List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Vista GPO

Prev Next

You are not authorized to post a reply.

Page 2 of 4

Author

Messages

deji

Posts:140

12/15/2006 3:54 AM
Know your audience. Know your customers. Know your consumers. I can't speak to whether or not you pi$$ off your employer, but I can name a few of your colleagues in the trenches (because I run into them every now and then) who will be more than glad to tell youthat there are more that go into a client's administrative decision making, technology adoption, PO approval, etc, than "best practices". I will not speak to the "security hole" boogey-man that you are floating because I don't think you want us veering into that arena. Imagine what it would sound like if we start saying that MS is not making AMDX administration available on non-Vista/LH platform because of "security issues". No, you don't want that. So, what you are left with is nothing but "Best Practices". You want to draw a line because it is the "sensible" thing to do. Well, my logic is that a lot of things make sense in my head and in my labs. They just don't translate well in the real "brick and mortar" life out there. People are going to administer their GPOs from their servers for any number of reasons. These same people will NOT install LH until RTM+x number of years. These people are the ones paying my bills. They are the ones paying yours. Unless you are actually making the case that MS is aware of some technical inhibitions to making ADMX administrable from legacy OSes, there is no compelling reason why MS should not factor in HOW its customers uses its products/technologies when decisions as to whether or not to make something available. It is this unwillingness/reluctance to relate to the real-word and to insist on a set of "prescriptive" mandates that continue to hurt MS in many places. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Laura A. RobinsonSent: Fri 12/15/2006 11:26 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO And it's the clueful customers who (rightly) become angry when something in a product that exists purely for backward compatibility opens a security hole. Now, I'm not saying that all security holes are due to backward compatibility, and I'm not saying that every bit of code that comes out of Redmond is perfect. However, I have said for years that many of the things that people don't like about Microsoft's products are the result of backward compatibility, not bad coding or a lack of consideration on the part of Microsoft's programmers. As somebody else (Darren? Richard?) said, there is a point where a line has to be drawn in the sand. I personally don't see anything dictatorial about requiring a Vista+ machine to edit VISTA policies. I mean, seriously, if you're writing Vista GPOs, that would imply that you're using Vista machines, and if you're using Vista machines, what is the issue with using one of those Vista machines as your editing workstation? I think that that IS a very pragmatic, realistic approach. Sorry, I just don't follow your logic on this one. That said, my opinions are purely my own, do not represent those of my employer, are not intended to represent those ofmy employer and for all I know, may even pi$$ off my employer. :-) Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 1:42 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I wouldn't put it in those words. But, yeah, I would expect Microsoft to be... shall we say...pragmatic, realistic. Something like, "enable" its customers to run their businesses. I mean,refrain from "dictating" its wishes. You know? Because at the end of the day, it is the "clueless customers" that actually write the checks that add up to those billions in the vault. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Laura A. RobinsonSent: Fri 12/15/2006 10:19 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO So Microsoft should encourage their bad practices? Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 12:39 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-EliaSent: Fri 12/15/2006 9:18 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroups who thought that the fact that XP and 2003 couldn't read Vista GP settings was an abomination and a scandal of the highest order and that MS should be beaten for their insolence (I'm paraphrasing :-)). But, yes, we should all be used to the fact that sometimes, you have to adopt the new stuff to get the new toys. People don't seem to have a problem with that concept when it comes to game consoles :) Darren -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich Milburn Sent: Friday, December 15, 2006 9:04 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO Sorry, I understand it's different, what I meant was merely that we had some growing pains like this when XP first came out. Our practice then became to use only XP desktops for GP management. I think there's a tendency to think this is such a terrible thing, this backwards-incompatibility, and we might forget that Vista is not new with this, we had similar issues before. And who remembers the teeth-pulling to get people to move to Active Directory?? ----------------------------------------------------------------------- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W. 107th St Overland Park, KS 66207 913-967-2819 ---------------------------------------------------------------------- "I love the smell of red herrings in the morning" - anonymous -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia Sent: Friday, December 15, 2006 10:05 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO This is actually a little different because if you view a GPO that was created with Vista, using XP or 2003, none of the ADMX settings can actually be read at all, because they are a completely new format that GPEditor or GPMC on those older platforms don't understand. In fact, those XP or 2003 will happily copy up the ADMs into the Vista GPO like they used to do, and you're back to each GPO storing ADMs in SYSVOL. What I've been recommending to folks is that once you introduce Vista desktops into your environment, use Vista for all your ongoing GP management. The Vista ADMXs are a superset of the latest and greatest ADMs (i.e. they include 2003, XP and Vista settings) so you can happily manage Vista and non-Vista targeted GP settings from a Vista machine. Darren Darren Mar-Elia CTO & Founder www.sdmsoftware.com darren@sdmsoftware.com -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich Milburn Sent: Friday, December 15, 2006 6:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO You may recall, there was a similar case when XP came out too - if memory serves, you had to manage XP GPO settings from an XP box - if you opened them on Win2K, there were problems (I can't recall now exactly what those problems were... it would corrupt the policy? Lose the settings?) anyway so there are tons more settings (+ side) and you have to use Vista for now (- side, sorta). I wouldn't be too surprised if they fix that with the next server and XP SP... but I haven't actually heard that. ----------------------------------------------------------------------- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W. 107th St Overland Park, KS 66207 913-967-2819 ---------------------------------------------------------------------- "I love the smell of red herrings in the morning" - anonymous -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia Sent: Thursday, December 14, 2006 4:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO Vista introduces a new Admin Template format called ADMX. These are found on Vista in C:\windows\policydefinitions and, unfortuately cannot be consumed by earlier versions of Windows. That is you must manage Vista GP from Vista. Darren -----Original Message----- From: "Za Vue" To: ActiveDir@mail.activedir.org Sent: 12/14/2006 1:18 PM Subject: Re: [ActiveDir] Vista GPO Sorry. Exactly what Ben wrote. Thanks.. -Z.V. WATSON, BEN wrote: > Maybe he may be referring to the location of any possible new ADM files > included with Vista. > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia > Sent: Thursday, December 14, 2006 10:34 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Vista GPO > > What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3, > unless you mean the LDIF files that are in sources\adprep on the Vista > CD? > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue > Sent: Thursday, December 14, 2006 9:57 AM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] Vista GPO > > Anyone know what and where the GPO plugin for Win2003 on the Vista DVD > is called and located? > > -Z.V. > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this outgoing message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this outgoing message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM

laurarobinson User is Offline

Posts:96

12/15/2006 4:12 AM
v\:* { BEHAVIOR: url(#default#VML) } o\:* { BEHAVIOR: url(#default#VML) } w\:* { BEHAVIOR: url(#default#VML) } .shape { BEHAVIOR: url(#default#VML) } @font-face { font-family: Cambria Math; } @font-face { font-family: Calibri; } @font-face { font-family: Tahoma; } @font-face { font-family: Consolas; } @page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } A:link { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } A:visited { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } PRE { FONT-SIZE: 10pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Courier New"; mso-style-priority: 99; mso-style-link: "HTML Preformatted Char" } SPAN.HTMLPreformattedChar { FONT-FAMILY: Consolas; mso-style-priority: 99; mso-style-link: "HTML Preformatted"; mso-style-name: "HTML Preformatted Char" } SPAN.EmailStyle20 { COLOR: #1f497d; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-reply } .MsoChpDefault { FONT-SIZE: 10pt; mso-style-type: export-only } DIV.Section1 { page: Section1 } Since many of us are in the habit of expressing various opinions, perhaps we should refrain from characterizing those with which we disagree as "the height of professional arrogance" and "misinformed". See, if we start doing that, I might express the opinion that referring to Microsoft's customers as "clueless" and insisting that Microsoft should accommodate"cluelessness" at the expense of new product development, security and code review (which is exactly what the expense is to devote resources to doing nothing but backporting new features)is the height of professional inexperience, myopia and lack of exposure to sophisticated IT environments. But I won't. :-) Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 2:46 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO Tim, it is the height of professionalarrogance to think that anyone who don't/can't/won't do things the way you think they should be done (best practices) are "lazy and uninformed". I know you said that it is just your opinion, and, if I were like you, I would hazard that it is a misinformed opinion. But I won't. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Tim Vander KooiSent: Fri 12/15/2006 10:53 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO They won’t do it if Microsoft makes it so they CAN’T do it. I feel Microsoft should be applauded for forcing admins to do their jobs correctly for a change, instead of giving in to the lazy or uninformed amongst us. Just my opinion, Tim From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 11:39 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-EliaSent: Fri 12/15/2006 9:18 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroupswho thought that the fact that XP and 2003 couldn't read Vista GP settingswas an abomination and a scandal of the highest order and that MS should bebeaten for their insolence (I'm paraphrasing :-)). But, yes, we should allbe used to the fact that sometimes, you have to adopt the new stuff to getthe new toys. People don't seem to have a problem with that concept when itcomes to game consoles :)Darren-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 9:04 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOSorry, I understand it's different, what I meant was merely that we hadsome growing pains like this when XP first came out. Our practice thenbecame to use only XP desktops for GP management. I think there's atendency to think this is such a terrible thing, thisbackwards-incompatibility, and we might forget that Vista is not newwith this, we had similar issues before. And who remembers theteeth-pulling to get people to move to Active Directory??-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Friday, December 15, 2006 10:05 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOThis is actually a little different because if you view a GPO that wascreated with Vista, using XP or 2003, none of the ADMX settings canactuallybe read at all, because they are a completely new format that GPEditororGPMC on those older platforms don't understand. In fact, those XP or2003will happily copy up the ADMs into the Vista GPO like they used to do,andyou're back to each GPO storing ADMs in SYSVOL. What I've beenrecommendingto folks is that once you introduce Vista desktops into yourenvironment,use Vista for all your ongoing GP management. The Vista ADMXs are asupersetof the latest and greatest ADMs (i.e. they include 2003, XP and Vistasettings) so you can happily manage Vista and non-Vista targeted GPsettingsfrom a Vista machine.DarrenDarren Mar-EliaCTO & Founderwww.sdmsoftware.comdarren@sdmsoftware.com-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 6:49 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOYou may recall, there was a similar case when XP came out too - ifmemory serves, you had to manage XP GPO settings from an XP box - if youopened them on Win2K, there were problems (I can't recall now exactlywhat those problems were... it would corrupt the policy? Lose thesettings?) anyway so there are tons more settings (+ side) and you haveto use Vista for now (- side, sorta). I wouldn't be too surprised ifthey fix that with the next server and XP SP... but I haven't actuallyheard that.-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Thursday, December 14, 2006 4:13 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOVista introduces a new Admin Template format called ADMX. These arefound on Vista in C:\windows\policydefinitions and, unfortuately cannotbe consumed by earlier versions of Windows. That is you must manageVista GP from Vista.Darren-----Original Message-----From: "Za Vue" To: ActiveDir@mail.activedir.orgSent: 12/14/2006 1:18 PMSubject: Re: [ActiveDir] Vista GPOSorry. Exactly what Ben wrote.Thanks..-Z.V.WATSON, BEN wrote:> Maybe he may be referring to the location of any possible new ADMfiles> included with Vista.>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of DarrenMar-Elia> Sent: Thursday, December 14, 2006 10:34 AM> To: ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] Vista GPO >> What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3,> unless you mean the LDIF files that are in sources\adprep on the Vista> CD?>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue> Sent: Thursday, December 14, 2006 9:57 AM> To: ActiveDir@mail.activedir.org> Subject: [ActiveDir] Vista GPO >> Anyone know what and where the GPO plugin for Win2003 on the Vista DVD> is called and located?>> -Z.V.> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>>> List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the namedaddressee.If you are not the intended recipient of this message, unauthorizedforwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federalcriminallaw. Applebee's International, Inc. reserves the right to monitor and reviewthe content of all messages sent to and from this e-mail address. Messagessentto or from this e-mail address may be stored on the Applebee'sInternational,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the named addressee.If you are not the intended recipient of this message, unauthorized forwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federal criminallaw. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sentto or from this e-mail address may be stored on the Applebee's International,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/ --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM

AFidel

Posts:71

12/15/2006 4:27 AM
I would say you do server things on the server with your admin ID and do user stuff on your workstation with your workstation ID, so doing GP editing on the workstation isn't best practice, but that's my point of view =) Thanks, Andrew Fidel Tim Vander Kooi Sent by: ActiveDir-owner@mail.activedir.org 12/15/2006 01:53 PM Please respond to ActiveDir@mail.activedir.org To ActiveDir@mail.activedir.org cc Subject RE: [ActiveDir] Vista GPO They won’t do it if Microsoft makes it so they CAN’T do it. I feel Microsoft should be applauded for forcing admins to do their jobs correctly for a change, instead of giving in to the lazy or uninformed amongst us. Just my opinion, Tim From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, Deji Sent: Friday, December 15, 2006 11:39 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_ (_/ /) (/ Microsoft MVP - Directory Services www.akomolafe.com - we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-Elia Sent: Fri 12/15/2006 9:18 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroups who thought that the fact that XP and 2003 couldn't read Vista GP settings was an abomination and a scandal of the highest order and that MS should be beaten for their insolence (I'm paraphrasing :-)). But, yes, we should all be used to the fact that sometimes, you have to adopt the new stuff to get the new toys. People don't seem to have a problem with that concept when it comes to game consoles :) Darren -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich Milburn Sent: Friday, December 15, 2006 9:04 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO Sorry, I understand it's different, what I meant was merely that we had some growing pains like this when XP first came out. Our practice then became to use only XP desktops for GP management. I think there's a tendency to think this is such a terrible thing, this backwards-incompatibility, and we might forget that Vista is not new with this, we had similar issues before. And who remembers the teeth-pulling to get people to move to Active Directory?? ----------------------------------------------------------------------- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W. 107th St Overland Park, KS 66207 913-967-2819 ---------------------------------------------------------------------- "I love the smell of red herrings in the morning" - anonymous -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia Sent: Friday, December 15, 2006 10:05 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO This is actually a little different because if you view a GPO that was created with Vista, using XP or 2003, none of the ADMX settings can actually be read at all, because they are a completely new format that GPEditor or GPMC on those older platforms don't understand. In fact, those XP or 2003 will happily copy up the ADMs into the Vista GPO like they used to do, and you're back to each GPO storing ADMs in SYSVOL. What I've been recommending to folks is that once you introduce Vista desktops into your environment, use Vista for all your ongoing GP management. The Vista ADMXs are a superset of the latest and greatest ADMs (i.e. they include 2003, XP and Vista settings) so you can happily manage Vista and non-Vista targeted GP settings from a Vista machine. Darren Darren Mar-Elia CTO & Founder www.sdmsoftware.com darren@sdmsoftware.com -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich Milburn Sent: Friday, December 15, 2006 6:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO You may recall, there was a similar case when XP came out too - if memory serves, you had to manage XP GPO settings from an XP box - if you opened them on Win2K, there were problems (I can't recall now exactly what those problems were... it would corrupt the policy? Lose the settings?) anyway so there are tons more settings (+ side) and you have to use Vista for now (- side, sorta). I wouldn't be too surprised if they fix that with the next server and XP SP... but I haven't actually heard that. ----------------------------------------------------------------------- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W. 107th St Overland Park, KS 66207 913-967-2819 ---------------------------------------------------------------------- "I love the smell of red herrings in the morning" - anonymous -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia Sent: Thursday, December 14, 2006 4:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO Vista introduces a new Admin Template format called ADMX. These are found on Vista in C:\windows\policydefinitions and, unfortuately cannot be consumed by earlier versions of Windows. That is you must manage Vista GP from Vista. Darren -----Original Message----- From: "Za Vue" To: ActiveDir@mail.activedir.org Sent: 12/14/2006 1:18 PM Subject: Re: [ActiveDir] Vista GPO Sorry. Exactly what Ben wrote. Thanks.. -Z.V. WATSON, BEN wrote: > Maybe he may be referring to the location of any possible new ADM files > included with Vista. > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia > Sent: Thursday, December 14, 2006 10:34 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Vista GPO > > What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3, > unless you mean the LDIF files that are in sources\adprep on the Vista > CD? > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue > Sent: Thursday, December 14, 2006 9:57 AM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] Vista GPO > > Anyone know what and where the GPO plugin for Win2003 on the Vista DVD > is called and located? > > -Z.V. > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

deji

Posts:140

tvanderkooi User is Offline

Posts:15

12/15/2006 4:49 AM
v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} Then we can agree to disagree. Personally I don’t believe that it is arrogant to say that there is a right way and wrong way in some instances, if it is true. In this case I believe it is. From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, Deji Sent: Friday, December 15, 2006 1:46 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO Tim, it is the height of professionalarrogance to think that anyone who don't/can't/won't do things the way you think they should be done (best practices) are "lazy and uninformed". I know you said that it is just your opinion, and, if I were like you, I would hazard that it is a misinformed opinion. But I won't. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_ (_/ /) (/ Microsoft MVP - Directory Services www.akomolafe.com- we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Tim Vander Kooi Sent: Fri 12/15/2006 10:53 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO They won’t do it if Microsoft makes it so they CAN’T do it. I feel Microsoft should be applauded for forcing admins to do their jobs correctly for a change, instead of giving in to the lazy or uninformed amongst us. Just my opinion, Tim From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, Deji Sent: Friday, December 15, 2006 11:39 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_ (_/ /) (/ Microsoft MVP - Directory Services www.akomolafe.com- we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-Elia Sent: Fri 12/15/2006 9:18 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroupswho thought that the fact that XP and 2003 couldn't read Vista GP settingswas an abomination and a scandal of the highest order and that MS should bebeaten for their insolence (I'm paraphrasing :-)). But, yes, we should allbe used to the fact that sometimes, you have to adopt the new stuff to getthe new toys. People don't seem to have a problem with that concept when itcomes to game consoles :)Darren-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 9:04 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOSorry, I understand it's different, what I meant was merely that we hadsome growing pains like this when XP first came out. Our practice thenbecame to use only XP desktops for GP management. I think there's atendency to think this is such a terrible thing, thisbackwards-incompatibility, and we might forget that Vista is not newwith this, we had similar issues before. And who remembers theteeth-pulling to get people to move to Active Directory??-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Friday, December 15, 2006 10:05 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOThis is actually a little different because if you view a GPO that wascreated with Vista, using XP or 2003, none of the ADMX settings canactuallybe read at all, because they are a completely new format that GPEditororGPMC on those older platforms don't understand. In fact, those XP or2003will happily copy up the ADMs into the Vista GPO like they used to do,andyou're back to each GPO storing ADMs in SYSVOL. What I've beenrecommendingto folks is that once you introduce Vista desktops into yourenvironment,use Vista for all your ongoing GP management. The Vista ADMXs are asupersetof the latest and greatest ADMs (i.e. they include 2003, XP and Vistasettings) so you can happily manage Vista and non-Vista targeted GPsettingsfrom a Vista machine.DarrenDarren Mar-EliaCTO & Founderwww.sdmsoftware.comdarren@sdmsoftware.com-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 6:49 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOYou may recall, there was a similar case when XP came out too - ifmemory serves, you had to manage XP GPO settings from an XP box - if youopened them on Win2K, there were problems (I can't recall now exactlywhat those problems were... it would corrupt the policy? Lose thesettings?) anyway so there are tons more settings (+ side) and you haveto use Vista for now (- side, sorta). I wouldn't be too surprised ifthey fix that with the next server and XP SP... but I haven't actuallyheard that.-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Thursday, December 14, 2006 4:13 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOVista introduces a new Admin Template format called ADMX. These arefound on Vista in C:\windows\policydefinitions and, unfortuately cannotbe consumed by earlier versions of Windows. That is you must manageVista GP from Vista.Darren-----Original Message-----From: "Za Vue" To: ActiveDir@mail.activedir.orgSent: 12/14/2006 1:18 PMSubject: Re: [ActiveDir] Vista GPOSorry. Exactly what Ben wrote.Thanks..-Z.V.WATSON, BEN wrote:> Maybe he may be referring to the location of any possible new ADMfiles> included with Vista.>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of DarrenMar-Elia> Sent: Thursday, December 14, 2006 10:34 AM> To: ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] Vista GPO >> What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3,> unless you mean the LDIF files that are in sources\adprep on the Vista> CD?>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue> Sent: Thursday, December 14, 2006 9:57 AM> To: ActiveDir@mail.activedir.org> Subject: [ActiveDir] Vista GPO >> Anyone know what and where the GPO plugin for Win2003 on the Vista DVD> is called and located?>> -Z.V.> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>>> List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the namedaddressee.If you are not the intended recipient of this message, unauthorizedforwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federalcriminallaw. Applebee's International, Inc. reserves the right to monitor and reviewthe content of all messages sent to and from this e-mail address. Messagessentto or from this e-mail address may be stored on the Applebee'sInternational,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the named addressee.If you are not the intended recipient of this message, unauthorized forwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federal criminallaw. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sentto or from this e-mail address may be stored on the Applebee's International,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/

laurarobinson User is Offline

Posts:96

12/15/2006 5:10 AM
v\:* { BEHAVIOR: url(#default#VML) } o\:* { BEHAVIOR: url(#default#VML) } w\:* { BEHAVIOR: url(#default#VML) } .shape { BEHAVIOR: url(#default#VML) } @font-face { font-family: Cambria Math; } @font-face { font-family: Calibri; } @font-face { font-family: Tahoma; } @font-face { font-family: Consolas; } @page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } A:link { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } A:visited { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } P { FONT-SIZE: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; FONT-FAMILY: "Times New Roman","serif"; mso-style-priority: 99; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto } PRE { FONT-SIZE: 10pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Courier New"; mso-style-priority: 99; mso-style-link: "HTML Preformatted Char" } SPAN.HTMLPreformattedChar { FONT-FAMILY: Consolas; mso-style-priority: 99; mso-style-link: "HTML Preformatted"; mso-style-name: "HTML Preformatted Char" } SPAN.EmailStyle21 { COLOR: #1f497d; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-reply } .MsoChpDefault { FONT-SIZE: 10pt; mso-style-type: export-only } DIV.Section1 { page: Section1 } We're releasing the Vista management tools for Windows ME at the same time that we release them for Microsoft Bob, IIRC. ;-) Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Tim Vander KooiSent: Friday, December 15, 2006 3:49 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO Well said. But while you’re at it, could you let someone know that I very upset that I can’t manage my Vista GPOs from my Windows ME PC. Thanks much. ;-) From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura A. RobinsonSent: Friday, December 15, 2006 1:26 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO And it's the clueful customers who (rightly) become angry when something in a product that exists purely for backward compatibility opens a security hole. Now, I'm not saying that all security holes are due to backward compatibility, and I'm not saying that every bit of code that comes out of Redmond is perfect. However, I have said for years that many of the things that people don't like about Microsoft's products are the result of backward compatibility, not bad coding or a lack of consideration on the part of Microsoft's programmers. As somebody else (Darren? Richard?) said, there is a point where a line has to be drawn in the sand. I personally don't see anything dictatorial about requiring a Vista+ machine to edit VISTA policies. I mean, seriously, if you're writing Vista GPOs, that would imply that you're using Vista machines, and if you're using Vista machines, what is the issue with using one of those Vista machines as your editing workstation? I think that that IS a very pragmatic, realistic approach. Sorry, I just don't follow your logic on this one. That said, my opinions are purely my own, do not represent those of my employer, are not intended to represent those ofmy employer and for all I know, may even pi$$ off my employer. :-) Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 1:42 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I wouldn't put it in those words. But, yeah, I would expect Microsoft to be... shall we say...pragmatic, realistic. Something like, "enable" its customers to run their businesses. I mean,refrain from "dictating" its wishes. You know? Because at the end of the day, it is the "clueless customers" that actually write the checks that add up to those billions in the vault. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Laura A. RobinsonSent: Fri 12/15/2006 10:19 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO So Microsoft should encourage their bad practices? Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 12:39 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-EliaSent: Fri 12/15/2006 9:18 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroupswho thought that the fact that XP and 2003 couldn't read Vista GP settingswas an abomination and a scandal of the highest order and that MS should bebeaten for their insolence (I'm paraphrasing :-)). But, yes, we should allbe used to the fact that sometimes, you have to adopt the new stuff to getthe new toys. People don't seem to have a problem with that concept when itcomes to game consoles :)Darren-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 9:04 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOSorry, I understand it's different, what I meant was merely that we hadsome growing pains like this when XP first came out. Our practice thenbecame to use only XP desktops for GP management. I think there's atendency to think this is such a terrible thing, thisbackwards-incompatibility, and we might forget that Vista is not newwith this, we had similar issues before. And who remembers theteeth-pulling to get people to move to Active Directory??-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Friday, December 15, 2006 10:05 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOThis is actually a little different because if you view a GPO that wascreated with Vista, using XP or 2003, none of the ADMX settings canactuallybe read at all, because they are a completely new format that GPEditororGPMC on those older platforms don't understand. In fact, those XP or2003will happily copy up the ADMs into the Vista GPO like they used to do,andyou're back to each GPO storing ADMs in SYSVOL. What I've beenrecommendingto folks is that once you introduce Vista desktops into yourenvironment,use Vista for all your ongoing GP management. The Vista ADMXs are asupersetof the latest and greatest ADMs (i.e. they include 2003, XP and Vistasettings) so you can happily manage Vista and non-Vista targeted GPsettingsfrom a Vista machine.DarrenDarren Mar-EliaCTO & Founderwww.sdmsoftware.comdarren@sdmsoftware.com-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 6:49 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOYou may recall, there was a similar case when XP came out too - ifmemory serves, you had to manage XP GPO settings from an XP box - if youopened them on Win2K, there were problems (I can't recall now exactlywhat those problems were... it would corrupt the policy? Lose thesettings?) anyway so there are tons more settings (+ side) and you haveto use Vista for now (- side, sorta). I wouldn't be too surprised ifthey fix that with the next server and XP SP... but I haven't actuallyheard that.-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Thursday, December 14, 2006 4:13 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOVista introduces a new Admin Template format called ADMX. These arefound on Vista in C:\windows\policydefinitions and, unfortuately cannotbe consumed by earlier versions of Windows. That is you must manageVista GP from Vista.Darren-----Original Message-----From: "Za Vue" To: ActiveDir@mail.activedir.orgSent: 12/14/2006 1:18 PMSubject: Re: [ActiveDir] Vista GPOSorry. Exactly what Ben wrote.Thanks..-Z.V.WATSON, BEN wrote:> Maybe he may be referring to the location of any possible new ADMfiles> included with Vista.>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of DarrenMar-Elia> Sent: Thursday, December 14, 2006 10:34 AM> To: ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] Vista GPO >> What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3,> unless you mean the LDIF files that are in sources\adprep on the Vista> CD?>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue> Sent: Thursday, December 14, 2006 9:57 AM> To: ActiveDir@mail.activedir.org> Subject: [ActiveDir] Vista GPO >> Anyone know what and where the GPO plugin for Win2003 on the Vista DVD> is called and located?>> -Z.V.> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>>> List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the namedaddressee.If you are not the intended recipient of this message, unauthorizedforwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federalcriminallaw. Applebee's International, Inc. reserves the right to monitor and reviewthe content of all messages sent to and from this e-mail address. Messagessentto or from this e-mail address may be stored on the Applebee'sInternational,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the named addressee.If you are not the intended recipient of this message, unauthorized forwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federal criminallaw. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sentto or from this e-mail address may be stored on the Applebee's International,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/ --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this outgoing message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this outgoing message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM

deji

Posts:140

12/15/2006 5:36 AM
v\:* { BEHAVIOR: url(#default#VML) } o\:* { BEHAVIOR: url(#default#VML) } w\:* { BEHAVIOR: url(#default#VML) } .shape { BEHAVIOR: url(#default#VML) } @font-face { font-family: Cambria Math; } @font-face { font-family: Calibri; } @font-face { font-family: Tahoma; } @font-face { font-family: Consolas; } @page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } A:link { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } A:visited { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } PRE { FONT-SIZE: 10pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Courier New"; mso-style-priority: 99; mso-style-link: "HTML Preformatted Char" } SPAN.HTMLPreformattedChar { FONT-FAMILY: Consolas; mso-style-priority: 99; mso-style-link: "HTML Preformatted"; mso-style-name: "HTML Preformatted Char" } SPAN.EmailStyle20 { COLOR: #1f497d; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-reply } .MsoChpDefault { FONT-SIZE: 10pt; mso-style-type: export-only } DIV.Section1 { page: Section1 } Again, you are projecting. I don't call MS customers "clueless". Why? Because I don't believe they are. Now, will I sometimes call some MS people arrogant? It depends. Will I take offence if someone thinks I lack exposure to "sophisticated IT environments"? No, Never. Why? Probably because I move around a lot in the real world, and "sophisticated IT environments" are very hard to come by. I've read and heard that there are plenty of them in silos. I just haven't seen enough of them to convince me that they come close to the numberunevolved IT environments I deal with on regular basis. Come to think of it, I have a bunch of MS technical and marketing materials that speak to how much technical, financial and marketing effort MS is going to expend this year and next getting a whopping 60% of its customer-base to the "Rationalized" stage of optimization. Mind you, they are not shooting for "Dynamic". Certainly not "Sophisticated". So, yeah, there are more of us than there are of you out there, so you better start factoring us in when you make decisions that affect how we do things. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Laura A. RobinsonSent: Fri 12/15/2006 1:12 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO Since many of us are in the habit of expressing various opinions, perhaps we should refrain from characterizing those with which we disagree as "the height of professional arrogance" and "misinformed". See, if we start doing that, I might express the opinion that referring to Microsoft's customers as "clueless" and insisting that Microsoft should accommodate"cluelessness" at the expense of new product development, security and code review (which is exactly what the expense is to devote resources to doing nothing but backporting new features)is the height of professional inexperience, myopia and lack of exposure to sophisticated IT environments. But I won't. :-) Laura From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 2:46 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO Tim, it is the height of professionalarrogance to think that anyone who don't/can't/won't do things the way you think they should be done (best practices) are "lazy and uninformed". I know you said that it is just your opinion, and, if I were like you, I would hazard that it is a misinformed opinion. But I won't. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Tim Vander KooiSent: Fri 12/15/2006 10:53 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO They won’t do it if Microsoft makes it so they CAN’T do it. I feel Microsoft should be applauded for forcing admins to do their jobs correctly for a change, instead of giving in to the lazy or uninformed amongst us. Just my opinion, Tim From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Akomolafe, DejiSent: Friday, December 15, 2006 11:39 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO >>> People don't seem to have a problem with that concept when it comes to game consoles :) Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then you can come back and compare. For now, it's just plain incomprehensible that you can't manage ADMX from anything but Vista. Yeah, ideally we would want to encourage clients to NOT manage things directly from servers, and to ensure that IF they are going to introduce Vista, the IT folks' machines should be doing the dog-fooding, but realistically, the "ideal" is always the exception in this field. Microsoft should know that. People will insist on managing GPO directly from the DCs, best practices be damned. Sincerely, _____ (, / \| /) /) /) /---\| (/_ ______ ___// _ // _ ) / \|_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Darren Mar-EliaSent: Fri 12/15/2006 9:18 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPO I hear you Rich. I had a long discussion with someone on the GP newsgroupswho thought that the fact that XP and 2003 couldn't read Vista GP settingswas an abomination and a scandal of the highest order and that MS should bebeaten for their insolence (I'm paraphrasing :-)). But, yes, we should allbe used to the fact that sometimes, you have to adopt the new stuff to getthe new toys. People don't seem to have a problem with that concept when itcomes to game consoles :)Darren-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 9:04 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOSorry, I understand it's different, what I meant was merely that we hadsome growing pains like this when XP first came out. Our practice thenbecame to use only XP desktops for GP management. I think there's atendency to think this is such a terrible thing, thisbackwards-incompatibility, and we might forget that Vista is not newwith this, we had similar issues before. And who remembers theteeth-pulling to get people to move to Active Directory??-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Friday, December 15, 2006 10:05 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOThis is actually a little different because if you view a GPO that wascreated with Vista, using XP or 2003, none of the ADMX settings canactuallybe read at all, because they are a completely new format that GPEditororGPMC on those older platforms don't understand. In fact, those XP or2003will happily copy up the ADMs into the Vista GPO like they used to do,andyou're back to each GPO storing ADMs in SYSVOL. What I've beenrecommendingto folks is that once you introduce Vista desktops into yourenvironment,use Vista for all your ongoing GP management. The Vista ADMXs are asupersetof the latest and greatest ADMs (i.e. they include 2003, XP and Vistasettings) so you can happily manage Vista and non-Vista targeted GPsettingsfrom a Vista machine.DarrenDarren Mar-EliaCTO & Founderwww.sdmsoftware.comdarren@sdmsoftware.com-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rich MilburnSent: Friday, December 15, 2006 6:49 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOYou may recall, there was a similar case when XP came out too - ifmemory serves, you had to manage XP GPO settings from an XP box - if youopened them on Win2K, there were problems (I can't recall now exactlywhat those problems were... it would corrupt the policy? Lose thesettings?) anyway so there are tons more settings (+ side) and you haveto use Vista for now (- side, sorta). I wouldn't be too surprised ifthey fix that with the next server and XP SP... but I haven't actuallyheard that.-----------------------------------------------------------------------Rich MilburnMCSE, Microsoft MVP - Directory ServicesSr Network Analyst, Field Platform DevelopmentApplebee's International, Inc.4551 W. 107th StOverland Park, KS 66207913-967-2819----------------------------------------------------------------------"I love the smell of red herrings in the morning" - anonymous-----Original Message-----From: ActiveDir-owner@mail.activedir.org[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-EliaSent: Thursday, December 14, 2006 4:13 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Vista GPOVista introduces a new Admin Template format called ADMX. These arefound on Vista in C:\windows\policydefinitions and, unfortuately cannotbe consumed by earlier versions of Windows. That is you must manageVista GP from Vista.Darren-----Original Message-----From: "Za Vue" To: ActiveDir@mail.activedir.orgSent: 12/14/2006 1:18 PMSubject: Re: [ActiveDir] Vista GPOSorry. Exactly what Ben wrote.Thanks..-Z.V.WATSON, BEN wrote:> Maybe he may be referring to the location of any possible new ADMfiles> included with Vista.>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of DarrenMar-Elia> Sent: Thursday, December 14, 2006 10:34 AM> To: ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] Vista GPO >> What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3,> unless you mean the LDIF files that are in sources\adprep on the Vista> CD?>> -----Original Message-----> From: ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Za Vue> Sent: Thursday, December 14, 2006 9:57 AM> To: ActiveDir@mail.activedir.org> Subject: [ActiveDir] Vista GPO >> Anyone know what and where the GPO plugin for Win2003 on the Vista DVD> is called and located?>> -Z.V.> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/> List info : http://www.activedir.org/List.aspx> List FAQ : http://www.activedir.org/ListFAQ.aspx> List archive:http://www.mail-archive.com/activedir@mail.activedir.org/>>> List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the namedaddressee.If you are not the intended recipient of this message, unauthorizedforwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federalcriminallaw. Applebee's International, Inc. reserves the right to monitor and reviewthe content of all messages sent to and from this e-mail address. Messagessentto or from this e-mail address may be stored on the Applebee'sInternational,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or anyattachments. This information is strictly confidential and may be subject toattorney-client privilege. This message is intended only for the use of the named addressee.If you are not the intended recipient of this message, unauthorized forwarding,printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, youshould kindly notify the sender by reply e-mail and immediately destroy thismessage. Unauthorized interception of this e-mail is a violation of federal criminallaw. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sentto or from this e-mail address may be stored on the Applebee's International,Inc. e-mail system.List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir@mail.activedir.org/ --No virus found in this incoming message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM --No virus found in this outgoing message.Checked by AVG Free Edition.Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM

darren

Posts:164

12/15/2006 6:00 AM

v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}

I suspect this thread is creeping ever-so-close to the heralded “beaten-to-death”
status, but let me add a line of thought here that I alluded to earlier.

Deji, as I mentioned, there is nothing technically hard in
allowing 2003 or XP systems to edit Administrative Template policy for Vista
machines. The ADMX is, in simplified terms, ADM in XML. So, if enough people
wanted it, I or someone could probably write a parser that would take

Syndicate

Friends

List Archives

List Archives