Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Subject: [ActiveDir] _msdcs not propagated in AXFR
Prev Next
You are not authorized to post a reply.

AuthorMessages
AD000001730User is Offline

Posts:0

12/01/2006 12:40 PM  
Does anyone know why the _msdcs records are not returned in an AXFR DNS
query? This means that slave zones will not have those records and that
software querying for a domain controller may not find one.

Mike

--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
dejiUser is Offline

Posts:140

12/01/2006 2:27 AM  
Seen this? http://support.microsoft.com/kb/817470

Sincerely, _____ (, / | /) /) /) /---| (/_ ______ ___// _ // _ ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: Michael B AllenSent: Fri 12/1/2006 9:40 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] _msdcs not propagated in AXFR
Does anyone know why the _msdcs records are not returned in an AXFR DNS
query? This means that slave zones will not have those records and that
software querying for a domain controller may not find one.

Mike

--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD000001730User is Offline

Posts:0

12/01/2006 6:15 AM  
I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of link to the other zone?

So I understand why the _msdcs records other than the one NS record are
not transferring but I don't understand why the structure is split into
two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
"Akomolafe, Deji" wrote:

> Seen this? http://support.microsoft.com/kb/817470
>
>
> Sincerely,
> _____
> (, / | /) /) /)
> /---| (/_ ______ ___// _ // _
> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
> (/
> Microsoft MVP - Directory Services
> www.akomolafe.com - we know IT
> -5.75, -3.23
> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
>
>
>
> From: Michael B Allen
> Sent: Fri 12/1/2006 9:40 AM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] _msdcs not propagated in AXFR
>
>
> Does anyone know why the _msdcs records are not returned in an AXFR DNS
> query? This means that slave zones will not have those records and that
> software querying for a domain controller may not find one.
>
> Mike
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD00000910User is Offline

Posts:0

12/02/2006 6:02 AM  
Hi Mike,

the gray one is the delegation of the zone. The _msdcs ist a subdomain of your forest root. Because it is needed all over the forest it is delegated.

Regards
Hans

----- Original Message ----
From: Michael B Allen
To: ActiveDir@mail.activedir.org
Cc: deji@readymaids.com
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of link to the other zone?

So I understand why the _msdcs records other than the one NS record are
not transferring but I don't understand why the structure is split into
two zones and if I can/should do something about it.

Mike

On Fri, 1 Dec 2006 11:27:14 -0800
"Akomolafe, Deji" wrote:

> Seen this? http://support.microsoft.com/kb/817470
>
>
> Sincerely,
> _____
> (, / | /) /) /)
> /---| (/_ ______ ___// _ // _
> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
> (/
> Microsoft MVP - Directory Services
> www.akomolafe.com - we know IT
> -5.75, -3.23
> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
>
>
>
> From: Michael B Allen
> Sent: Fri 12/1/2006 9:40 AM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] _msdcs not propagated in AXFR
>
>
> Does anyone know why the _msdcs records are not returned in an AXFR DNS
> query? This means that slave zones will not have those records and that
> software querying for a domain controller may not find one.
>
> Mike
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

____________________________________________________________________________________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD000001730User is Offline

Posts:0

12/02/2006 11:39 AM  
Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
usually do this? I'm using SBS.

I have a bind DNS server running on a linux machine with a slave zone
for example.com. The AXFR doesn't have those records (aside from the
NS record). So what you're saying is that I need to setup another slave
zone for the _msdcs subdomain?

Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr wrote:

> Hi Mike,
>
> the gray one is the delegation of the zone. The _msdcs ist a subdomain of your forest root. Because it is needed all over the forest it is delegated.
>
> Regards
> Hans
>
> ----- Original Message ----
> From: Michael B Allen
> To: ActiveDir@mail.activedir.org
> Cc: deji@readymaids.com
> Sent: Saturday, December 2, 2006 12:15:29 AM
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
>
> I'm not sure I understand. In DNS admin I see two zones. One
> for _msdcs.example.com with all the usual _msdcs records and
> one for example.com which incedentally has an NS record for
> _msdcs.example.com. The little folder thingy for this _msdcs is grey
> which I guess signifies that it's some kind of link to the other zone?
>
> So I understand why the _msdcs records other than the one NS record are
> not transferring but I don't understand why the structure is split into
> two zones and if I can/should do something about it.
>
> Mike
>
> On Fri, 1 Dec 2006 11:27:14 -0800
> "Akomolafe, Deji" wrote:
>
> > Seen this? http://support.microsoft.com/kb/817470
> >
> >
> > Sincerely,
> > _____
> > (, / | /) /) /)
> > /---| (/_ ______ ___// _ // _
> > ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> > (_/ /)
> > (/
> > Microsoft MVP - Directory Services
> > www.akomolafe.com - we know IT
> > -5.75, -3.23
> > Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
> >
> >
> >
> > From: Michael B Allen
> > Sent: Fri 12/1/2006 9:40 AM
> > To: ActiveDir@mail.activedir.org
> > Subject: [ActiveDir] _msdcs not propagated in AXFR
> >
> >
> > Does anyone know why the _msdcs records are not returned in an AXFR DNS
> > query? This means that slave zones will not have those records and that
> > software querying for a domain controller may not find one.
> >
> > Mike
> >
> > --
> > Michael B Allen
> > PHP Active Directory SSO
> > http://www.ioplex.com/
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> >
>
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
>
>
> ____________________________________________________________________________________
> Do you Yahoo!?
> Everyone is raving about the all-new Yahoo! Mail beta.
> http://new.mail.yahoo.com
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD00000910User is Offline

Posts:0

12/04/2006 1:06 AM  
Usually dcpromo creates all these zones. Windows creates these zones in a forest partition. If you have a linux DNS server just create another slave zone of _msdcs.example.com. The gray one is only the delegation.

Hans
----- Original Message ----
From: Michael B Allen
To: ActiveDir@mail.activedir.org
Cc: halbmayr@yahoo.com
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
usually do this? I'm using SBS.

I have a bind DNS server running on a linux machine with a slave zone
for example.com. The AXFR doesn't have those records (aside from the
NS record). So what you're saying is that I need to setup another slave
zone for the _msdcs subdomain?

Mike

On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr wrote:

> Hi Mike,
>
> the gray one is the delegation of the zone. The _msdcs ist a subdomain of your forest root. Because it is needed all over the forest it is delegated.
>
> Regards
> Hans
>
> ----- Original Message ----
> From: Michael B Allen
> To: ActiveDir@mail.activedir.org
> Cc: deji@readymaids.com
> Sent: Saturday, December 2, 2006 12:15:29 AM
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
>
> I'm not sure I understand. In DNS admin I see two zones. One
> for _msdcs.example.com with all the usual _msdcs records and
> one for example.com which incedentally has an NS record for
> _msdcs.example.com. The little folder thingy for this _msdcs is grey
> which I guess signifies that it's some kind of link to the other zone?
>
> So I understand why the _msdcs records other than the one NS record are
> not transferring but I don't understand why the structure is split into
> two zones and if I can/should do something about it.
>
> Mike
>
> On Fri, 1 Dec 2006 11:27:14 -0800
> "Akomolafe, Deji" wrote:
>
> > Seen this? http://support.microsoft.com/kb/817470
> >
> >
> > Sincerely,
> > _____
> > (, / | /) /) /)
> > /---| (/_ ______ ___// _ // _
> > ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> > (_/ /)
> > (/
> > Microsoft MVP - Directory Services
> > www.akomolafe.com - we know IT
> > -5.75, -3.23
> > Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
> >
> >
> >
> > From: Michael B Allen
> > Sent: Fri 12/1/2006 9:40 AM
> > To: ActiveDir@mail.activedir.org
> > Subject: [ActiveDir] _msdcs not propagated in AXFR
> >
> >
> > Does anyone know why the _msdcs records are not returned in an AXFR DNS
> > query? This means that slave zones will not have those records and that
> > software querying for a domain controller may not find one.
> >
> > Mike
> >
> > --
> > Michael B Allen
> > PHP Active Directory SSO
> > http://www.ioplex.com/
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> >
>
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
>
>
> ____________________________________________________________________________________
> Do you Yahoo!?
> Everyone is raving about the all-new Yahoo! Mail beta.
> http://new.mail.yahoo.com
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

____________________________________________________________________________________
Need a quick answer? Get one in minutes from people who know.
Ask your question on www.Answers.yahoo.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
sbradcpaUser is Offline

Posts:317

12/04/2006 1:36 AM  
(the red flag of SBS brings out you know who)

SBS does the best when it is the DNSer... and when it is the DNSer... it
does all that you need when it's installed.

"SBS" does the necessary DNS zones when it's set up to be the main
cheese of the network..... how did you set up this box?

Ask a SBSer what dcpromo is and we go "dc-what?".

Our install wizard does that for us... we don't ever use the command
dcpromo ... unless we are migrating a SBS box "into" an existing network
or Swing migratin' from one to another.

Hans Halbmayr wrote:
> Usually dcpromo creates all these zones. Windows creates these zones in a forest partition. If you have a linux DNS server just create another slave zone of _msdcs.example.com. The gray one is only the delegation.
>
> Hans
>
>
> ----- Original Message ----
> From: Michael B Allen
> To: ActiveDir@mail.activedir.org
> Cc: halbmayr@yahoo.com
> Sent: Saturday, December 2, 2006 5:39:26 PM
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
>
> Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
> usually do this? I'm using SBS.
>
> I have a bind DNS server running on a linux machine with a slave zone
> for example.com. The AXFR doesn't have those records (aside from the
> NS record). So what you're saying is that I need to setup another slave
> zone for the _msdcs subdomain?
>
> Mike
>
> On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
> Hans Halbmayr wrote:
>
>
>> Hi Mike,
>>
>> the gray one is the delegation of the zone. The _msdcs ist a subdomain of your forest root. Because it is needed all over the forest it is delegated.
>>
>> Regards
>> Hans
>>
>> ----- Original Message ----
>> From: Michael B Allen
>> To: ActiveDir@mail.activedir.org
>> Cc: deji@readymaids.com
>> Sent: Saturday, December 2, 2006 12:15:29 AM
>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>
>>
>> I'm not sure I understand. In DNS admin I see two zones. One
>> for _msdcs.example.com with all the usual _msdcs records and
>> one for example.com which incedentally has an NS record for
>> _msdcs.example.com. The little folder thingy for this _msdcs is grey
>> which I guess signifies that it's some kind of link to the other zone?
>>
>> So I understand why the _msdcs records other than the one NS record are
>> not transferring but I don't understand why the structure is split into
>> two zones and if I can/should do something about it.
>>
>> Mike
>>
>> On Fri, 1 Dec 2006 11:27:14 -0800
>> "Akomolafe, Deji" wrote:
>>
>>
>>> Seen this? http://support.microsoft.com/kb/817470
>>>
>>>
>>> Sincerely,
>>> _____
>>> (, / | /) /) /)
>>> /---| (/_ ______ ___// _ // _
>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
>>> (_/ /)
>>> (/
>>> Microsoft MVP - Directory Services
>>> www.akomolafe.com - we know IT
>>> -5.75, -3.23
>>> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
>>>
>>>
>>>
>>> From: Michael B Allen
>>> Sent: Fri 12/1/2006 9:40 AM
>>> To: ActiveDir@mail.activedir.org
>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
>>>
>>>
>>> Does anyone know why the _msdcs records are not returned in an AXFR DNS
>>> query? This means that slave zones will not have those records and that
>>> software querying for a domain controller may not find one.
>>>
>>> Mike
>>>
>>> --
>>> Michael B Allen
>>> PHP Active Directory SSO
>>> http://www.ioplex.com/
>>> List info : http://www.activedir.org/List.aspx
>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>>>
>>>
>> --
>> Michael B Allen
>> PHP Active Directory SSO
>> http://www.ioplex.com/
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>>
>>
>> ____________________________________________________________________________________
>> Do you Yahoo!?
>> Everyone is raving about the all-new Yahoo! Mail beta.
>> http://new.mail.yahoo.com
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>>
>
>
>

--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com

If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will hunt you down...
http://blogs.technet.com/sbs

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD000001730User is Offline

Posts:0

12/04/2006 4:57 AM  
I have confirmed that this is indeed the solution and that it works.

For posterity here's what I did.

I enabled Zone transfers under DNS > Forward Lookup Zones >
_msdcs.example.com > Properties > Zone Transfers and tested that from
the Linux machine with:

$ dig -t AXFR @192.168.1.1

Then I added the following to the Linux named.conf (in addition to the
other slave zone for example.com):

zone "_msdcs.example.com" IN {
type slave;
file "data/slave-_msdcs.example.com";
masters { 192.168.1.1; };
};

and restarted named. Then I tested with:

$ dig -t SRV _ldap.dc._msdcs.example.com

Thanks,
Mike

On Mon, 4 Dec 2006 10:06:10 -0800 (PST)
Hans Halbmayr wrote:

> Usually dcpromo creates all these zones. Windows creates these zones in a forest partition. If you have a linux DNS server just create another slave zone of _msdcs.example.com. The gray one is only the delegation.
>
> Hans
>
>
> ----- Original Message ----
> From: Michael B Allen
> To: ActiveDir@mail.activedir.org
> Cc: halbmayr@yahoo.com
> Sent: Saturday, December 2, 2006 5:39:26 PM
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
>
> Ok, so basically _msdcs is just a separate zone. Do Windows DNS setups
> usually do this? I'm using SBS.
>
> I have a bind DNS server running on a linux machine with a slave zone
> for example.com. The AXFR doesn't have those records (aside from the
> NS record). So what you're saying is that I need to setup another slave
> zone for the _msdcs subdomain?
>
> Mike
>
> On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
> Hans Halbmayr wrote:
>
> > Hi Mike,
> >
> > the gray one is the delegation of the zone. The _msdcs ist a subdomain of your forest root. Because it is needed all over the forest it is delegated.
> >
> > Regards
> > Hans
> >
> > ----- Original Message ----
> > From: Michael B Allen
> > To: ActiveDir@mail.activedir.org
> > Cc: deji@readymaids.com
> > Sent: Saturday, December 2, 2006 12:15:29 AM
> > Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >
> >
> > I'm not sure I understand. In DNS admin I see two zones. One
> > for _msdcs.example.com with all the usual _msdcs records and
> > one for example.com which incedentally has an NS record for
> > _msdcs.example.com. The little folder thingy for this _msdcs is grey
> > which I guess signifies that it's some kind of link to the other zone?
> >
> > So I understand why the _msdcs records other than the one NS record are
> > not transferring but I don't understand why the structure is split into
> > two zones and if I can/should do something about it.
> >
> > Mike
> >
> > On Fri, 1 Dec 2006 11:27:14 -0800
> > "Akomolafe, Deji" wrote:
> >
> > > Seen this? http://support.microsoft.com/kb/817470
> > >
> > >
> > > Sincerely,
> > > _____
> > > (, / | /) /) /)
> > > /---| (/_ ______ ___// _ // _
> > > ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> > > (_/ /)
> > > (/
> > > Microsoft MVP - Directory Services
> > > www.akomolafe.com - we know IT
> > > -5.75, -3.23
> > > Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
> > >
> > >
> > >
> > > From: Michael B Allen
> > > Sent: Fri 12/1/2006 9:40 AM
> > > To: ActiveDir@mail.activedir.org
> > > Subject: [ActiveDir] _msdcs not propagated in AXFR
> > >
> > >
> > > Does anyone know why the _msdcs records are not returned in an AXFR DNS
> > > query? This means that slave zones will not have those records and that
> > > software querying for a domain controller may not find one.
> > >
> > > Mike
> > >
> > > --
> > > Michael B Allen
> > > PHP Active Directory SSO
> > > http://www.ioplex.com/
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> > >
> >
> >
> > --
> > Michael B Allen
> > PHP Active Directory SSO
> > http://www.ioplex.com/
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> >
> >
> >
> > ____________________________________________________________________________________
> > Do you Yahoo!?
> > Everyone is raving about the all-new Yahoo! Mail beta.
> > http://new.mail.yahoo.com
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> >
>
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
>
>
> ____________________________________________________________________________________
> Need a quick answer? Get one in minutes from people who know.
> Ask your question on www.Answers.yahoo.com
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
laurarobinsonUser is Offline

Posts:96

12/04/2006 8:48 AM  
Small point- dcpromo creates those zones as mentioned in the original
question *if* you have not configured DNS beforehand, *if* you tell dcpromo
to go ahead and do it for you, and *if* you're building the forest root
domain. If you have configured DNS beforehand, how the zones get created (as
stub zones, as subdomains, etc.) will depend on that preconfiguration. If
you're not building the forest root domain, the subdomain already exists and
dcpromo is just populating it.

I bring this up only because there are many companies that have existing DNS
infrastructures and it's important to know that "default" is not equivalent
to "mandatory". It is not a requirement that the _msdcs zone be either a
separate zone or a subdomain in an existing zone, whether it's a stub or a
full zone, etc.

Of course, since we're talking SBS, all of this goes out the window (no pun
intended). SBS is its own freaky little animal.

Laura

> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans Halbmayr
> Sent: Monday, December 04, 2006 1:06 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
> Usually dcpromo creates all these zones. Windows creates
> these zones in a forest partition. If you have a linux DNS
> server just create another slave zone of _msdcs.example.com.
> The gray one is only the delegation.
>
> Hans
>
>
> ----- Original Message ----
> From: Michael B Allen
> To: ActiveDir@mail.activedir.org
> Cc: halbmayr@yahoo.com
> Sent: Saturday, December 2, 2006 5:39:26 PM
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
>
> Ok, so basically _msdcs is just a separate zone. Do Windows
> DNS setups usually do this? I'm using SBS.
>
> I have a bind DNS server running on a linux machine with a
> slave zone for example.com. The AXFR doesn't have those
> records (aside from the NS record). So what you're saying is
> that I need to setup another slave zone for the _msdcs subdomain?
>
> Mike
>
> On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
> Hans Halbmayr wrote:
>
> > Hi Mike,
> >
> > the gray one is the delegation of the zone. The _msdcs ist
> a subdomain of your forest root. Because it is needed all
> over the forest it is delegated.
> >
> > Regards
> > Hans
> >
> > ----- Original Message ----
> > From: Michael B Allen
> > To: ActiveDir@mail.activedir.org
> > Cc: deji@readymaids.com
> > Sent: Saturday, December 2, 2006 12:15:29 AM
> > Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >
> >
> > I'm not sure I understand. In DNS admin I see two zones. One for
> > _msdcs.example.com with all the usual _msdcs records and one for
> > example.com which incedentally has an NS record for
> > _msdcs.example.com. The little folder thingy for this
> _msdcs is grey
> > which I guess signifies that it's some kind of link to the
> other zone?
> >
> > So I understand why the _msdcs records other than the one NS record
> > are not transferring but I don't understand why the
> structure is split
> > into two zones and if I can/should do something about it.
> >
> > Mike
> >
> > On Fri, 1 Dec 2006 11:27:14 -0800
> > "Akomolafe, Deji" wrote:
> >
> > > Seen this? http://support.microsoft.com/kb/817470
> > >
> > >
> > > Sincerely,
> > > _____
> > > (, / | /) /) /)
> > > /---| (/_ ______ ___// _ // _
> > > ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> > > (_/ /)
> > > (/
> > > Microsoft MVP - Directory Services
> > > www.akomolafe.com - we know IT
> > > -5.75, -3.23
> > > Do you now realize that Today is the Tomorrow you were
> worried about
> > > Yesterday? -anon
> > >
> > >
> > >
> > > From: Michael B Allen
> > > Sent: Fri 12/1/2006 9:40 AM
> > > To: ActiveDir@mail.activedir.org
> > > Subject: [ActiveDir] _msdcs not propagated in AXFR
> > >
> > >
> > > Does anyone know why the _msdcs records are not returned
> in an AXFR
> > > DNS query? This means that slave zones will not have
> those records
> > > and that software querying for a domain controller may
> not find one.
> > >
> > > Mike
> > >
> > > --
> > > Michael B Allen
> > > PHP Active Directory SSO
> > > http://www.ioplex.com/
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> > > http://www.mail-archive.com/activedir@mail.activedir.org/
> > >
> >
> >
> > --
> > Michael B Allen
> > PHP Active Directory SSO
> > http://www.ioplex.com/
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.mail-archive.com/activedir@mail.activedir.org/
> >
> >
> >
> >
> ______________________________________________________________________
> > ______________
> > Do you Yahoo!?
> > Everyone is raving about the all-new Yahoo! Mail beta.
> > http://new.mail.yahoo.com
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.mail-archive.com/activedir@mail.activedir.org/
> >
>
>
> --
> Michael B Allen
> PHP Active Directory SSO
> http://www.ioplex.com/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir@mail.activedir.org/
>
>
>
> ______________________________________________________________
> ______________________
> Need a quick answer? Get one in minutes from people who know.
> Ask your question on www.Answers.yahoo.com
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir@mail.activedir.org/
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> Date: 12/4/2006 7:18 AM
>
>

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.430 / Virus Database: 268.15.6/567 - Release Date: 12/4/2006
7:18 AM


List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
sbradcpaUser is Offline

Posts:317

12/04/2006 9:13 AM  
We install the Kitchen Sink service too don't forget.... ;-)

(wait until we start talking about the My Business OU...that's usually
good for another freak out or two)

Laura A. Robinson wrote:
> Small point- dcpromo creates those zones as mentioned in the original
> question *if* you have not configured DNS beforehand, *if* you tell dcpromo
> to go ahead and do it for you, and *if* you're building the forest root
> domain. If you have configured DNS beforehand, how the zones get created (as
> stub zones, as subdomains, etc.) will depend on that preconfiguration. If
> you're not building the forest root domain, the subdomain already exists and
> dcpromo is just populating it.
>
> I bring this up only because there are many companies that have existing DNS
> infrastructures and it's important to know that "default" is not equivalent
> to "mandatory". It is not a requirement that the _msdcs zone be either a
> separate zone or a subdomain in an existing zone, whether it's a stub or a
> full zone, etc.
>
> Of course, since we're talking SBS, all of this goes out the window (no pun
> intended). SBS is its own freaky little animal.
>
> Laura
>
>
>> -----Original Message-----
>> From: ActiveDir-owner@mail.activedir.org
>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans Halbmayr
>> Sent: Monday, December 04, 2006 1:06 PM
>> To: ActiveDir@mail.activedir.org
>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>
>> Usually dcpromo creates all these zones. Windows creates
>> these zones in a forest partition. If you have a linux DNS
>> server just create another slave zone of _msdcs.example.com.
>> The gray one is only the delegation.
>>
>> Hans
>>
>>
>> ----- Original Message ----
>> From: Michael B Allen
>> To: ActiveDir@mail.activedir.org
>> Cc: halbmayr@yahoo.com
>> Sent: Saturday, December 2, 2006 5:39:26 PM
>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>
>>
>> Ok, so basically _msdcs is just a separate zone. Do Windows
>> DNS setups usually do this? I'm using SBS.
>>
>> I have a bind DNS server running on a linux machine with a
>> slave zone for example.com. The AXFR doesn't have those
>> records (aside from the NS record). So what you're saying is
>> that I need to setup another slave zone for the _msdcs subdomain?
>>
>> Mike
>>
>> On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
>> Hans Halbmayr wrote:
>>
>>
>>> Hi Mike,
>>>
>>> the gray one is the delegation of the zone. The _msdcs ist
>>>
>> a subdomain of your forest root. Because it is needed all
>> over the forest it is delegated.
>>
>>> Regards
>>> Hans
>>>
>>> ----- Original Message ----
>>> From: Michael B Allen
>>> To: ActiveDir@mail.activedir.org
>>> Cc: deji@readymaids.com
>>> Sent: Saturday, December 2, 2006 12:15:29 AM
>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>
>>>
>>> I'm not sure I understand. In DNS admin I see two zones. One for
>>> _msdcs.example.com with all the usual _msdcs records and one for
>>> example.com which incedentally has an NS record for
>>> _msdcs.example.com. The little folder thingy for this
>>>
>> _msdcs is grey
>>
>>> which I guess signifies that it's some kind of link to the
>>>
>> other zone?
>>
>>> So I understand why the _msdcs records other than the one NS record
>>> are not transferring but I don't understand why the
>>>
>> structure is split
>>
>>> into two zones and if I can/should do something about it.
>>>
>>> Mike
>>>
>>> On Fri, 1 Dec 2006 11:27:14 -0800
>>> "Akomolafe, Deji" wrote:
>>>
>>>
>>>> Seen this? http://support.microsoft.com/kb/817470
>>>>
>>>>
>>>> Sincerely,
>>>> _____
>>>> (, / | /) /) /)
>>>> /---| (/_ ______ ___// _ // _
>>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
>>>> (_/ /)
>>>> (/
>>>> Microsoft MVP - Directory Services
>>>> www.akomolafe.com - we know IT
>>>> -5.75, -3.23
>>>> Do you now realize that Today is the Tomorrow you were
>>>>
>> worried about
>>
>>>> Yesterday? -anon
>>>>
>>>>
>>>>
>>>> From: Michael B Allen
>>>> Sent: Fri 12/1/2006 9:40 AM
>>>> To: ActiveDir@mail.activedir.org
>>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
>>>>
>>>>
>>>> Does anyone know why the _msdcs records are not returned
>>>>
>> in an AXFR
>>
>>>> DNS query? This means that slave zones will not have
>>>>
>> those records
>>
>>>> and that software querying for a domain controller may
>>>>
>> not find one.
>>
>>>> Mike
>>>>
>>>> --
>>>> Michael B Allen
>>>> PHP Active Directory SSO
>>>> http://www.ioplex.com/
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive:
>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>
>>>>
>>> --
>>> Michael B Allen
>>> PHP Active Directory SSO
>>> http://www.ioplex.com/
>>> List info : http://www.activedir.org/List.aspx
>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>> List archive:
>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>
>>>
>>>
>>>
>>>
>> ______________________________________________________________________
>>
>>> ______________
>>> Do you Yahoo!?
>>> Everyone is raving about the all-new Yahoo! Mail beta.
>>> http://new.mail.yahoo.com
>>> List info : http://www.activedir.org/List.aspx
>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>> List archive:
>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>
>>>
>> --
>> Michael B Allen
>> PHP Active Directory SSO
>> http://www.ioplex.com/
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>>
>>
>> ______________________________________________________________
>> ______________________
>> Need a quick answer? Get one in minutes from people who know.
>> Ask your question on www.Answers.yahoo.com
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>> --
>> No virus found in this incoming message.
>> Checked by AVG Free Edition.
>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
>> Date: 12/4/2006 7:18 AM
>>
>>
>>
>
>

--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com

If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will hunt you down...
http://blogs.technet.com/sbs

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
laurarobinsonUser is Offline

Posts:96

12/04/2006 11:11 AM  
Please tell me that you're making that up. Otherwise I'll have to stab
myself in the eye with a fork. "My Business"????

Words fail me. :-)

Laura
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> Sent: Monday, December 04, 2006 9:13 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>
> We install the Kitchen Sink service too don't forget.... ;-)
>
> (wait until we start talking about the My Business
> OU...that's usually good for another freak out or two)
>
> Laura A. Robinson wrote:
> > Small point- dcpromo creates those zones as mentioned in
> the original
> > question *if* you have not configured DNS beforehand, *if*
> you tell
> > dcpromo to go ahead and do it for you, and *if* you're building the
> > forest root domain. If you have configured DNS beforehand, how the
> > zones get created (as stub zones, as subdomains, etc.) will
> depend on
> > that preconfiguration. If you're not building the forest
> root domain,
> > the subdomain already exists and dcpromo is just populating it.
> >
> > I bring this up only because there are many companies that have
> > existing DNS infrastructures and it's important to know
> that "default"
> > is not equivalent to "mandatory". It is not a requirement that the
> > _msdcs zone be either a separate zone or a subdomain in an existing
> > zone, whether it's a stub or a full zone, etc.
> >
> > Of course, since we're talking SBS, all of this goes out the window
> > (no pun intended). SBS is its own freaky little animal.
> >
> > Laura
> >
> >
> >> -----Original Message-----
> >> From: ActiveDir-owner@mail.activedir.org
> >> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans
> >> Halbmayr
> >> Sent: Monday, December 04, 2006 1:06 PM
> >> To: ActiveDir@mail.activedir.org
> >> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>
> >> Usually dcpromo creates all these zones. Windows creates
> these zones
> >> in a forest partition. If you have a linux DNS server just create
> >> another slave zone of _msdcs.example.com.
> >> The gray one is only the delegation.
> >>
> >> Hans
> >>
> >>
> >> ----- Original Message ----
> >> From: Michael B Allen
> >> To: ActiveDir@mail.activedir.org
> >> Cc: halbmayr@yahoo.com
> >> Sent: Saturday, December 2, 2006 5:39:26 PM
> >> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>
> >>
> >> Ok, so basically _msdcs is just a separate zone. Do Windows DNS
> >> setups usually do this? I'm using SBS.
> >>
> >> I have a bind DNS server running on a linux machine with a
> slave zone
> >> for example.com. The AXFR doesn't have those records
> (aside from the
> >> NS record). So what you're saying is that I need to setup another
> >> slave zone for the _msdcs subdomain?
> >>
> >> Mike
> >>
> >> On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr
> >> wrote:
> >>
> >>
> >>> Hi Mike,
> >>>
> >>> the gray one is the delegation of the zone. The _msdcs ist
> >>>
> >> a subdomain of your forest root. Because it is needed all over the
> >> forest it is delegated.
> >>
> >>> Regards
> >>> Hans
> >>>
> >>> ----- Original Message ----
> >>> From: Michael B Allen
> >>> To: ActiveDir@mail.activedir.org
> >>> Cc: deji@readymaids.com
> >>> Sent: Saturday, December 2, 2006 12:15:29 AM
> >>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>
> >>>
> >>> I'm not sure I understand. In DNS admin I see two zones. One for
> >>> _msdcs.example.com with all the usual _msdcs records and one for
> >>> example.com which incedentally has an NS record for
> >>> _msdcs.example.com. The little folder thingy for this
> >>>
> >> _msdcs is grey
> >>
> >>> which I guess signifies that it's some kind of link to the
> >>>
> >> other zone?
> >>
> >>> So I understand why the _msdcs records other than the one
> NS record
> >>> are not transferring but I don't understand why the
> >>>
> >> structure is split
> >>
> >>> into two zones and if I can/should do something about it.
> >>>
> >>> Mike
> >>>
> >>> On Fri, 1 Dec 2006 11:27:14 -0800
> >>> "Akomolafe, Deji" wrote:
> >>>
> >>>
> >>>> Seen this? http://support.microsoft.com/kb/817470
> >>>>
> >>>>
> >>>> Sincerely,
> >>>> _____
> >>>> (, / | /) /) /)
> >>>> /---| (/_ ______ ___// _ // _
> >>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> >>>> (_/ /)
> >>>> (/
> >>>> Microsoft MVP - Directory Services
> >>>> www.akomolafe.com - we know IT
> >>>> -5.75, -3.23
> >>>> Do you now realize that Today is the Tomorrow you were
> >>>>
> >> worried about
> >>
> >>>> Yesterday? -anon
> >>>>
> >>>>
> >>>>
> >>>> From: Michael B Allen
> >>>> Sent: Fri 12/1/2006 9:40 AM
> >>>> To: ActiveDir@mail.activedir.org
> >>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
> >>>>
> >>>>
> >>>> Does anyone know why the _msdcs records are not returned
> >>>>
> >> in an AXFR
> >>
> >>>> DNS query? This means that slave zones will not have
> >>>>
> >> those records
> >>
> >>>> and that software querying for a domain controller may
> >>>>
> >> not find one.
> >>
> >>>> Mike
> >>>>
> >>>> --
> >>>> Michael B Allen
> >>>> PHP Active Directory SSO
> >>>> http://www.ioplex.com/
> >>>> List info : http://www.activedir.org/List.aspx
> >>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>> List archive:
> >>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>
> >>>>
> >>> --
> >>> Michael B Allen
> >>> PHP Active Directory SSO
> >>> http://www.ioplex.com/
> >>> List info : http://www.activedir.org/List.aspx
> >>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>> List archive:
> >>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> _____________________________________________________________________
> >> _
> >>
> >>> ______________
> >>> Do you Yahoo!?
> >>> Everyone is raving about the all-new Yahoo! Mail beta.
> >>> http://new.mail.yahoo.com
> >>> List info : http://www.activedir.org/List.aspx
> >>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>> List archive:
> >>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>
> >>>
> >> --
> >> Michael B Allen
> >> PHP Active Directory SSO
> >> http://www.ioplex.com/
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>
> >>
> >>
> >> ______________________________________________________________
> >> ______________________
> >> Need a quick answer? Get one in minutes from people who know.
> >> Ask your question on www.Answers.yahoo.com
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>
> >> --
> >> No virus found in this incoming message.
> >> Checked by AVG Free Edition.
> >> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> >> Date: 12/4/2006 7:18 AM
> >>
> >>
> >>
> >
> >
>
> --
> Letting your vendors set your risk analysis these days?
> http://www.threatcode.com
>
> If you are a SBSer and you don't subscribe to the SBS Blog...
> man ... I will hunt you down...
> http://blogs.technet.com/sbs
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir@mail.activedir.org/
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> Date: 12/4/2006 7:18 AM
>
>

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.430 / Virus Database: 268.15.6/567 - Release Date: 12/4/2006
7:18 AM


List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
sbradcpaUser is Offline

Posts:317

12/04/2006 11:28 AM  
http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
http://www.sbslinks.com/images/wp5z50vd.gif

Joe? Deji? Got some forks?

Laura A. Robinson wrote:
> Please tell me that you're making that up. Otherwise I'll have to stab
> myself in the eye with a fork. "My Business"????
>
> Words fail me. :-)
>
> Laura
>
>> -----Original Message-----
>> From: ActiveDir-owner@mail.activedir.org
>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
>> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
>> Sent: Monday, December 04, 2006 9:13 PM
>> To: ActiveDir@mail.activedir.org
>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>
>> We install the Kitchen Sink service too don't forget.... ;-)
>>
>> (wait until we start talking about the My Business
>> OU...that's usually good for another freak out or two)
>>
>> Laura A. Robinson wrote:
>>
>>> Small point- dcpromo creates those zones as mentioned in
>>>
>> the original
>>
>>> question *if* you have not configured DNS beforehand, *if*
>>>
>> you tell
>>
>>> dcpromo to go ahead and do it for you, and *if* you're building the
>>> forest root domain. If you have configured DNS beforehand, how the
>>> zones get created (as stub zones, as subdomains, etc.) will
>>>
>> depend on
>>
>>> that preconfiguration. If you're not building the forest
>>>
>> root domain,
>>
>>> the subdomain already exists and dcpromo is just populating it.
>>>
>>> I bring this up only because there are many companies that have
>>> existing DNS infrastructures and it's important to know
>>>
>> that "default"
>>
>>> is not equivalent to "mandatory". It is not a requirement that the
>>> _msdcs zone be either a separate zone or a subdomain in an existing
>>> zone, whether it's a stub or a full zone, etc.
>>>
>>> Of course, since we're talking SBS, all of this goes out the window
>>> (no pun intended). SBS is its own freaky little animal.
>>>
>>> Laura
>>>
>>>
>>>
>>>> -----Original Message-----
>>>> From: ActiveDir-owner@mail.activedir.org
>>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans
>>>> Halbmayr
>>>> Sent: Monday, December 04, 2006 1:06 PM
>>>> To: ActiveDir@mail.activedir.org
>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>
>>>> Usually dcpromo creates all these zones. Windows creates
>>>>
>> these zones
>>
>>>> in a forest partition. If you have a linux DNS server just create
>>>> another slave zone of _msdcs.example.com.
>>>> The gray one is only the delegation.
>>>>
>>>> Hans
>>>>
>>>>
>>>> ----- Original Message ----
>>>> From: Michael B Allen
>>>> To: ActiveDir@mail.activedir.org
>>>> Cc: halbmayr@yahoo.com
>>>> Sent: Saturday, December 2, 2006 5:39:26 PM
>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>
>>>>
>>>> Ok, so basically _msdcs is just a separate zone. Do Windows DNS
>>>> setups usually do this? I'm using SBS.
>>>>
>>>> I have a bind DNS server running on a linux machine with a
>>>>
>> slave zone
>>
>>>> for example.com. The AXFR doesn't have those records
>>>>
>> (aside from the
>>
>>>> NS record). So what you're saying is that I need to setup another
>>>> slave zone for the _msdcs subdomain?
>>>>
>>>> Mike
>>>>
>>>> On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr
>>>> wrote:
>>>>
>>>>
>>>>
>>>>> Hi Mike,
>>>>>
>>>>> the gray one is the delegation of the zone. The _msdcs ist
>>>>>
>>>>>
>>>> a subdomain of your forest root. Because it is needed all over the
>>>> forest it is delegated.
>>>>
>>>>
>>>>> Regards
>>>>> Hans
>>>>>
>>>>> ----- Original Message ----
>>>>> From: Michael B Allen
>>>>> To: ActiveDir@mail.activedir.org
>>>>> Cc: deji@readymaids.com
>>>>> Sent: Saturday, December 2, 2006 12:15:29 AM
>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>>
>>>>>
>>>>> I'm not sure I understand. In DNS admin I see two zones. One for
>>>>> _msdcs.example.com with all the usual _msdcs records and one for
>>>>> example.com which incedentally has an NS record for
>>>>> _msdcs.example.com. The little folder thingy for this
>>>>>
>>>>>
>>>> _msdcs is grey
>>>>
>>>>
>>>>> which I guess signifies that it's some kind of link to the
>>>>>
>>>>>
>>>> other zone?
>>>>
>>>>
>>>>> So I understand why the _msdcs records other than the one
>>>>>
>> NS record
>>
>>>>> are not transferring but I don't understand why the
>>>>>
>>>>>
>>>> structure is split
>>>>
>>>>
>>>>> into two zones and if I can/should do something about it.
>>>>>
>>>>> Mike
>>>>>
>>>>> On Fri, 1 Dec 2006 11:27:14 -0800
>>>>> "Akomolafe, Deji" wrote:
>>>>>
>>>>>
>>>>>
>>>>>> Seen this? http://support.microsoft.com/kb/817470
>>>>>>
>>>>>>
>>>>>> Sincerely,
>>>>>> _____
>>>>>> (, / | /) /) /)
>>>>>> /---| (/_ ______ ___// _ // _
>>>>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
>>>>>> (_/ /)
>>>>>> (/
>>>>>> Microsoft MVP - Directory Services
>>>>>> www.akomolafe.com - we know IT
>>>>>> -5.75, -3.23
>>>>>> Do you now realize that Today is the Tomorrow you were
>>>>>>
>>>>>>
>>>> worried about
>>>>
>>>>
>>>>>> Yesterday? -anon
>>>>>>
>>>>>>
>>>>>>
>>>>>> From: Michael B Allen
>>>>>> Sent: Fri 12/1/2006 9:40 AM
>>>>>> To: ActiveDir@mail.activedir.org
>>>>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
>>>>>>
>>>>>>
>>>>>> Does anyone know why the _msdcs records are not returned
>>>>>>
>>>>>>
>>>> in an AXFR
>>>>
>>>>
>>>>>> DNS query? This means that slave zones will not have
>>>>>>
>>>>>>
>>>> those records
>>>>
>>>>
>>>>>> and that software querying for a domain controller may
>>>>>>
>>>>>>
>>>> not find one.
>>>>
>>>>
>>>>>> Mike
>>>>>>
>>>>>> --
>>>>>> Michael B Allen
>>>>>> PHP Active Directory SSO
>>>>>> http://www.ioplex.com/
>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>> List archive:
>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>
>>>>>>
>>>>>>
>>>>> --
>>>>> Michael B Allen
>>>>> PHP Active Directory SSO
>>>>> http://www.ioplex.com/
>>>>> List info : http://www.activedir.org/List.aspx
>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>> List archive:
>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>> _____________________________________________________________________
>>
>>>> _
>>>>
>>>>
>>>>> ______________
>>>>> Do you Yahoo!?
>>>>> Everyone is raving about the all-new Yahoo! Mail beta.
>>>>> http://new.mail.yahoo.com
>>>>> List info : http://www.activedir.org/List.aspx
>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>> List archive:
>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>
>>>>>
>>>>>
>>>> --
>>>> Michael B Allen
>>>> PHP Active Directory SSO
>>>> http://www.ioplex.com/
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive:
>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>
>>>>
>>>>
>>>> ______________________________________________________________
>>>> ______________________
>>>> Need a quick answer? Get one in minutes from people who know.
>>>> Ask your question on www.Answers.yahoo.com
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive:
>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>
>>>> --
>>>> No virus found in this incoming message.
>>>> Checked by AVG Free Edition.
>>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
>>>> Date: 12/4/2006 7:18 AM
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>> --
>> Letting your vendors set your risk analysis these days?
>> http://www.threatcode.com
>>
>> If you are a SBSer and you don't subscribe to the SBS Blog...
>> man ... I will hunt you down...
>> http://blogs.technet.com/sbs
>>
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>> --
>> No virus found in this incoming message.
>> Checked by AVG Free Edition.
>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
>> Date: 12/4/2006 7:18 AM
>>
>>
>>
>
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD000001730User is Offline

Posts:0

12/05/2006 3:02 AM  
Yeah, but you can just ignore it and it's not the default Users
or Computers containers. Still, is there a safe way to remove
those? Similarly there's a safe way to remove the Default-First-Site-Name
stuff too?

Mike

On Mon, 04 Dec 2006 20:28:42 -0800
"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" wrote:

> http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
> http://www.sbslinks.com/images/wp5z50vd.gif
>
> Joe? Deji? Got some forks?
>
> Laura A. Robinson wrote:
> > Please tell me that you're making that up. Otherwise I'll have to stab
> > myself in the eye with a fork. "My Business"????
> >
> > Words fail me. :-)
> >
> > Laura
> >
> >> -----Original Message-----
> >> From: ActiveDir-owner@mail.activedir.org
> >> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> >> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> >> Sent: Monday, December 04, 2006 9:13 PM
> >> To: ActiveDir@mail.activedir.org
> >> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>
> >> We install the Kitchen Sink service too don't forget.... ;-)
> >>
> >> (wait until we start talking about the My Business
> >> OU...that's usually good for another freak out or two)
> >>
> >> Laura A. Robinson wrote:
> >>
> >>> Small point- dcpromo creates those zones as mentioned in
> >>>
> >> the original
> >>
> >>> question *if* you have not configured DNS beforehand, *if*
> >>>
> >> you tell
> >>
> >>> dcpromo to go ahead and do it for you, and *if* you're building the
> >>> forest root domain. If you have configured DNS beforehand, how the
> >>> zones get created (as stub zones, as subdomains, etc.) will
> >>>
> >> depend on
> >>
> >>> that preconfiguration. If you're not building the forest
> >>>
> >> root domain,
> >>
> >>> the subdomain already exists and dcpromo is just populating it.
> >>>
> >>> I bring this up only because there are many companies that have
> >>> existing DNS infrastructures and it's important to know
> >>>
> >> that "default"
> >>
> >>> is not equivalent to "mandatory". It is not a requirement that the
> >>> _msdcs zone be either a separate zone or a subdomain in an existing
> >>> zone, whether it's a stub or a full zone, etc.
> >>>
> >>> Of course, since we're talking SBS, all of this goes out the window
> >>> (no pun intended). SBS is its own freaky little animal.
> >>>
> >>> Laura
> >>>
> >>>
> >>>
> >>>> -----Original Message-----
> >>>> From: ActiveDir-owner@mail.activedir.org
> >>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans
> >>>> Halbmayr
> >>>> Sent: Monday, December 04, 2006 1:06 PM
> >>>> To: ActiveDir@mail.activedir.org
> >>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>
> >>>> Usually dcpromo creates all these zones. Windows creates
> >>>>
> >> these zones
> >>
> >>>> in a forest partition. If you have a linux DNS server just create
> >>>> another slave zone of _msdcs.example.com.
> >>>> The gray one is only the delegation.
> >>>>
> >>>> Hans
> >>>>
> >>>>
> >>>> ----- Original Message ----
> >>>> From: Michael B Allen
> >>>> To: ActiveDir@mail.activedir.org
> >>>> Cc: halbmayr@yahoo.com
> >>>> Sent: Saturday, December 2, 2006 5:39:26 PM
> >>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>
> >>>>
> >>>> Ok, so basically _msdcs is just a separate zone. Do Windows DNS
> >>>> setups usually do this? I'm using SBS.
> >>>>
> >>>> I have a bind DNS server running on a linux machine with a
> >>>>
> >> slave zone
> >>
> >>>> for example.com. The AXFR doesn't have those records
> >>>>
> >> (aside from the
> >>
> >>>> NS record). So what you're saying is that I need to setup another
> >>>> slave zone for the _msdcs subdomain?
> >>>>
> >>>> Mike
> >>>>
> >>>> On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr
> >>>> wrote:
> >>>>
> >>>>
> >>>>
> >>>>> Hi Mike,
> >>>>>
> >>>>> the gray one is the delegation of the zone. The _msdcs ist
> >>>>>
> >>>>>
> >>>> a subdomain of your forest root. Because it is needed all over the
> >>>> forest it is delegated.
> >>>>
> >>>>
> >>>>> Regards
> >>>>> Hans
> >>>>>
> >>>>> ----- Original Message ----
> >>>>> From: Michael B Allen
> >>>>> To: ActiveDir@mail.activedir.org
> >>>>> Cc: deji@readymaids.com
> >>>>> Sent: Saturday, December 2, 2006 12:15:29 AM
> >>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>
> >>>>>
> >>>>> I'm not sure I understand. In DNS admin I see two zones. One for
> >>>>> _msdcs.example.com with all the usual _msdcs records and one for
> >>>>> example.com which incedentally has an NS record for
> >>>>> _msdcs.example.com. The little folder thingy for this
> >>>>>
> >>>>>
> >>>> _msdcs is grey
> >>>>
> >>>>
> >>>>> which I guess signifies that it's some kind of link to the
> >>>>>
> >>>>>
> >>>> other zone?
> >>>>
> >>>>
> >>>>> So I understand why the _msdcs records other than the one
> >>>>>
> >> NS record
> >>
> >>>>> are not transferring but I don't understand why the
> >>>>>
> >>>>>
> >>>> structure is split
> >>>>
> >>>>
> >>>>> into two zones and if I can/should do something about it.
> >>>>>
> >>>>> Mike
> >>>>>
> >>>>> On Fri, 1 Dec 2006 11:27:14 -0800
> >>>>> "Akomolafe, Deji" wrote:
> >>>>>
> >>>>>
> >>>>>
> >>>>>> Seen this? http://support.microsoft.com/kb/817470
> >>>>>>
> >>>>>>
> >>>>>> Sincerely,
> >>>>>> _____
> >>>>>> (, / | /) /) /)
> >>>>>> /---| (/_ ______ ___// _ // _
> >>>>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> >>>>>> (_/ /)
> >>>>>> (/
> >>>>>> Microsoft MVP - Directory Services
> >>>>>> www.akomolafe.com - we know IT
> >>>>>> -5.75, -3.23
> >>>>>> Do you now realize that Today is the Tomorrow you were
> >>>>>>
> >>>>>>
> >>>> worried about
> >>>>
> >>>>
> >>>>>> Yesterday? -anon
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> From: Michael B Allen
> >>>>>> Sent: Fri 12/1/2006 9:40 AM
> >>>>>> To: ActiveDir@mail.activedir.org
> >>>>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>>
> >>>>>>
> >>>>>> Does anyone know why the _msdcs records are not returned
> >>>>>>
> >>>>>>
> >>>> in an AXFR
> >>>>
> >>>>
> >>>>>> DNS query? This means that slave zones will not have
> >>>>>>
> >>>>>>
> >>>> those records
> >>>>
> >>>>
> >>>>>> and that software querying for a domain controller may
> >>>>>>
> >>>>>>
> >>>> not find one.
> >>>>
> >>>>
> >>>>>> Mike
> >>>>>>
> >>>>>> --
> >>>>>> Michael B Allen
> >>>>>> PHP Active Directory SSO
> >>>>>> http://www.ioplex.com/
> >>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>> List archive:
> >>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>> --
> >>>>> Michael B Allen
> >>>>> PHP Active Directory SSO
> >>>>> http://www.ioplex.com/
> >>>>> List info : http://www.activedir.org/List.aspx
> >>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>> List archive:
> >>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >> _____________________________________________________________________
> >>
> >>>> _
> >>>>
> >>>>
> >>>>> ______________
> >>>>> Do you Yahoo!?
> >>>>> Everyone is raving about the all-new Yahoo! Mail beta.
> >>>>> http://new.mail.yahoo.com
> >>>>> List info : http://www.activedir.org/List.aspx
> >>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>> List archive:
> >>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>
> >>>>>
> >>>>>
> >>>> --
> >>>> Michael B Allen
> >>>> PHP Active Directory SSO
> >>>> http://www.ioplex.com/
> >>>> List info : http://www.activedir.org/List.aspx
> >>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>> List archive:
> >>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>
> >>>>
> >>>>
> >>>> ______________________________________________________________
> >>>> ______________________
> >>>> Need a quick answer? Get one in minutes from people who know.
> >>>> Ask your question on www.Answers.yahoo.com
> >>>> List info : http://www.activedir.org/List.aspx
> >>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>> List archive:
> >>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>
> >>>> --
> >>>> No virus found in this incoming message.
> >>>> Checked by AVG Free Edition.
> >>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> >>>> Date: 12/4/2006 7:18 AM
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >> --
> >> Letting your vendors set your risk analysis these days?
> >> http://www.threatcode.com
> >>
> >> If you are a SBSer and you don't subscribe to the SBS Blog...
> >> man ... I will hunt you down...
> >> http://blogs.technet.com/sbs
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>
> >> --
> >> No virus found in this incoming message.
> >> Checked by AVG Free Edition.
> >> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> >> Date: 12/4/2006 7:18 AM
> >>
> >>
> >>
> >
> >
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
sbradcpaUser is Offline

Posts:317

12/05/2006 3:10 AM  
Put duct tape over the top and forget about them.

Seriously...you mess with those (especially the OU stuff) and you will
break some wizards in SBS. Kinda like the Kitchen Sink stuff.... you
live with it or if you do mess with 'em, please do so not on a client's
box and only on your own that only you will touch because if there's one
thing that will make me take forks out and start stabbing folks is when
you mess up a clients box.

Truly... when a SBSer who knows the quirks about SBS comes into a
network and sees stuff screwed around with, they will
swingmigration/flatten it and get it back to a known state because it
costs the client more in the long run when it's not "default". Granted
that "default" may not be what big server land considers default... but
it is what it is.

I'll ping you up with Paula aka Lanwench... the world wide "Former
Enterprisers who hate the quirks of SBS but deal with them anyway" is
starting new chapters daily.

Michael B Allen wrote:
> Yeah, but you can just ignore it and it's not the default Users
> or Computers containers. Still, is there a safe way to remove
> those? Similarly there's a safe way to remove the Default-First-Site-Name
> stuff too?
>
> Mike
>
> On Mon, 04 Dec 2006 20:28:42 -0800
> "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" wrote:
>
>
>> http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
>> http://www.sbslinks.com/images/wp5z50vd.gif
>>
>> Joe? Deji? Got some forks?
>>
>> Laura A. Robinson wrote:
>>
>>> Please tell me that you're making that up. Otherwise I'll have to stab
>>> myself in the eye with a fork. "My Business"????
>>>
>>> Words fail me. :-)
>>>
>>> Laura
>>>
>>>
>>>> -----Original Message-----
>>>> From: ActiveDir-owner@mail.activedir.org
>>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
>>>> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
>>>> Sent: Monday, December 04, 2006 9:13 PM
>>>> To: ActiveDir@mail.activedir.org
>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>
>>>> We install the Kitchen Sink service too don't forget.... ;-)
>>>>
>>>> (wait until we start talking about the My Business
>>>> OU...that's usually good for another freak out or two)
>>>>
>>>> Laura A. Robinson wrote:
>>>>
>>>>
>>>>> Small point- dcpromo creates those zones as mentioned in
>>>>>
>>>>>
>>>> the original
>>>>
>>>>
>>>>> question *if* you have not configured DNS beforehand, *if*
>>>>>
>>>>>
>>>> you tell
>>>>
>>>>
>>>>> dcpromo to go ahead and do it for you, and *if* you're building the
>>>>> forest root domain. If you have configured DNS beforehand, how the
>>>>> zones get created (as stub zones, as subdomains, etc.) will
>>>>>
>>>>>
>>>> depend on
>>>>
>>>>
>>>>> that preconfiguration. If you're not building the forest
>>>>>
>>>>>
>>>> root domain,
>>>>
>>>>
>>>>> the subdomain already exists and dcpromo is just populating it.
>>>>>
>>>>> I bring this up only because there are many companies that have
>>>>> existing DNS infrastructures and it's important to know
>>>>>
>>>>>
>>>> that "default"
>>>>
>>>>
>>>>> is not equivalent to "mandatory". It is not a requirement that the
>>>>> _msdcs zone be either a separate zone or a subdomain in an existing
>>>>> zone, whether it's a stub or a full zone, etc.
>>>>>
>>>>> Of course, since we're talking SBS, all of this goes out the window
>>>>> (no pun intended). SBS is its own freaky little animal.
>>>>>
>>>>> Laura
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> -----Original Message-----
>>>>>> From: ActiveDir-owner@mail.activedir.org
>>>>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans
>>>>>> Halbmayr
>>>>>> Sent: Monday, December 04, 2006 1:06 PM
>>>>>> To: ActiveDir@mail.activedir.org
>>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>>>
>>>>>> Usually dcpromo creates all these zones. Windows creates
>>>>>>
>>>>>>
>>>> these zones
>>>>
>>>>
>>>>>> in a forest partition. If you have a linux DNS server just create
>>>>>> another slave zone of _msdcs.example.com.
>>>>>> The gray one is only the delegation.
>>>>>>
>>>>>> Hans
>>>>>>
>>>>>>
>>>>>> ----- Original Message ----
>>>>>> From: Michael B Allen
>>>>>> To: ActiveDir@mail.activedir.org
>>>>>> Cc: halbmayr@yahoo.com
>>>>>> Sent: Saturday, December 2, 2006 5:39:26 PM
>>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>>>
>>>>>>
>>>>>> Ok, so basically _msdcs is just a separate zone. Do Windows DNS
>>>>>> setups usually do this? I'm using SBS.
>>>>>>
>>>>>> I have a bind DNS server running on a linux machine with a
>>>>>>
>>>>>>
>>>> slave zone
>>>>
>>>>
>>>>>> for example.com. The AXFR doesn't have those records
>>>>>>
>>>>>>
>>>> (aside from the
>>>>
>>>>
>>>>>> NS record). So what you're saying is that I need to setup another
>>>>>> slave zone for the _msdcs subdomain?
>>>>>>
>>>>>> Mike
>>>>>>
>>>>>> On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr
>>>>>> wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>> Hi Mike,
>>>>>>>
>>>>>>> the gray one is the delegation of the zone. The _msdcs ist
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> a subdomain of your forest root. Because it is needed all over the
>>>>>> forest it is delegated.
>>>>>>
>>>>>>
>>>>>>
>>>>>>> Regards
>>>>>>> Hans
>>>>>>>
>>>>>>> ----- Original Message ----
>>>>>>> From: Michael B Allen
>>>>>>> To: ActiveDir@mail.activedir.org
>>>>>>> Cc: deji@readymaids.com
>>>>>>> Sent: Saturday, December 2, 2006 12:15:29 AM
>>>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
>>>>>>>
>>>>>>>
>>>>>>> I'm not sure I understand. In DNS admin I see two zones. One for
>>>>>>> _msdcs.example.com with all the usual _msdcs records and one for
>>>>>>> example.com which incedentally has an NS record for
>>>>>>> _msdcs.example.com. The little folder thingy for this
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> _msdcs is grey
>>>>>>
>>>>>>
>>>>>>
>>>>>>> which I guess signifies that it's some kind of link to the
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> other zone?
>>>>>>
>>>>>>
>>>>>>
>>>>>>> So I understand why the _msdcs records other than the one
>>>>>>>
>>>>>>>
>>>> NS record
>>>>
>>>>
>>>>>>> are not transferring but I don't understand why the
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> structure is split
>>>>>>
>>>>>>
>>>>>>
>>>>>>> into two zones and if I can/should do something about it.
>>>>>>>
>>>>>>> Mike
>>>>>>>
>>>>>>> On Fri, 1 Dec 2006 11:27:14 -0800
>>>>>>> "Akomolafe, Deji" wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> Seen this? http://support.microsoft.com/kb/817470
>>>>>>>>
>>>>>>>>
>>>>>>>> Sincerely,
>>>>>>>> _____
>>>>>>>> (, / | /) /) /)
>>>>>>>> /---| (/_ ______ ___// _ // _
>>>>>>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
>>>>>>>> (_/ /)
>>>>>>>> (/
>>>>>>>> Microsoft MVP - Directory Services
>>>>>>>> www.akomolafe.com - we know IT
>>>>>>>> -5.75, -3.23
>>>>>>>> Do you now realize that Today is the Tomorrow you were
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> worried about
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> Yesterday? -anon
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> From: Michael B Allen
>>>>>>>> Sent: Fri 12/1/2006 9:40 AM
>>>>>>>> To: ActiveDir@mail.activedir.org
>>>>>>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
>>>>>>>>
>>>>>>>>
>>>>>>>> Does anyone know why the _msdcs records are not returned
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> in an AXFR
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> DNS query? This means that slave zones will not have
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> those records
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> and that software querying for a domain controller may
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> not find one.
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> Mike
>>>>>>>>
>>>>>>>> --
>>>>>>>> Michael B Allen
>>>>>>>> PHP Active Directory SSO
>>>>>>>> http://www.ioplex.com/
>>>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>>>> List archive:
>>>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>> --
>>>>>>> Michael B Allen
>>>>>>> PHP Active Directory SSO
>>>>>>> http://www.ioplex.com/
>>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>>> List archive:
>>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>> _____________________________________________________________________
>>>>
>>>>
>>>>>> _
>>>>>>
>>>>>>
>>>>>>
>>>>>>> ______________
>>>>>>> Do you Yahoo!?
>>>>>>> Everyone is raving about the all-new Yahoo! Mail beta.
>>>>>>> http://new.mail.yahoo.com
>>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>>> List archive:
>>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> --
>>>>>> Michael B Allen
>>>>>> PHP Active Directory SSO
>>>>>> http://www.ioplex.com/
>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>> List archive:
>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>
>>>>>>
>>>>>>
>>>>>> ______________________________________________________________
>>>>>> ______________________
>>>>>> Need a quick answer? Get one in minutes from people who know.
>>>>>> Ask your question on www.Answers.yahoo.com
>>>>>> List info : http://www.activedir.org/List.aspx
>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>>>> List archive:
>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>>>
>>>>>> --
>>>>>> No virus found in this incoming message.
>>>>>> Checked by AVG Free Edition.
>>>>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
>>>>>> Date: 12/4/2006 7:18 AM
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>> --
>>>> Letting your vendors set your risk analysis these days?
>>>> http://www.threatcode.com
>>>>
>>>> If you are a SBSer and you don't subscribe to the SBS Blog...
>>>> man ... I will hunt you down...
>>>> http://blogs.technet.com/sbs
>>>>
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive:
>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
>>>>
>>>> --
>>>> No virus found in this incoming message.
>>>> Checked by AVG Free Edition.
>>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
>>>> Date: 12/4/2006 7:18 AM
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>>
>>
>
>
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
AD000001730User is Offline

Posts:0

12/05/2006 11:33 AM  
Ok, thanks. It's only a testing machine. I'll leave it alone.

Mike

On Tue, 05 Dec 2006 00:10:56 -0800
"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" wrote:

> Put duct tape over the top and forget about them.
>
> Seriously...you mess with those (especially the OU stuff) and you will
> break some wizards in SBS. Kinda like the Kitchen Sink stuff.... you
> live with it or if you do mess with 'em, please do so not on a client's
> box and only on your own that only you will touch because if there's one
> thing that will make me take forks out and start stabbing folks is when
> you mess up a clients box.
>
> Truly... when a SBSer who knows the quirks about SBS comes into a
> network and sees stuff screwed around with, they will
> swingmigration/flatten it and get it back to a known state because it
> costs the client more in the long run when it's not "default". Granted
> that "default" may not be what big server land considers default... but
> it is what it is.
>
> I'll ping you up with Paula aka Lanwench... the world wide "Former
> Enterprisers who hate the quirks of SBS but deal with them anyway" is
> starting new chapters daily.
>
> Michael B Allen wrote:
> > Yeah, but you can just ignore it and it's not the default Users
> > or Computers containers. Still, is there a safe way to remove
> > those? Similarly there's a safe way to remove the Default-First-Site-Name
> > stuff too?
> >
> > Mike
> >
> > On Mon, 04 Dec 2006 20:28:42 -0800
> > "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" wrote:
> >
> >
> >> http://msmvps.com/blogs/bradley/archive/2005/07/27/59808.aspx
> >> http://www.sbslinks.com/images/wp5z50vd.gif
> >>
> >> Joe? Deji? Got some forks?
> >>
> >> Laura A. Robinson wrote:
> >>
> >>> Please tell me that you're making that up. Otherwise I'll have to stab
> >>> myself in the eye with a fork. "My Business"????
> >>>
> >>> Words fail me. :-)
> >>>
> >>> Laura
> >>>
> >>>
> >>>> -----Original Message-----
> >>>> From: ActiveDir-owner@mail.activedir.org
> >>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> >>>> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> >>>> Sent: Monday, December 04, 2006 9:13 PM
> >>>> To: ActiveDir@mail.activedir.org
> >>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>
> >>>> We install the Kitchen Sink service too don't forget.... ;-)
> >>>>
> >>>> (wait until we start talking about the My Business
> >>>> OU...that's usually good for another freak out or two)
> >>>>
> >>>> Laura A. Robinson wrote:
> >>>>
> >>>>
> >>>>> Small point- dcpromo creates those zones as mentioned in
> >>>>>
> >>>>>
> >>>> the original
> >>>>
> >>>>
> >>>>> question *if* you have not configured DNS beforehand, *if*
> >>>>>
> >>>>>
> >>>> you tell
> >>>>
> >>>>
> >>>>> dcpromo to go ahead and do it for you, and *if* you're building the
> >>>>> forest root domain. If you have configured DNS beforehand, how the
> >>>>> zones get created (as stub zones, as subdomains, etc.) will
> >>>>>
> >>>>>
> >>>> depend on
> >>>>
> >>>>
> >>>>> that preconfiguration. If you're not building the forest
> >>>>>
> >>>>>
> >>>> root domain,
> >>>>
> >>>>
> >>>>> the subdomain already exists and dcpromo is just populating it.
> >>>>>
> >>>>> I bring this up only because there are many companies that have
> >>>>> existing DNS infrastructures and it's important to know
> >>>>>
> >>>>>
> >>>> that "default"
> >>>>
> >>>>
> >>>>> is not equivalent to "mandatory". It is not a requirement that the
> >>>>> _msdcs zone be either a separate zone or a subdomain in an existing
> >>>>> zone, whether it's a stub or a full zone, etc.
> >>>>>
> >>>>> Of course, since we're talking SBS, all of this goes out the window
> >>>>> (no pun intended). SBS is its own freaky little animal.
> >>>>>
> >>>>> Laura
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>> -----Original Message-----
> >>>>>> From: ActiveDir-owner@mail.activedir.org
> >>>>>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Hans
> >>>>>> Halbmayr
> >>>>>> Sent: Monday, December 04, 2006 1:06 PM
> >>>>>> To: ActiveDir@mail.activedir.org
> >>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>>
> >>>>>> Usually dcpromo creates all these zones. Windows creates
> >>>>>>
> >>>>>>
> >>>> these zones
> >>>>
> >>>>
> >>>>>> in a forest partition. If you have a linux DNS server just create
> >>>>>> another slave zone of _msdcs.example.com.
> >>>>>> The gray one is only the delegation.
> >>>>>>
> >>>>>> Hans
> >>>>>>
> >>>>>>
> >>>>>> ----- Original Message ----
> >>>>>> From: Michael B Allen
> >>>>>> To: ActiveDir@mail.activedir.org
> >>>>>> Cc: halbmayr@yahoo.com
> >>>>>> Sent: Saturday, December 2, 2006 5:39:26 PM
> >>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>>
> >>>>>>
> >>>>>> Ok, so basically _msdcs is just a separate zone. Do Windows DNS
> >>>>>> setups usually do this? I'm using SBS.
> >>>>>>
> >>>>>> I have a bind DNS server running on a linux machine with a
> >>>>>>
> >>>>>>
> >>>> slave zone
> >>>>
> >>>>
> >>>>>> for example.com. The AXFR doesn't have those records
> >>>>>>
> >>>>>>
> >>>> (aside from the
> >>>>
> >>>>
> >>>>>> NS record). So what you're saying is that I need to setup another
> >>>>>> slave zone for the _msdcs subdomain?
> >>>>>>
> >>>>>> Mike
> >>>>>>
> >>>>>> On Sat, 2 Dec 2006 03:02:22 -0800 (PST) Hans Halbmayr
> >>>>>> wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> Hi Mike,
> >>>>>>>
> >>>>>>> the gray one is the delegation of the zone. The _msdcs ist
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>> a subdomain of your forest root. Because it is needed all over the
> >>>>>> forest it is delegated.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> Regards
> >>>>>>> Hans
> >>>>>>>
> >>>>>>> ----- Original Message ----
> >>>>>>> From: Michael B Allen
> >>>>>>> To: ActiveDir@mail.activedir.org
> >>>>>>> Cc: deji@readymaids.com
> >>>>>>> Sent: Saturday, December 2, 2006 12:15:29 AM
> >>>>>>> Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>>>
> >>>>>>>
> >>>>>>> I'm not sure I understand. In DNS admin I see two zones. One for
> >>>>>>> _msdcs.example.com with all the usual _msdcs records and one for
> >>>>>>> example.com which incedentally has an NS record for
> >>>>>>> _msdcs.example.com. The little folder thingy for this
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>> _msdcs is grey
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> which I guess signifies that it's some kind of link to the
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>> other zone?
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> So I understand why the _msdcs records other than the one
> >>>>>>>
> >>>>>>>
> >>>> NS record
> >>>>
> >>>>
> >>>>>>> are not transferring but I don't understand why the
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>> structure is split
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> into two zones and if I can/should do something about it.
> >>>>>>>
> >>>>>>> Mike
> >>>>>>>
> >>>>>>> On Fri, 1 Dec 2006 11:27:14 -0800
> >>>>>>> "Akomolafe, Deji" wrote:
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>> Seen this? http://support.microsoft.com/kb/817470
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Sincerely,
> >>>>>>>> _____
> >>>>>>>> (, / | /) /) /)
> >>>>>>>> /---| (/_ ______ ___// _ // _
> >>>>>>>> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> >>>>>>>> (_/ /)
> >>>>>>>> (/
> >>>>>>>> Microsoft MVP - Directory Services
> >>>>>>>> www.akomolafe.com - we know IT
> >>>>>>>> -5.75, -3.23
> >>>>>>>> Do you now realize that Today is the Tomorrow you were
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>> worried about
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>> Yesterday? -anon
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> From: Michael B Allen
> >>>>>>>> Sent: Fri 12/1/2006 9:40 AM
> >>>>>>>> To: ActiveDir@mail.activedir.org
> >>>>>>>> Subject: [ActiveDir] _msdcs not propagated in AXFR
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Does anyone know why the _msdcs records are not returned
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>> in an AXFR
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>> DNS query? This means that slave zones will not have
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>> those records
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>> and that software querying for a domain controller may
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>> not find one.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>> Mike
> >>>>>>>>
> >>>>>>>> --
> >>>>>>>> Michael B Allen
> >>>>>>>> PHP Active Directory SSO
> >>>>>>>> http://www.ioplex.com/
> >>>>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>>>> List archive:
> >>>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>> --
> >>>>>>> Michael B Allen
> >>>>>>> PHP Active Directory SSO
> >>>>>>> http://www.ioplex.com/
> >>>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>>> List archive:
> >>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>> _____________________________________________________________________
> >>>>
> >>>>
> >>>>>> _
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>> ______________
> >>>>>>> Do you Yahoo!?
> >>>>>>> Everyone is raving about the all-new Yahoo! Mail beta.
> >>>>>>> http://new.mail.yahoo.com
> >>>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>>> List archive:
> >>>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>> --
> >>>>>> Michael B Allen
> >>>>>> PHP Active Directory SSO
> >>>>>> http://www.ioplex.com/
> >>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>> List archive:
> >>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> ______________________________________________________________
> >>>>>> ______________________
> >>>>>> Need a quick answer? Get one in minutes from people who know.
> >>>>>> Ask your question on www.Answers.yahoo.com
> >>>>>> List info : http://www.activedir.org/List.aspx
> >>>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>>>> List archive:
> >>>>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>>>
> >>>>>> --
> >>>>>> No virus found in this incoming message.
> >>>>>> Checked by AVG Free Edition.
> >>>>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> >>>>>> Date: 12/4/2006 7:18 AM
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>> --
> >>>> Letting your vendors set your risk analysis these days?
> >>>> http://www.threatcode.com
> >>>>
> >>>> If you are a SBSer and you don't subscribe to the SBS Blog...
> >>>> man ... I will hunt you down...
> >>>> http://blogs.technet.com/sbs
> >>>>
> >>>> List info : http://www.activedir.org/List.aspx
> >>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >>>> List archive:
> >>>> http://www.mail-archive.com/activedir@mail.activedir.org/
> >>>>
> >>>> --
> >>>> No virus found in this incoming message.
> >>>> Checked by AVG Free Edition.
> >>>> Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
> >>>> Date: 12/4/2006 7:18 AM
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> >>
> >>
> >
> >
> >
>
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] _msdcs not propagated in AXFR



ActiveForums 3.7
AdventNet Banner