable 8BITMIME in Windows 2000 SMTP Service [Q262168] Thanks ! Laercio Santos Jr - Original Message - From: "Martin Blackstone" <[EMAIL PROTECTED]

RE: app. management gpo

2001-08-31 Thread Lich, Brian M.
You can find this by going to control panel=>administrative tools=> local security policy (you wanna do this on the computer that has the MSI file) Expand Local Policies=>User Rights Assignment I believe access this computer from the network is the first or second entry. Double click on this an

RE: DNS Domain Name

2001-08-31 Thread Robert VadeBonCoeur
I'm curious now, what disadvantage is there if they login with the netbios name rather than the ad name? Robert > Now, log in, but when at the username/password/domain box, type in > [EMAIL PROTECTED] for the username, and the normal password. You'll notice > the domain box go grey. Click OK and

RE: AD mixed domain and NT4 BDC

2001-08-31 Thread Kalligonis, Tim
Read this article. http://support.microsoft.com/support/kb/articles/q242/4/32.asp Article ID: Q242432 I have rolled back from W2K to NT4 in our test lab to try it before we put it in production. It works fine, only problem is W2K clients stop working on the domain. Once W2k clients authentic

RE: app. management gpo

2001-08-31 Thread Filipe Joel de Almeida
where do I check that? Filipe Joel de Almeida Novabase Saúde [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Lich, Brian M. Sent: quinta-feira, 30 de Agosto de 2001 16:14 To: NT 2000 Discussions Subject: RE: app. management gpo Does

RE: app. management gpo

2001-08-31 Thread Filipe Joel de Almeida
manual msi instalations runs perfectly Filipe Joel de Almeida Novabase Saúde [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Esgro Sent: quinta-feira, 30 de Agosto de 2001 16:21 To: NT 2000 Discussions Subject: RE: app. management g