| Author | Messages | |
Servernet
Posts:8
 | | 08/12/2008 8:31 AM |
|
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
_________________________________________________________________
Win New York holidays with Kellogg’s & Live Search
http://clk.atdmt.com/UKM/go/107571440/direct/01/
| | | |
| neilruston
Posts:155
| | 08/12/2008 8:38 AM |
| Did the Migrator tool simply change the permissions on the OU so that your friend no longer had read access?
Not sure about the Yellow triangle bit :/
neil
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Steven Griffiths
Sent: 12 August 2008 08:21
To: ActiveDir.Org@
Subject: [ActiveDir] 'Disappearing' OU
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
________________________________
Win £3000 to spend on whatever you want at Uni! Click here to WIN! <http://clk.atdmt.com/UKM/go/101719803/direct/01/>
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| Servernet
Posts:8
| | 08/12/2008 8:46 AM |
|
Neil,
No, the permissions were not changed. The OU is pre-created and the objects selected in NDS Migrator are just created in the OU. NDS Migrator doesn't touch OU permissions in Active Directory. I was more intrigued with the yellow triangle bit, but the more I think about it, the more I'm inclined to think he was looking at GPMC.
Steve G
Subject: RE: [ActiveDir] 'Disappearing' OUDate: Tue, 12 Aug 2008 13:34:52 +0100From: neil.ruston@barclayswealth.comTo: ActiveDir@mail.activedir.org
Did the Migrator tool simply change the permissions on the OU so that your friend no longer had read access?
Not sure about the Yellow triangle bit :/
neil
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Steven GriffithsSent: 12 August 2008 08:21To: ActiveDir.Org@Subject: [ActiveDir] 'Disappearing' OU
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
Win £3000 to spend on whatever you want at Uni! Click here to WIN!
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
_________________________________________________________________
Win New York holidays with Kellogg’s & Live Search
http://clk.atdmt.com/UKM/go/107571440/direct/01/
| | | |
| amulnick
Posts:138
| | 08/12/2008 1:40 PM |
| | That sounds more plausible, but it might be that he's looking with some
other tools as well. Too many ifs. You may want to look over his shoulder
and see what he sees.
Hard to imagine the type changed on him, but with migration tools you can't
be too careful.
Al
On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths <servernet1997@hotmail.com
> wrote:
> Neil,
>
> No, the permissions were not changed. The OU is pre-created and the objects
> selected in NDS Migrator are just created in the OU. NDS Migrator doesn't
> touch OU permissions in Active Directory. I was more intrigued with the
> yellow triangle bit, but the more I think about it, the more I'm inclined to
> think he was looking at GPMC.
>
> Steve G
>
>
> ------------------------------
>
> Subject: RE: [ActiveDir] 'Disappearing' OU
> Date: Tue, 12 Aug 2008 13:34:52 +0100
> From: neil.ruston@barclayswealth.com
> To: ActiveDir@mail.activedir.org
>
>
>
> Did the Migrator tool simply change the permissions on the OU so that
> your friend no longer had read access?
>
>
>
> Not sure about the Yellow triangle bit :/
>
>
>
>
> neil
> ------------------------------
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Steven Griffiths
> *Sent:* 12 August 2008 08:21
> *To:* ActiveDir.Org@
> *Subject:* [ActiveDir] 'Disappearing' OU
>
>
>
> Yesterday evening I was asked by a colleague to join a support call with
> Microsoft and a customer to discuss some issues he was having in the
> customer's environment. My colleague is performing an NDS to Active
> Directory migration using Quest's NDS Migrator. One of the issues he
> encountered was that an OU he had created and migrated some user accounts
> into had 'disappeared'. I qualify the word 'disappeared' because, while his
> OU had disappeared, it had been replaced in ADUC with an object of type
> 'Unknown'. Prior to this transition from a perfectly healthy OU to an object
> of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow
> warning triangle. I had to say, I'd never come across an OU in ADUC that
> included a yellow warning triangle as part of its icon, so couldn't offer
> him any explanation, but wondered if anyone else had witnessed this
> phenomenon? I did wonder if he'd working too many hours and was confusing
> ADUC with GPMC, but he claims not!
> ------------------------------
>
> Win £3000 to spend on whatever you want at Uni! Click here to WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
> ------------------------------
> Barclays Wealth is the wealth management division of Barclays Bank PLC.
> This email may relate to or be sent from other members of the Barclays
> Group.
>
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
> Barclays Bank PLC. Registered in England and Wales (registered no.
> 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
>
> ------------------------------
> Get fish-slapping on Messenger! Play Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
>
>
| | | |
| bdesmond
Posts:374
| | 08/12/2008 3:23 PM |
| The old GPO editor property page used to show yellow warning triangle icons. I never knew why.
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Tuesday, August 12, 2008 2:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
I don't know of any type with a triangle in it. If the permissions are horked it will be one of those non-descript folder icons and the type will be listed as Unknown.
The quickest way to work out what is happening is to type
adfind -gcb -f ou=ouname
If it is there and you have permission to it, it will come up.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
Sent: Tuesday, August 12, 2008 1:36 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] 'Disappearing' OU
That sounds more plausible, but it might be that he's looking with some other tools as well. Too many ifs. You may want to look over his shoulder and see what he sees.
Hard to imagine the type changed on him, but with migration tools you can't be too careful.
Al
On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
Neil,
No, the permissions were not changed. The OU is pre-created and the objects selected in NDS Migrator are just created in the OU. NDS Migrator doesn't touch OU permissions in Active Directory. I was more intrigued with the yellow triangle bit, but the more I think about it, the more I'm inclined to think he was looking at GPMC.
Steve G
________________________________
Subject: RE: [ActiveDir] 'Disappearing' OU
Date: Tue, 12 Aug 2008 13:34:52 +0100
From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Did the Migrator tool simply change the permissions on the OU so that your friend no longer had read access?
Not sure about the Yellow triangle bit :/
neil
________________________________
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Steven Griffiths
Sent: 12 August 2008 08:21
To: ActiveDir.Org@
Subject: [ActiveDir] 'Disappearing' OU
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
________________________________
Win £3000 to spend on whatever you want at Uni! Click here to WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
________________________________
Get fish-slapping on Messenger! Play Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
| | | |
| Ravi.Sabharanjak@barclaysglobal.com
Posts:70
| | 08/12/2008 3:28 PM |
| Does it do that because the inheritance is blocked?
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
Sent: Tuesday, August 12, 2008 12:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
The old GPO editor property page used to show yellow warning triangle icons. I never knew why.
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Tuesday, August 12, 2008 2:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
I don't know of any type with a triangle in it. If the permissions are horked it will be one of those non-descript folder icons and the type will be listed as Unknown.
The quickest way to work out what is happening is to type
adfind -gcb -f ou=ouname
If it is there and you have permission to it, it will come up.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
Sent: Tuesday, August 12, 2008 1:36 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] 'Disappearing' OU
That sounds more plausible, but it might be that he's looking with some other tools as well. Too many ifs. You may want to look over his shoulder and see what he sees.
Hard to imagine the type changed on him, but with migration tools you can't be too careful.
Al
On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths <servernet1997@hotmail.com> wrote:
Neil,
No, the permissions were not changed. The OU is pre-created and the objects selected in NDS Migrator are just created in the OU. NDS Migrator doesn't touch OU permissions in Active Directory. I was more intrigued with the yellow triangle bit, but the more I think about it, the more I'm inclined to think he was looking at GPMC.
Steve G
________________________________
Subject: RE: [ActiveDir] 'Disappearing' OU
Date: Tue, 12 Aug 2008 13:34:52 +0100
From: neil.ruston@barclayswealth.com
To: ActiveDir@mail.activedir.org
Did the Migrator tool simply change the permissions on the OU so that your friend no longer had read access?
Not sure about the Yellow triangle bit :/
neil
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Steven Griffiths
Sent: 12 August 2008 08:21
To: ActiveDir.Org@
Subject: [ActiveDir] 'Disappearing' OU
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
________________________________
Win £3000 to spend on whatever you want at Uni! Click here to WIN! <http://clk.atdmt.com/UKM/go/101719803/direct/01/>
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
________________________________
Get fish-slapping on Messenger! Play Now <http://clk.atdmt.com/UKM/go/101719805/direct/01/>
--
This message and any attachments are confidential, proprietary, and may be privileged. If this message was misdirected, Barclays Global Investors (BGI) does not waive any confidentiality or privilege. If you are not the intended recipient, please notify us immediately and destroy the message without disclosing its contents to anyone. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. The views and opinions expressed in this e-mail message are the author's own and may not reflect the views and opinions of BGI, unless the author is authorized by BGI to express such views or opinions on its behalf. All email sent to or from this address is subject to electronic storage and review by BGI. Although BGI operates anti-virus programs, it does not accept responsibility for any damage whatsoever caused by viruses being passed.
| | | |
| ASteele
Posts:12
| | 08/12/2008 3:36 PM |
| http://support.microsoft.com/kb/842214
Appearance
Description
A yellow triangle that contains a black exclamation point (!).
This icon indicates that the Disable User Configuration settings option or the Disable Computer Configuration settings option is turned on for the GPO.
A yellow triangle that contains a red circle with a white "x."
This icon indicates that the Disable User Configuration settings option and the Disable Computer Configuration settings option are turned on for the GPO.
Note The Disable User Configuration settings option and the Disable Computer Configuration settings option are available in Microsoft Windows 2000 Server. However, the GPO icons are not available in Windows 2000 Server.
To locate these GPO settings in the Active Directory Users and Computers tool, follow these steps:
1.
Start the Active Directory Users and Computers tool.
2.
Right-click the domain that you want, click Properties, and then click the Group Policy tab.
The Disable User Configuration settings option and the Disable Computer Configuration settings option appear in the Policy Properties dialog box.
Aaron Steele
PointBridge | Consultant
M: 773.580.8099
EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>
Do you have Office Communicator? Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or Call Me<tel:asteele@pointbridge.com>.
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi BGI SF
Sent: Tuesday, August 12, 2008 2:25 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
Does it do that because the inheritance is blocked?
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
Sent: Tuesday, August 12, 2008 12:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
The old GPO editor property page used to show yellow warning triangle icons. I never knew why.
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Tuesday, August 12, 2008 2:12 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
I don't know of any type with a triangle in it. If the permissions are horked it will be one of those non-descript folder icons and the type will be listed as Unknown.
The quickest way to work out what is happening is to type
adfind -gcb -f ou=ouname
If it is there and you have permission to it, it will come up.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
Sent: Tuesday, August 12, 2008 1:36 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] 'Disappearing' OU
That sounds more plausible, but it might be that he's looking with some other tools as well. Too many ifs. You may want to look over his shoulder and see what he sees.
Hard to imagine the type changed on him, but with migration tools you can't be too careful.
Al
On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
Neil,
No, the permissions were not changed. The OU is pre-created and the objects selected in NDS Migrator are just created in the OU. NDS Migrator doesn't touch OU permissions in Active Directory. I was more intrigued with the yellow triangle bit, but the more I think about it, the more I'm inclined to think he was looking at GPMC.
Steve G
________________________________
Subject: RE: [ActiveDir] 'Disappearing' OU
Date: Tue, 12 Aug 2008 13:34:52 +0100
From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Did the Migrator tool simply change the permissions on the OU so that your friend no longer had read access?
Not sure about the Yellow triangle bit :/
neil
________________________________
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Steven Griffiths
Sent: 12 August 2008 08:21
To: ActiveDir.Org@
Subject: [ActiveDir] 'Disappearing' OU
Yesterday evening I was asked by a colleague to join a support call with Microsoft and a customer to discuss some issues he was having in the customer's environment. My colleague is performing an NDS to Active Directory migration using Quest's NDS Migrator. One of the issues he encountered was that an OU he had created and migrated some user accounts into had 'disappeared'. I qualify the word 'disappeared' because, while his OU had disappeared, it had been replaced in ADUC with an object of type 'Unknown'. Prior to this transition from a perfectly healthy OU to an object of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow warning triangle. I had to say, I'd never come across an OU in ADUC that included a yellow warning triangle as part of its icon, so couldn't offer him any explanation, but wondered if anyone else had witnessed this phenomenon? I did wonder if he'd working too many hours and was confusing ADUC with GPMC, but he claims not!
________________________________
Win £3000 to spend on whatever you want at Uni! Click here to WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
________________________________
Get fish-slapping on Messenger! Play Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
--
This message and any attachments are confidential, proprietary, and may be privileged. If this message was misdirected, Barclays Global Investors (BGI) does not waive any confidentiality or privilege. If you are not the intended recipient, please notify us immediately and destroy the message without disclosing its contents to anyone. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. The views and opinions expressed in this e-mail message are the author's own and may not reflect the views and opinions of BGI, unless the author is authorized by BGI to express such views or opinions on its behalf. All email sent to or from this address is subject to electronic storage and review by BGI. Although BGI operates anti-virus programs, it does not accept responsibility for any damage whatsoever caused by viruses being passed.
| | | |
| amulnick
Posts:138
| | 08/12/2008 4:30 PM |
| | Right. Gpmc shows that but aduc should not. I stick by the idea of
verifying its not a late night mirage. Checking via ldp would be a
close second step.
On 8/12/08, Aaron Steele <ASteele@pointbridge.com> wrote:
> http://support.microsoft.com/kb/842214
>
> Appearance
>
> Description
>
> A yellow triangle that contains a black exclamation point (!).
>
> This icon indicates that the Disable User Configuration settings option or
> the Disable Computer Configuration settings option is turned on for the GPO.
>
> A yellow triangle that contains a red circle with a white "x."
>
> This icon indicates that the Disable User Configuration settings option and
> the Disable Computer Configuration settings option are turned on for the
> GPO.
>
> Note The Disable User Configuration settings option and the Disable Computer
> Configuration settings option are available in Microsoft Windows 2000
> Server. However, the GPO icons are not available in Windows 2000 Server.
>
> To locate these GPO settings in the Active Directory Users and Computers
> tool, follow these steps:
> 1.
>
> Start the Active Directory Users and Computers tool.
>
> 2.
>
> Right-click the domain that you want, click Properties, and then click the
> Group Policy tab.
>
> The Disable User Configuration settings option and the Disable Computer
> Configuration settings option appear in the Policy Properties dialog box.
>
>
>
> Aaron Steele
> PointBridge | Consultant
> M: 773.580.8099
> EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>
> Do you have Office Communicator?
> Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with
> PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or
> Call Me<tel:asteele@pointbridge.com>.
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi
> BGI SF
> Sent: Tuesday, August 12, 2008 2:25 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
>
> Does it do that because the inheritance is blocked?
>
> ________________________________
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
> Sent: Tuesday, August 12, 2008 12:18 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> The old GPO editor property page used to show yellow warning triangle icons.
> I never knew why.
>
> Thanks,
> Brian Desmond
> brian@briandesmond.com
>
> c - 312.731.3132
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
> Sent: Tuesday, August 12, 2008 2:12 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> I don't know of any type with a triangle in it. If the permissions are
> horked it will be one of those non-descript folder icons and the type will
> be listed as Unknown.
>
> The quickest way to work out what is happening is to type
>
> adfind -gcb -f ou=ouname
>
> If it is there and you have permission to it, it will come up.
>
>
> --
> O'Reilly Active Directory Third Edition -
> http://www.joeware.net/win/ad3e.htm
>
>
>
> ________________________________
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
> Sent: Tuesday, August 12, 2008 1:36 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] 'Disappearing' OU
> That sounds more plausible, but it might be that he's looking with some
> other tools as well. Too many ifs. You may want to look over his shoulder
> and see what he sees.
>
> Hard to imagine the type changed on him, but with migration tools you can't
> be too careful.
>
> Al
> On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths
> <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
> Neil,
>
> No, the permissions were not changed. The OU is pre-created and the objects
> selected in NDS Migrator are just created in the OU. NDS Migrator doesn't
> touch OU permissions in Active Directory. I was more intrigued with the
> yellow triangle bit, but the more I think about it, the more I'm inclined to
> think he was looking at GPMC.
>
> Steve G
> ________________________________
>
> Subject: RE: [ActiveDir] 'Disappearing' OU
> Date: Tue, 12 Aug 2008 13:34:52 +0100
> From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
> To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
>
>
> Did the Migrator tool simply change the permissions on the OU so that your
> friend no longer had read access?
>
>
>
> Not sure about the Yellow triangle bit :/
>
>
>
>
> neil
> ________________________________
>
> From:
> ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>
> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>]
> On Behalf Of Steven Griffiths
> Sent: 12 August 2008 08:21
> To: ActiveDir.Org@
> Subject: [ActiveDir] 'Disappearing' OU
>
>
>
> Yesterday evening I was asked by a colleague to join a support call with
> Microsoft and a customer to discuss some issues he was having in the
> customer's environment. My colleague is performing an NDS to Active
> Directory migration using Quest's NDS Migrator. One of the issues he
> encountered was that an OU he had created and migrated some user accounts
> into had 'disappeared'. I qualify the word 'disappeared' because, while his
> OU had disappeared, it had been replaced in ADUC with an object of type
> 'Unknown'. Prior to this transition from a perfectly healthy OU to an object
> of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow
> warning triangle. I had to say, I'd never come across an OU in ADUC that
> included a yellow warning triangle as part of its icon, so couldn't offer
> him any explanation, but wondered if anyone else had witnessed this
> phenomenon? I did wonder if he'd working too many hours and was confusing
> ADUC with GPMC, but he claims not!
>
> ________________________________
>
> Win £3000 to spend on whatever you want at Uni! Click here to
> WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
>
> ________________________________
> Barclays Wealth is the wealth management division of Barclays Bank PLC. This
> email may relate to or be sent from other members of the Barclays Group.
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
> Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
> ________________________________
> Get fish-slapping on Messenger! Play
> Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
>
>
> --
>
> This message and any attachments are confidential, proprietary, and may be
> privileged. If this message was misdirected, Barclays Global Investors
> (BGI) does not waive any confidentiality or privilege. If you are not the
> intended recipient, please notify us immediately and destroy the message
> without disclosing its contents to anyone. Any distribution, use or copying
> of this e-mail or the information it contains by other than an intended
> recipient is unauthorized. The views and opinions expressed in this e-mail
> message are the author's own and may not reflect the views and opinions of
> BGI, unless the author is authorized by BGI to express such views or
> opinions on its behalf. All email sent to or from this address is subject
> to electronic storage and review by BGI. Although BGI operates anti-virus
> programs, it does not accept responsibility for any damage whatsoever caused
> by viruses being passed.
>
.+-� 0�����j�q.+-� 0����ˊ�E��Kj�!i�b��b����ןj�m | | | |
| deji
Posts:140
| | 08/12/2008 4:47 PM |
| And for GPOs, not OUs
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick [amulnick@gmail.com]
Sent: Tuesday, August 12, 2008 1:20 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] 'Disappearing' OU
Right. Gpmc shows that but aduc should not. I stick by the idea of
verifying its not a late night mirage. Checking via ldp would be a
close second step.
On 8/12/08, Aaron Steele <ASteele@pointbridge.com> wrote:
> http://support.microsoft.com/kb/842214
>
> Appearance
>
> Description
>
> A yellow triangle that contains a black exclamation point (!).
>
> This icon indicates that the Disable User Configuration settings option or
> the Disable Computer Configuration settings option is turned on for the GPO.
>
> A yellow triangle that contains a red circle with a white "x."
>
> This icon indicates that the Disable User Configuration settings option and
> the Disable Computer Configuration settings option are turned on for the
> GPO.
>
> Note The Disable User Configuration settings option and the Disable Computer
> Configuration settings option are available in Microsoft Windows 2000
> Server. However, the GPO icons are not available in Windows 2000 Server.
>
> To locate these GPO settings in the Active Directory Users and Computers
> tool, follow these steps:
> 1.
>
> Start the Active Directory Users and Computers tool.
>
> 2.
>
> Right-click the domain that you want, click Properties, and then click the
> Group Policy tab.
>
> The Disable User Configuration settings option and the Disable Computer
> Configuration settings option appear in the Policy Properties dialog box.
>
>
>
> Aaron Steele
> PointBridge | Consultant
> M: 773.580.8099
> EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>
> Do you have Office Communicator?
> Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with
> PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or
> Call Me<tel:asteele@pointbridge.com>.
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi
> BGI SF
> Sent: Tuesday, August 12, 2008 2:25 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
>
> Does it do that because the inheritance is blocked?
>
> ________________________________
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
> Sent: Tuesday, August 12, 2008 12:18 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> The old GPO editor property page used to show yellow warning triangle icons.
> I never knew why.
>
> Thanks,
> Brian Desmond
> brian@briandesmond.com
>
> c - 312.731.3132
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
> Sent: Tuesday, August 12, 2008 2:12 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> I don't know of any type with a triangle in it. If the permissions are
> horked it will be one of those non-descript folder icons and the type will
> be listed as Unknown.
>
> The quickest way to work out what is happening is to type
>
> adfind -gcb -f ou=ouname
>
> If it is there and you have permission to it, it will come up.
>
>
> --
> O'Reilly Active Directory Third Edition -
> http://www.joeware.net/win/ad3e.htm
>
>
>
> ________________________________
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
> Sent: Tuesday, August 12, 2008 1:36 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] 'Disappearing' OU
> That sounds more plausible, but it might be that he's looking with some
> other tools as well. Too many ifs. You may want to look over his shoulder
> and see what he sees.
>
> Hard to imagine the type changed on him, but with migration tools you can't
> be too careful.
>
> Al
> On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths
> <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
> Neil,
>
> No, the permissions were not changed. The OU is pre-created and the objects
> selected in NDS Migrator are just created in the OU. NDS Migrator doesn't
> touch OU permissions in Active Directory. I was more intrigued with the
> yellow triangle bit, but the more I think about it, the more I'm inclined to
> think he was looking at GPMC.
>
> Steve G
> ________________________________
>
> Subject: RE: [ActiveDir] 'Disappearing' OU
> Date: Tue, 12 Aug 2008 13:34:52 +0100
> From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
> To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
>
>
> Did the Migrator tool simply change the permissions on the OU so that your
> friend no longer had read access?
>
>
>
> Not sure about the Yellow triangle bit :/
>
>
>
>
> neil
> ________________________________
>
> From:
> ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>
> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>]
> On Behalf Of Steven Griffiths
> Sent: 12 August 2008 08:21
> To: ActiveDir.Org@
> Subject: [ActiveDir] 'Disappearing' OU
>
>
>
> Yesterday evening I was asked by a colleague to join a support call with
> Microsoft and a customer to discuss some issues he was having in the
> customer's environment. My colleague is performing an NDS to Active
> Directory migration using Quest's NDS Migrator. One of the issues he
> encountered was that an OU he had created and migrated some user accounts
> into had 'disappeared'. I qualify the word 'disappeared' because, while his
> OU had disappeared, it had been replaced in ADUC with an object of type
> 'Unknown'. Prior to this transition from a perfectly healthy OU to an object
> of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow
> warning triangle. I had to say, I'd never come across an OU in ADUC that
> included a yellow warning triangle as part of its icon, so couldn't offer
> him any explanation, but wondered if anyone else had witnessed this
> phenomenon? I did wonder if he'd working too many hours and was confusing
> ADUC with GPMC, but he claims not!
>
> ________________________________
>
> Win £3000 to spend on whatever you want at Uni! Click here to
> WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
>
> ________________________________
> Barclays Wealth is the wealth management division of Barclays Bank PLC. This
> email may relate to or be sent from other members of the Barclays Group.
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
> Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
> ________________________________
> Get fish-slapping on Messenger! Play
> Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
>
>
> --
>
> This message and any attachments are confidential, proprietary, and may be
> privileged. If this message was misdirected, Barclays Global Investors
> (BGI) does not waive any confidentiality or privilege. If you are not the
> intended recipient, please notify us immediately and destroy the message
> without disclosing its contents to anyone. Any distribution, use or copying
> of this e-mail or the information it contains by other than an intended
> recipient is unauthorized. The views and opinions expressed in this e-mail
> message are the author's own and may not reflect the views and opinions of
> BGI, unless the author is authorized by BGI to express such views or
> opinions on its behalf. All email sent to or from this address is subject
> to electronic storage and review by BGI. Although BGI operates anti-virus
> programs, it does not accept responsibility for any damage whatsoever caused
> by viruses being passed.
>
?�ا~�m���� ?rدyث��?.+-j�q.+-??!��� 0i�b��b�������P?j�q.+-j�!������ 0i�b��b����f�u�ں[Z��
.+-� 0�����j�q.+-� 0����ˊ�E��Kj�!i�b��b����ןj�m | | | |
| Servernet
Posts:8
| | 08/13/2008 4:51 AM |
|
Thanks to all who replied to this.
I think I have enough ammunition to taunt him mercilessly for next few days about phantom yellow triangles!
I should have mentioned in the original post that my colleague only managed to take a screenshot of the OU after its object type turned into 'Unknown'...he then deleted it. I'll see if he has time to search the Deleted Objects folder to see what objectClass this mystery object is.> From: deji@readymaids.com> To: ActiveDir@mail.activedir.org> Date: Tue, 12 Aug 2008 13:39:19 -0700> Subject: RE: [ActiveDir] 'Disappearing' OU> > And for GPOs, not OUs> > > Sincerely,> _____> (, / | /) /) /)> /---| (/_ ______ ___// _ // _> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_> (_/ /)> (/> Microsoft MVP - Directory Services> www.akomolafe.name - we know IT> -5.75, -3.23> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon> ________________________________________> From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick [amulnick@gmail.com]> Sent: Tuesday, August 12, 2008 1:20 PM> To: ActiveDir@mail.activedir.org> Subject: Re: [ActiveDir] 'Disappearing' OU> > Right. Gpmc shows that but aduc should not. I stick by the idea of> verifying its not a late night mirage. Checking via ldp would be a> close second step.> > > > On 8/12/08, Aaron Steele <ASteele@pointbridge.com> wrote:> > http://support.microsoft.com/kb/842214> >> > Appearance> >> > Description> >> > A yellow triangle that contains a black exclamation point (!).> >> > This icon indicates that the Disable User Configuration settings option or> > the Disable Computer Configuration settings option is turned on for the GPO.> >> > A yellow triangle that contains a red circle with a white "x."> >> > This icon indicates that the Disable User Configuration settings option and> > the Disable Computer Configuration settings option are turned on for the> > GPO.> >> > Note The Disable User Configuration settings option and the Disable Computer> > Configuration settings option are available in Microsoft Windows 2000> > Server. However, the GPO icons are not available in Windows 2000 Server.> >> > To locate these GPO settings in the Active Directory Users and Computers> > tool, follow these steps:> > 1.> >> > Start the Active Directory Users and Computers tool.> >> > 2.> >> > Right-click the domain that you want, click Properties, and then click the> > Group Policy tab.> >> > The Disable User Configuration settings option and the Disable Computer> > Configuration settings option appear in the Policy Properties dialog box.> >> >> >> > Aaron Steele> > PointBridge | Consultant> > M: 773.580.8099> > EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>> > Do you have Office Communicator?> > Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with> > PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or> > Call Me<tel:asteele@pointbridge.com>.> >> > From: ActiveDir-owner@mail.activedir.org> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi> > BGI SF> > Sent: Tuesday, August 12, 2008 2:25 PM> > To: ActiveDir@mail.activedir.org> > Subject: RE: [ActiveDir] 'Disappearing' OU> >> >> > Does it do that because the inheritance is blocked?> >> > ________________________________> > From: ActiveDir-owner@mail.activedir.org> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond> > Sent: Tuesday, August 12, 2008 12:18 PM> > To: ActiveDir@mail.activedir.org> > Subject: RE: [ActiveDir] 'Disappearing' OU> >> > The old GPO editor property page used to show yellow warning triangle icons.> > I never knew why.> >> > Thanks,> > Brian Desmond> > brian@briandesmond.com> >> > c - 312.731.3132> >> > From: ActiveDir-owner@mail.activedir.org> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe> > Sent: Tuesday, August 12, 2008 2:12 PM> > To: ActiveDir@mail.activedir.org> > Subject: RE: [ActiveDir] 'Disappearing' OU> >> > I don't know of any type with a triangle in it. If the permissions are> > horked it will be one of those non-descript folder icons and the type will> > be listed as Unknown.> >> > The quickest way to work out what is happening is to type> >> > adfind -gcb -f ou=ouname> >> > If it is there and you have permission to it, it will come up.> >> >> > --> > O'Reilly Active Directory Third Edition -> > http://www.joeware.net/win/ad3e.htm> >> >> >> > ________________________________> > From: ActiveDir-owner@mail.activedir.org> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick> > Sent: Tuesday, August 12, 2008 1:36 PM> > To: ActiveDir@mail.activedir.org> > Subject: Re: [ActiveDir] 'Disappearing' OU> > That sounds more plausible, but it might be that he's looking with some> > other tools as well. Too many ifs. You may want to look over his shoulder> > and see what he sees.> >> > Hard to imagine the type changed on him, but with migration tools you can't> > be too careful.> >> > Al> > On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths> > <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:> > Neil,> >> > No, the permissions were not changed. The OU is pre-created and the objects> > selected in NDS Migrator are just created in the OU. NDS Migrator doesn't> > touch OU permissions in Active Directory. I was more intrigued with the> > yellow triangle bit, but the more I think about it, the more I'm inclined to> > think he was looking at GPMC.> >> > Steve G> > ________________________________> >> > Subject: RE: [ActiveDir] 'Disappearing' OU> > Date: Tue, 12 Aug 2008 13:34:52 +0100> > From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>> > To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>> >> >> > Did the Migrator tool simply change the permissions on the OU so that your> > friend no longer had read access?> >> >> >> > Not sure about the Yellow triangle bit :/> >> >> >> >> > neil> > ________________________________> >> > From:> > ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>> > [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>]> > On Behalf Of Steven Griffiths> > Sent: 12 August 2008 08:21> > To: ActiveDir.Org@> > Subject: [ActiveDir] 'Disappearing' OU> >> >> >> > Yesterday evening I was asked by a colleague to join a support call with> > Microsoft and a customer to discuss some issues he was having in the> > customer's environment. My colleague is performing an NDS to Active> > Directory migration using Quest's NDS Migrator. One of the issues he> > encountered was that an OU he had created and migrated some user accounts> > into had 'disappeared'. I qualify the word 'disappeared' because, while his> > OU had disappeared, it had been replaced in ADUC with an object of type> > 'Unknown'. Prior to this transition from a perfectly healthy OU to an object> > of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow> > warning triangle. I had to say, I'd never come across an OU in ADUC that> > included a yellow warning triangle as part of its icon, so couldn't offer> > him any explanation, but wondered if anyone else had witnessed this> > phenomenon? I did wonder if he'd working too many hours and was confusing> > ADUC with GPMC, but he claims not!> >> > ________________________________> >> > Win £3000 to spend on whatever you want at Uni! Click here to> > WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>> >> > ________________________________> > Barclays Wealth is the wealth management division of Barclays Bank PLC. This> > email may relate to or be sent from other members of the Barclays Group.> >> > The availability of products and services may be limited by the applicable> > laws and regulations in certain jurisdictions. The Barclays Group does not> > normally accept or offer business instructions via internet email. Any> > action that you might take upon this message might be at your own risk.> > This email and any attachments are confidential and intended solely for the> > addressee and may also be privileged or exempt from disclosure under> > applicable law. If you are not the addressee, or have received this email in> > error, please notify the sender immediately, delete it from your system and> > do not copy, disclose or otherwise act upon any part of this email or its> > attachments.> > Internet communications are not guaranteed to be secure or without viruses.> > The Barclays Group does not accept responsibility for any loss arising from> > unauthorised access to, or interference with, any Internet communications by> > any third party, or from the transmission of any viruses. Replies to this> > email may be monitored by the Barclays Group for operational or business> > reasons.> > Any opinion or other information in this email or its attachments that does> > not relate to the business of the Barclays Group is personal to the sender> > and is not given or endorsed by the Barclays Group.> > Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).> > Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.> > Barclays Bank PLC is authorised and regulated by the Financial Services> > Authority.> > ________________________________> > Get fish-slapping on Messenger! Play> > Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>> >> >> > --> >> > This message and any attachments are confidential, proprietary, and may be> > privileged. If this message was misdirected, Barclays Global Investors> > (BGI) does not waive any confidentiality or privilege. If you are not the> > intended recipient, please notify us immediately and destroy the message> > without disclosing its contents to anyone. Any distribution, use or copying> > of this e-mail or the information it contains by other than an intended> > recipient is unauthorized. The views and opinions expressed in this e-mail> > message are the author's own and may not reflect the views and opinions of> > BGI, unless the author is authorized by BGI to express such views or> > opinions on its behalf. All email sent to or from this address is subject> > to electronic storage and review by BGI. Although BGI operates anti-virus> > programs, it does not accept responsibility for any damage whatsoever caused> > by viruses being passed.> >> ?�ا~�m���� ?rدyث��?.+-j�q.+-??!��� 0i�b��b�������P?j�q.+-j�!������ 0i�b��b����f�u�ں[Z��> �ا~�m���� rدyث��?.+-j�q.+-!��� 0i�b��b�������Pj�q.+-j�!������ 0i�b��b����f�u�ں[Z��
_________________________________________________________________
Make a mini you on Windows Live Messenger!
http://clk.atdmt.com/UKM/go/107571437/direct/01/ | | | |
| listmail
Posts:463
| | 08/13/2008 10:51 AM |
| Assuming the perms on the object aren't completely FUBARED....
...the command I mentioned before....
adfind -gcb -f ou=ouname
change it to
adfind -gcb -f ou=ouname* -showdel
And run it as an admin. The objectclass attribute will likely look very similar to
>objectClass: top
>objectClass: organizationalUnit
There are only two classes that have a supported "transmogrification" cabability and those are user and inetorgperson so you can switch between them.
joe
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
_____
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Steven Griffiths
Sent: Wednesday, August 13, 2008 4:48 AM
To: activedir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
Thanks to all who replied to this.
I think I have enough ammunition to taunt him mercilessly for next few days about phantom yellow triangles!
I should have mentioned in the original post that my colleague only managed to take a screenshot of the OU after its object type turned into 'Unknown'...he then deleted it. I'll see if he has time to search the Deleted Objects folder to see what objectClass this mystery object is.
> From: deji@readymaids.com
> To: ActiveDir@mail.activedir.org
> Date: Tue, 12 Aug 2008 13:39:19 -0700
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> And for GPOs, not OUs
>
>
> Sincerely,
> _____
> (, / | /) /) /)
> /---| (/_ ______ ___// _ // _
> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
> (/
> Microsoft MVP - Directory Services
> www.akomolafe.name - we know IT
> -5.75, -3.23
> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
> ________________________________________
> From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick [amulnick@gmail.com]
> Sent: Tuesday, August 12, 2008 1:20 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] 'Disappearing' OU
>
> Right. Gpmc shows that but aduc should not. I stick by the idea of
> verifying its not a late night mirage. Checking via ldp would be a
> close second step.
>
>
>
> On 8/12/08, Aaron Steele <ASteele@pointbridge.com> wrote:
> > http://support.microsoft.com/kb/842214
> >
> > Appearance
> >
> > Description
> >
> > A yellow triangle that contains a black exclamation point (!).
> >
> > This icon indicates that the Disable User Configuration settings option or
> > the Disable Computer Configuration settings option is turned on for the GPO.
> >
> > A yellow triangle that contains a red circle with a white "x."
> >
> > This icon indicates that the Disable User Configuration settings option and
> > the Disable Computer Configuration settings option are turned on for the
> > GPO.
> >
> > Note The Disable User Configuration settings option and the Disable Computer
> > Configuration settings option are available in Microsoft Windows 2000
> > Server. However, the GPO icons are not available in Windows 2000 Server.
> >
> > To locate these GPO settings in the Active Directory Users and Computers
> > tool, follow these steps:
> > 1.
> >
> > Start the Active Directory Users and Computers tool.
> >
> > 2.
> >
> > Right-click the domain that you want, click Properties, and then click the
> > Group Policy tab.
> >
> > The Disable User Configuration settings option and the Disable Computer
> > Configuration settings option appear in the Policy Properties dialog box.
> >
> >
> >
> > Aaron Steele
> > PointBridge | Consultant
> > M: 773.580.8099
> > EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>
> > Do you have Office Communicator?
> > Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with
> > PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or
> > Call Me<tel:asteele@pointbridge.com>.
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi
> > BGI SF
> > Sent: Tuesday, August 12, 2008 2:25 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> >
> > Does it do that because the inheritance is blocked?
> >
> > ________________________________
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
> > Sent: Tuesday, August 12, 2008 12:18 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> > The old GPO editor property page used to show yellow warning triangle icons.
> > I never knew why.
> >
> > Thanks,
> > Brian Desmond
> > brian@briandesmond.com
> >
> > c - 312.731.3132
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
> > Sent: Tuesday, August 12, 2008 2:12 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> > I don't know of any type with a triangle in it. If the permissions are
> > horked it will be one of those non-descript folder icons and the type will
> > be listed as Unknown.
> >
> > The quickest way to work out what is happening is to type
> >
> > adfind -gcb -f ou=ouname
> >
> > If it is there and you have permission to it, it will come up.
> >
> >
> > --
> > O'Reilly Active Directory Third Edition -
> > http://www.joeware.net/win/ad3e.htm
> >
> >
> >
> > ________________________________
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
> > Sent: Tuesday, August 12, 2008 1:36 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] 'Disappearing' OU
> > That sounds more plausible, but it might be that he's looking with some
> > other tools as well. Too many ifs. You may want to look over his shoulder
> > and see what he sees.
> >
> > Hard to imagine the type changed on him, but with migration tools you can't
> > be too careful.
> >
> > Al
> > On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths
> > <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
> > Neil,
> >
> > No, the permissions were not changed. The OU is pre-created and the objects
> > selected in NDS Migrator are just created in the OU. NDS Migrator doesn't
> > touch OU permissions in Active Directory. I was more intrigued with the
> > yellow triangle bit, but the more I think about it, the more I'm inclined to
> > think he was looking at GPMC.
> >
> > Steve G
> > ________________________________
> >
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> > Date: Tue, 12 Aug 2008 13:34:52 +0100
> > From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
> > To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
> >
> >
> > Did the Migrator tool simply change the permissions on the OU so that your
> > friend no longer had read access?
> >
> >
> >
> > Not sure about the Yellow triangle bit :/
> >
> >
> >
> >
> > neil
> > ________________________________
> >
> > From:
> > ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>
> > [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>]
> > On Behalf Of Steven Griffiths
> > Sent: 12 August 2008 08:21
> > To: ActiveDir.Org@
> > Subject: [ActiveDir] 'Disappearing' OU
> >
> >
> >
> > Yesterday evening I was asked by a colleague to join a support call with
> > Microsoft and a customer to discuss some issues he was having in the
> > customer's environment. My colleague is performing an NDS to Active
> > Directory migration using Quest's NDS Migrator. One of the issues he
> > encountered was that an OU he had created and migrated some user accounts
> > into had 'disappeared'. I qualify the word 'disappeared' because, while his
> > OU had disappeared, it had been replaced in ADUC with an object of type
> > 'Unknown'. Prior to this transition from a perfectly healthy OU to an object
> > of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow
> > warning triangle. I had to say, I'd never come across an OU in ADUC that
> > included a yellow warning triangle as part of its icon, so couldn't offer
> > him any explanation, but wondered if anyone else had witnessed this
> > phenomenon? I did wonder if he'd working too many hours and was confusing
> > ADUC with GPMC, but he claims not!
> >
> > ________________________________
> >
> > Win £3000 to spend on whatever you want at Uni! Click here to
> > WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
> >
> > ________________________________
> > Barclays Wealth is the wealth management division of Barclays Bank PLC. This
> > email may relate to or be sent from other members of the Barclays Group.
> >
> > The availability of products and services may be limited by the applicable
> > laws and regulations in certain jurisdictions. The Barclays Group does not
> > normally accept or offer business instructions via internet email. Any
> > action that you might take upon this message might be at your own risk.
> > This email and any attachments are confidential and intended solely for the
> > addressee and may also be privileged or exempt from disclosure under
> > applicable law. If you are not the addressee, or have received this email in
> > error, please notify the sender immediately, delete it from your system and
> > do not copy, disclose or otherwise act upon any part of this email or its
> > attachments.
> > Internet communications are not guaranteed to be secure or without viruses.
> > The Barclays Group does not accept responsibility for any loss arising from
> > unauthorised access to, or interference with, any Internet communications by
> > any third party, or from the transmission of any viruses. Replies to this
> > email may be monitored by the Barclays Group for operational or business
> > reasons.
> > Any opinion or other information in this email or its attachments that does
> > not relate to the business of the Barclays Group is personal to the sender
> > and is not given or endorsed by the Barclays Group.
> > Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
> > Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
> > Barclays Bank PLC is authorised and regulated by the Financial Services
> > Authority.
> > ________________________________
> > Get fish-slapping on Messenger! Play
> > Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
> >
> >
> > --
> >
> > This message and any attachments are confidential, proprietary, and may be
> > privileged. If this message was misdirected, Barclays Global Investors
> > (BGI) does not waive any confidentiality or privilege. If you are not the
> > intended recipient, please notify us immediately and destroy the message
> > without disclosing its contents to anyone. Any distribution, use or copying
> > of this e-mail or the information it contains by other than an intended
> > recipient is unauthorized. The views and opinions expressed in this e-mail
> > message are the author's own and may not reflect the views and opinions of
> > BGI, unless the author is authorized by BGI to express such views or
> > opinions on its behalf. All email sent to or from this address is subject
> > to electronic storage and review by BGI. Although BGI operates anti-virus
> > programs, it does not accept responsibility for any damage whatsoever caused
> > by viruses being passed.
> >
> ?�ا~�m���� ?rدyث��?.+-j�q.+-??!��� 0i�b��b�������P?j�q.+-j�!������ 0i�b��b����f�u�ں[Z��
> �ا~�m���� rدyث��?.+-j�q.+-!��� 0i�b��b�������Pj�q.+-j�!������ 0i�b��b����f�u�ں[Z��
_____
Make a mini you on Windows Live Messenger! Try it <http://clk.atdmt.com/UKM/go/107571437/direct/01/> Now!
| | | |
| jmeyer2
Posts:1
| | 08/13/2008 2:02 PM |
| I love Calvin and Hobbes.
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Wednesday, August 13, 2008 10:46 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
Assuming the perms on the object aren't completely FUBARED....
...the command I mentioned before....
adfind -gcb -f ou=ouname
change it to
adfind -gcb -f ou=ouname* -showdel
And run it as an admin. The objectclass attribute will likely look very similar to
>objectClass: top
>objectClass: organizationalUnit
There are only two classes that have a supported "transmogrification" cabability and those are user and inetorgperson so you can switch between them.
joe
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Steven Griffiths
Sent: Wednesday, August 13, 2008 4:48 AM
To: activedir@mail.activedir.org
Subject: RE: [ActiveDir] 'Disappearing' OU
Thanks to all who replied to this.
I think I have enough ammunition to taunt him mercilessly for next few days about phantom yellow triangles!
I should have mentioned in the original post that my colleague only managed to take a screenshot of the OU after its object type turned into 'Unknown'...he then deleted it. I'll see if he has time to search the Deleted Objects folder to see what objectClass this mystery object is.
> From: deji@readymaids.com
> To: ActiveDir@mail.activedir.org
> Date: Tue, 12 Aug 2008 13:39:19 -0700
> Subject: RE: [ActiveDir] 'Disappearing' OU
>
> And for GPOs, not OUs
>
>
> Sincerely,
> _____
> (, / | /) /) /)
> /---| (/_ ______ ___// _ // _
> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
> (/
> Microsoft MVP - Directory Services
> www.akomolafe.name - we know IT
> -5.75, -3.23
> Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
> ________________________________________
> From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick [amulnick@gmail.com]
> Sent: Tuesday, August 12, 2008 1:20 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] 'Disappearing' OU
>
> Right. Gpmc shows that but aduc should not. I stick by the idea of
> verifying its not a late night mirage. Checking via ldp would be a
> close second step.
>
>
>
> On 8/12/08, Aaron Steele <ASteele@pointbridge.com> wrote:
> > http://support.microsoft.com/kb/842214
> >
> > Appearance
> >
> > Description
> >
> > A yellow triangle that contains a black exclamation point (!).
> >
> > This icon indicates that the Disable User Configuration settings option or
> > the Disable Computer Configuration settings option is turned on for the GPO.
> >
> > A yellow triangle that contains a red circle with a white "x."
> >
> > This icon indicates that the Disable User Configuration settings option and
> > the Disable Computer Configuration settings option are turned on for the
> > GPO.
> >
> > Note The Disable User Configuration settings option and the Disable Computer
> > Configuration settings option are available in Microsoft Windows 2000
> > Server. However, the GPO icons are not available in Windows 2000 Server.
> >
> > To locate these GPO settings in the Active Directory Users and Computers
> > tool, follow these steps:
> > 1.
> >
> > Start the Active Directory Users and Computers tool.
> >
> > 2.
> >
> > Right-click the domain that you want, click Properties, and then click the
> > Group Policy tab.
> >
> > The Disable User Configuration settings option and the Disable Computer
> > Configuration settings option appear in the Policy Properties dialog box.
> >
> >
> >
> > Aaron Steele
> > PointBridge | Consultant
> > M: 773.580.8099
> > EM/IM: asteele@pointbridge.com<mailto:asteele@pointbridge.com>
> > Do you have Office Communicator?
> > Federate<http://technet.microsoft.com/en-us/magazine/cc137801.aspx> with
> > PointBridge and Securely Instant Message<sip:asteele@pointbridge.com> or
> > Call Me<tel:asteele@pointbridge.com>.
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi
> > BGI SF
> > Sent: Tuesday, August 12, 2008 2:25 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> >
> > Does it do that because the inheritance is blocked?
> >
> > ________________________________
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
> > Sent: Tuesday, August 12, 2008 12:18 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> > The old GPO editor property page used to show yellow warning triangle icons.
> > I never knew why.
> >
> > Thanks,
> > Brian Desmond
> > brian@briandesmond.com
> >
> > c - 312.731.3132
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
> > Sent: Tuesday, August 12, 2008 2:12 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> >
> > I don't know of any type with a triangle in it. If the permissions are
> > horked it will be one of those non-descript folder icons and the type will
> > be listed as Unknown.
> >
> > The quickest way to work out what is happening is to type
> >
> > adfind -gcb -f ou=ouname
> >
> > If it is there and you have permission to it, it will come up.
> >
> >
> > --
> > O'Reilly Active Directory Third Edition -
> > http://www.joeware.net/win/ad3e.htm
> >
> >
> >
> > ________________________________
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick
> > Sent: Tuesday, August 12, 2008 1:36 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] 'Disappearing' OU
> > That sounds more plausible, but it might be that he's looking with some
> > other tools as well. Too many ifs. You may want to look over his shoulder
> > and see what he sees.
> >
> > Hard to imagine the type changed on him, but with migration tools you can't
> > be too careful.
> >
> > Al
> > On Tue, Aug 12, 2008 at 8:45 AM, Steven Griffiths
> > <servernet1997@hotmail.com<mailto:servernet1997@hotmail.com>> wrote:
> > Neil,
> >
> > No, the permissions were not changed. The OU is pre-created and the objects
> > selected in NDS Migrator are just created in the OU. NDS Migrator doesn't
> > touch OU permissions in Active Directory. I was more intrigued with the
> > yellow triangle bit, but the more I think about it, the more I'm inclined to
> > think he was looking at GPMC.
> >
> > Steve G
> > ________________________________
> >
> > Subject: RE: [ActiveDir] 'Disappearing' OU
> > Date: Tue, 12 Aug 2008 13:34:52 +0100
> > From: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
> > To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
> >
> >
> > Did the Migrator tool simply change the permissions on the OU so that your
> > friend no longer had read access?
> >
> >
> >
> > Not sure about the Yellow triangle bit :/
> >
> >
> >
> >
> > neil
> > ________________________________
> >
> > From:
> > ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>
> > [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>]
> > On Behalf Of Steven Griffiths
> > Sent: 12 August 2008 08:21
> > To: ActiveDir.Org@
> > Subject: [ActiveDir] 'Disappearing' OU
> >
> >
> >
> > Yesterday evening I was asked by a colleague to join a support call with
> > Microsoft and a customer to discuss some issues he was having in the
> > customer's environment. My colleague is performing an NDS to Active
> > Directory migration using Quest's NDS Migrator. One of the issues he
> > encountered was that an OU he had created and migrated some user accounts
> > into had 'disappeared'. I qualify the word 'disappeared' because, while his
> > OU had disappeared, it had been replaced in ADUC with an object of type
> > 'Unknown'. Prior to this transition from a perfectly healthy OU to an object
> > of unknown type, my colleague claims the OU's icon in ADUC acquired a yellow
> > warning triangle. I had to say, I'd never come across an OU in ADUC that
> > included a yellow warning triangle as part of its icon, so couldn't offer
> > him any explanation, but wondered if anyone else had witnessed this
> > phenomenon? I did wonder if he'd working too many hours and was confusing
> > ADUC with GPMC, but he claims not!
> >
> > ________________________________
> >
> > Win £3000 to spend on whatever you want at Uni! Click here to
> > WIN!<http://clk.atdmt.com/UKM/go/101719803/direct/01/>
> >
> > ________________________________
> > Barclays Wealth is the wealth management division of Barclays Bank PLC. This
> > email may relate to or be sent from other members of the Barclays Group.
> >
> > The availability of products and services may be limited by the applicable
> > laws and regulations in certain jurisdictions. The Barclays Group does not
> > normally accept or offer business instructions via internet email. Any
> > action that you might take upon this message might be at your own risk.
> > This email and any attachments are confidential and intended solely for the
> > addressee and may also be privileged or exempt from disclosure under
> > applicable law. If you are not the addressee, or have received this email in
> > error, please notify the sender immediately, delete it from your system and
> > do not copy, disclose or otherwise act upon any part of this email or its
> > attachments.
> > Internet communications are not guaranteed to be secure or without viruses.
> > The Barclays Group does not accept responsibility for any loss arising from
> > unauthorised access to, or interference with, any Internet communications by
> > any third party, or from the transmission of any viruses. Replies to this
> > email may be monitored by the Barclays Group for operational or business
> > reasons.
> > Any opinion or other information in this email or its attachments that does
> > not relate to the business of the Barclays Group is personal to the sender
> > and is not given or endorsed by the Barclays Group.
> > Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
> > Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
> > Barclays Bank PLC is authorised and regulated by the Financial Services
> > Authority.
> > ________________________________
> > Get fish-slapping on Messenger! Play
> > Now<http://clk.atdmt.com/UKM/go/101719805/direct/01/>
> >
> >
> > --
> >
> > This message and any attachments are confidential, proprietary, and may be
> > privileged. If this message was misdirected, Barclays Global Investors
> > (BGI) does not waive any confidentiality or privilege. If you are not the
> > intended recipient, please notify us immediately and destroy the message
> > without disclosing its contents to anyone. Any distribution, use or copying
> > of this e-mail or the information it contains by other than an intended
> > recipient is unauthorized. The views and opinions expressed in this e-mail
> > message are the author's own and may not reflect the views and opinions of
> > BGI, unless the author is authorized by BGI to express such views or
> > opinions on its behalf. All email sent to or from this address is subject
> > to electronic storage and review by BGI. Although BGI operates anti-virus
> > programs, it does not accept responsibility for any damage whatsoever caused
> > by viruses being passed.
> >
> ?�ا~�m���� ?rدyث��?.+-j�q.+-??!��� 0i�b��b�������P?j�q.+-j�!������ 0i�b��b����f�u�ں[Z��
> �ا~�m���� rدyث��?.+-j�q.+-!��� 0i�b��b�������Pj�q.+-j�!������ 0i�b��b����f�u�ں[Z��
________________________________
Make a mini you on Windows Live Messenger! Try it Now! <http://clk.atdmt.com/UKM/go/107571437/direct/01/>
| | | |
|
|