Location: Home

Welcome

Welcome

ActiveDir.org is the home of the Active Directory Discussions Mailing List which was started in January 2001 with the aim of providing a forum for discussing various aspects of Microsoft's Active Directory technology. Since then the list has grown to a membership of over 1000 subscribers and 3000 site members.  The list has become extremely active, and includes many of the foremost experts in Active Directory.

The focus here at ActiveDir.org is the mailing list, but we now also offer a range of useful resources (see left navigation options).

You can also share your knowledge and experience with the wider community by creating your own articles using the site's Wiki-style functionality.  Click here for more information.

What's happening on our Mailing List

What's happening on our Mailing List

  • lef just posted 'Re: [ActiveDir] What changes in the DS and the DS GUIs would you like to see from MSFT...'

    Here's my list for ADLDS/ADAM, sorry it's a rather terse DS: o ADAM ability to define policy controlling replication of object/attribute per DSA instance including the ability to mark object/attributes as RO at a set of instances. ...

  • michael1 just posted 'RE: [ActiveDir] What changes in the DS and the DS GUIs would you like to see from MSFT...'

    Could take the continuous replication engine from Exchange 2007 and do this; then again, that would require turning off circular logging on ntds.dit. J Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheE...

  • jamesawells just posted 'Re: [ActiveDir] Deprovisioning user accounts'

    The only time I've seen solutions to this problem that were bulletproof...there was always an authoritative source "above" AD. Be it PeopleSoft, SAP, a junky Access database...whatever was used by HOUR for tracking. Consultants and nonpaid staff w...

  • MikeGuest just posted 'RE: [ActiveDir] What changes in the DS and the DS GUIs would you like to see from MSFT...'

    How about a *real* lag dc ? ie, 1) All infrastructure services are left running on the DC, lag-ADDC takes part in all domain activity. 2) However, instead of applying replicated changes directly to the directory store, the writes are ...

  • adwulf just posted 'Re: [ActiveDir] Deprovisioning user accounts'

    I would suggest sending an email to the user from the Helpdesk with something like "IMPORTANT! ACTION REQUIRED!" in the subjetct field, saying that this account (joe.bloggs@xyz.corp) will be PERMANENTLY DELETED in X days time if you do not contac...

  • davewade just posted 'RE: [ActiveDir] Deprovisioning user accounts'

    We have a script that removes the account from all its groups, clears the profile and ts profile fields, hides it from the GAL, prevents people from sending e-mail to it and saves the information removed in the "Notes" field. It also prefixes the...

  • CrawfordS just posted 'RE: [ActiveDir] Deprovisioning user accounts'

    Over here in the US, it's hidden behind Belgium J From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Bart Van den Wyngaert Sent: Thursday, November 20, 2008 3:58 AM To: ActiveDir@mail.actived...

  • Marty1_0 just posted 'Re: [ActiveDir] Deprovisioning user accounts'

    Thanks! Great input... Don't know where the sun at your part of the planet, but in Belgium it's hidden behind dark clouds... :-) -Bart On Thu, Nov 20, 2008 at 10:46 AM, Crawford, Scott <CrawfordS@evangel.edu>wrote: > I'm sure onc...

  • CrawfordS just posted 'RE: [ActiveDir] Deprovisioning user accounts'

    I'm sure once the sun starts to come up, you'll receive a bevy of better responses, but I would check the last modified date. If it hasn't been modified in X days, then you know it's been disabled the whole time. However, just because it's been mo...

  • Marty1_0 just posted '[ActiveDir] Deprovisioning user accounts'

    Hi, I've got an additional question regarding deprovisioning user accounts on top of the old posts on this list... Question is: how do you detect (100% sure) that the user account you wish to delete is disabled for X days (your personal choice ...

Join in the fun by subscribing here

New Stuff

New Stuff

List Avatars... did you know... - Thursday, January 24, 2008

If you are feeling particularly expressive you can assign a picture to be displayed next to each post you make to the mailing list.  How?  Login to the site, visit the List Archives tab, hit 'My Profile', at the bottom of the page hit 'Edit Profile' and there you can either upload a picture or link to an existing picture of yourself and however you want to be represented.

 

Search the Archives is now available - Monday, January 14, 2008

Yes we finally got around to it.  It's now possible to search the archives.  Its fully text indexed so you should be able to find what it is you are looking for.

To access the search function, click on Advanced Search beneath the normal Site Search button.  (You must have javascript enabled in your browser to Search).

 read more ...

Latest Articles

Latest Articles

The (Almost) Definitive Active Directory Blogroll
Author: Tony Murray :: Date: Saturday, November 01, 2008 8:42 PM
Categories: Active Directory

I subscribe to a number of Blogs with Active Directory content. As it took me a while to accumulate the list, I thought I would share it here.

Let me know if I have missed any out there that should be on this list.


LDAP tips #3: Searching for Computers
Author: Tony Murray :: Date: Thursday, September 25, 2008 10:57 PM
Categories: Active Directory, Tips and Tricks

This article is the third in a series providing tips for common LDAP searches.


Multiple Domain Forests: Still a Valid Design Model?
Author: Tony Murray :: Date: Monday, July 21, 2008 2:52 PM
Categories: Active Directory, Windows Server
On the ActiveDir.org list there has been some good discussion about whether the multi-domain forest is still considered a valid design option. This article attempts to crystallise the discussion for use as a reference for those involved with the design or review of forest models.
 
The general consensus is that single domain forests are now the preferred design option for all but the most marginal cases. Note that this does not preclude the use of multiple forests within a single organisation. For example, the use of the Exchange Resource forest in environments that have a distributed NOS architecture but a centralised messaging architecture is common in larger organisations.

Bulk Updates to Active Directory User Attributes
Author: David Wiseman :: Date: Thursday, June 12, 2008 3:52 PM
Categories: Active Directory

Describes how to make bulk updates to Active Directory User Attributes using freeware tools (from WiseSoft.co.uk).


How to Enable, Disable and Maintain OCS 2007 (Office Communications Server) User Attributes using VBScript.
Author: Matty Holland :: Date: Thursday, May 15, 2008 4:51 PM
Categories: Active Directory, Scripting

This script will enable and configure Active Directory users for OCS 2007.  This is an updated version of the re-written LCS reskit script published in article: How to Enable, Disable and Maintain LCS (Live Communications Server) User Attributes using VBScript.


How to delete corrupt mail items with MFCMAPI
Author: Alexei Segundo :: Date: Tuesday, April 22, 2008 12:58 AM
Categories: Exchange
I recently encountered a situation where Outlook could not open two emails within a mailbox located within an Exchange mail store. Not only could I not open the items, I couldn’t move or delete them either. It was frustrating as it was causing some problems for an email archiving product. 
 
I eventually managed to delete the two emails using the MFCMAPI tool. This article explains the method used and provides screenshots to guide you through the process.

Tracking LDAP Searches with Windows Server 2008 Reliability and Performance Monitor
Author: Tony Murray :: Date: Tuesday, February 26, 2008 4:39 PM
Categories: Active Directory, Windows Server

Windows Server 2008 ships with the Reliability and Performance Monitor (RPM) snap-in.  On DCs, RPM incorporates an Active Directory Diagnostics feature that includes the abilility to track LDAP searches against a DC.  The amount of information captured can be very useful when troubleshooting LDAP issues.

This article provides a step by step guide on how to use RPM to track LDAP searches.


Making bulk changes to Active Directory users with ADModify.NET
Author: SuperUser Account :: Date: Tuesday, December 18, 2007 5:09 PM
Categories: Active Directory

Provides a step-by-step tutorial of how to make bulk changes using the ADModify tool


ADMT v3 sets the "User must change password at next logon flag" on migrated user objects
Author: SuperUser Account :: Date: Tuesday, December 18, 2007 5:03 PM
Categories: Active Directory

This article describes an unexpected behaviour of ADMT v3 and how to work around it.


How to authenticate to Active Directory from Cisco IOS
Author: SuperUser Account :: Date: Tuesday, December 18, 2007 5:00 PM

This article describes the steps necessary to setup authentication and authorization to Active Directory from a Cisco device running IOS.


Friends

Friends

Namescape
AdventNet Banner
Copyright 2008 ActiveDir.org
Terms Of Use