Bret

First of all sorry for making you angry. second I have not altered
group policy programatically but you might look at the link below.


http://social.msdn.microsoft.com/Forums/en-
US/csharpgeneral/thread/f3f5a61f-2ab9-459e-a1ee-c187465198e0/

M.

I don't frequent this mailing list these days as I put most of my efforts
into answering questions on the support forum for my book's website at
http://directoryprogramming.net.  I officially invite anyone participating
on this list to also participate there.

That said, we have a code sample for doing exactly this from ch 10 of the
book.  You can get ch 10 online in PDF format from a link on the main page
of our site and you can download all the code samples from the book from the
files section.  I believe the complete version of our wrapper class is only
in the "complete samples" download and not the raw samples.

Additionally, some other forum partipants have suggested a few enhancements
over time that you can search for and borrow from the forum.

Note that password policy is much more complex in server 2008 AD because
fine grained password policies are supported.  There is no longer the
limitation of just one policy per domain.

Cheers!

Joe K.
----- Original Message -----
From: Bret H
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Tuesday, January 27, 2009 9:34 AM
Subject: Re: [ADSI-DirSrv] Re: Domain password policy using C#'


for any system ,you can view the domain password and account lockout
policy..you can view it by typing gpedit.msc  in the run prompt.then you can
view the values from windows settings\security settings\account policies.My
aim is to fetch these values for a particular domain using C# .net windows
application and also edit the same.i will have the administrator rights to
do the same.So , i hope you got my point.i want to fetch the values and edit
the same.please help with the classes for the above.

--- On Thu, 1/22/09, mneale1 <mneale1@...> wrote:
From: mneale1 <mneale1@...>
Subject: [ADSI-DirSrv] Re: Domain password policy using C#'
To: ADSIANDDirectoryServices@yahoogroups.com
Date: Thursday, January 22, 2009, 7:09 PM

breth82 - Are you certain that you can get and set the password? It

is a hashed value that is hashed by the domain controler as the

accounts are updated/created, I think.

In the past when I have looked at this I do not think that I could

even see the hashed value.

M.

--- In ADSIANDDirectorySer vices@yahoogroup s.com, "breth82"

<breth82@... > wrote:

>

> Hi

> i tried System.DirectorySer vices,

> System.DirectorySer vices.ActiveDire ctory . but i am not able to

get

> the exact class that is used to view and edit (in other words: get

and

> set) the domain password and account lockout policy.Can you please

> provide me with the class. its urgent.

>

>

>

>

>

> --- In ADSIANDDirectorySer vices@yahoogroup s.com, "mcdragon69"

> <mcdragon69@ > wrote:

> >

> > Have you tried System.DirectorySer vices,

> > System.DirectorySer vices.ActiveDire ctory

> >

> > --- In ADSIANDDirectorySer vices@yahoogroup s.com, "breth82"

> > <breth82@> wrote:

> > >

> > > hi all

> > > what are the C# classes used to get/set domain wide password

policy

> > > and account lockout policy.how do i view the values for the

same using

> > > C#.net .please reply asap.

> > >

> >

>











[Non-text portions of this message have been removed]

i just wanted to make things clear to you. don mistake me. the link which you
have sent
is incomplete
--- On Tue, 1/27/09, mneale1 <mneale1@...> wrote:
From: mneale1 <mneale1@...>
Subject: [ADSI-DirSrv] Re: Domain password policy using C#'
To: ADSIANDDirectoryServices@yahoogroups.com
Date: Tuesday, January 27, 2009, 10:23 PM











             Bret



First of all sorry for making you angry. second I have not altered

group policy programatically but you might look at the link below.



http://social. msdn.microsoft. com/Forums/ en-

US/csharpgeneral/ thread/f3f5a61f- 2ab9-459e- a1ee-c187465198e 0/



M.





























[Non-text portions of this message have been removed]

The link will not work due to the inserted spaces that yohoo put into it. The
link is to a discussion board with the topic of

How to create Group Policy Object programmatically using .NET and c#?

If you search on part of that string you could get there. Good luck.

M.

Hi All,

I am facing one problem while trying to change the Password using
following method:

DE.Invoke("ChangePassword", new object[] { oldPassword, newPassword });

where DE stands for Directory Entry object.

I am getting following Exception message:

"The password does not meet the password policy requirements.
Check the minimum password length, password complexity and
password history requirements. (Exception from HRESULT: 0x800708C5)"

I am using Windows Server 2008 for Active Directory.

Thanks & Regards,
Tarak Bhatt.

Hi Tarak,

Have you made sure that the contents of newPassword is at least 8 characters and
is made of at least 3 of the 4 (Uppercase Characters, Lowercase characters,
numbers, and special symbols/characters?) ChangeMe! is a good test also you
can't make the password equal to the userID or the userName.

Hope this helps,
Ken






_________________________________________________________________
Windows Live™: E-mail. Chat. Share. Get more ways to connect.
http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_allup_explore_012009

[Non-text portions of this message have been removed]

I am facing this problem.My aim is to add multiple computers into a
domain.I am using the "JoinDomainorWorkgroup" method.But i am not able
to add my test machine to the specified domain remotely.But i am able
to add the test machine if i run the code from th test machine .I am
the administrator and i wanna add multiple computers into a domain
from my machine.Please help me with a proper method and Class to solve
this problem.Reply asap.



Regards
Bret

Another thing to watch out for is min password age.  Many orgs implement a
min age of 1 day on a password and will give you this error if you try to
change more frequently.  I see this catching developers who are trying to
test their code and don't have a whole pile of test IDs available to switch
back and forth and avoid the problem.

Joe K.
----- Original Message -----
From: "kenneth Gross" <ken_gross144@...>
To: "Adsi Groups" <adsianddirectoryservices@yahoogroups.com>
Sent: Friday, January 30, 2009 4:38 AM
Subject: RE: [ADSI-DirSrv] ChangePassword Problem



Hi Tarak,

Have you made sure that the contents of newPassword is at least 8 characters
and is made of at least 3 of the 4 (Uppercase Characters, Lowercase
characters, numbers, and special symbols/characters?) ChangeMe! is a good
test also you can't make the password equal to the userID or the userName.

Hope this helps,
Ken






_________________________________________________________________
Windows LiveT: E-mail. Chat. Share. Get more ways to connect.
http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_allup_explore_012009

[Non-text portions of this message have been removed]


------------------------------------

Yahoo! Groups Links

Hi All,

Actually the situation is like:

I have to search for a user in Active Directory domain.
For that I am giving LDAP path.

But the User for which I wish to search phisycally/actually doesn't
belong to that LDAP.It belongs to other Trusted Domain.

There is reference of that user in one of the Groups in my LDAP.

So how to validate this "Reference" User ?

Note:

Platform Details:
C#.Net , Active Directory on Windows Server 2008

Thanks & Regards,
Tarak Bhatt.

Dear All,

i need your help regarding group policy. i have set account locked out
policy in DC with 5 invalid attempt. one problem i suddenly face for a
week that i found few account locked while it is not invalid attempt.
i verify my self a lot for to invalid attempt but frequently account
locked even server id which very different that is also locked. please
suggest what could be issue with AD or GP.


Regards & Thanks
Muhammad Qasim

Hi all,
Can you please tell me how to edit the domain policy values which is
stored in the Sysvol folder programatically using C#.As you all know,
the GPO is stored in Sysvol folder of the primary domain controller
.Please tell me how to view and edit the group policy values from the
Sysvol folder programatically using C#.Please do let me know the
interfaces and methods to do the same. Do let me know even if you are
able to do the same using other programming languages like C or C++ or
VB.Please help asap.




Regards
Bret

I am looking at a customer's environment where custom .NET programs carry
out user account provisioning jobs to AD every past midnight. They can
create users or adjust attributes, based on data from SAP.

Quite often, the use of the System.DirectoryServices.DirectoryEntry class to
make changes would result in errors recorded in the log file.


     *“The Directory service is Busy”*

*   at System.DirectoryServices.Interop.IAds.SetInfo()*

*   at System.DirectoryServices.DirectoryEntry.CommitChanges()*

What types of condition would result in such a response?


Thanks,
Aaron

--
The melody of logic will always play out the truth ~ Narumi Ayumu, Spiral


[Non-text portions of this message have been removed]

Question:

I have two active directory domain groups in my organization. I am trying to
find out who has admin right access to their local machines. I tried to write a
script and run to find out, but I am not a programming person and could't do it.
Does any body knows how to find out or does any body knows a script that works?

Your help is appriciated.

Lee

I had been recommended to check out the DirectoryServicesCOMException class,
which is features an ExtendedError property and ExtendedErrorMessage
property. However it appears this is only available in .NET 2.0. This
environment is running .NET 1.1.

I am taking a clue from Joe Kaplan's past suggestion on troubleshooting
using P/invoke direct into activeds.dll

http://groups.google.com/group/microsoft.public.adsi.general/msg/d3d9285c640ff58\
3?dmode=source&hl=en

I referenced the ADsGetLastError function doc

http://msdn.microsoft.com/en-us/library/aa772183(VS.85).aspx

and made a matching C# method
         [DllImport("activeds.dll", SetLastError = true, CharSet =
CharSet.Unicode)]
         private static extern int ADsGetLastError(out int lpError,
StringBuilder
lpErrorBuf, int dwErrorBufLen, StringBuilder lpNameBuf, int dwNameBufLen);

         public static string GetErrorMessageForLastAdsiError(int hresult)
         {
             int win32Facility = unchecked((int)0x80070000);
             int bufferSize = 256;
             int hr;
             int functionError;

StringBuilder errorDescription, nameDescription;

int errorCode;

// What does win32Facility serve here?
             if ((hresult & win32Facility) == win32Facility)
             {

                 errorDescription = new StringBuilder(bufferSize);
                 nameDescription = new StringBuilder(bufferSize);

hr = ADsGetLastError(out errorCode, errorDescription, bufferSize,
nameDescription, bufferSize);
                 if (hr == 0)
                 {
                     return string.Format("{0}: {1} ({2})", errorCode,
errorDescription,
nameDescription);
                 }
                 else
                 {
                     functionError = Marshal.GetLastWin32Error();
                     throw new
System.ComponentModel.Win32Exception(functionError);
                 }
             }
             else
             {
                 return string.Empty;
             }
         }

I tested it in a virtual environment domain, with a simple call to search
OUs when the domain controller machine was paused, thereby not responding.
The call to ADsGetLastError() came back with an errorCode of 0 and a mere
message of "(LDAP Provider)"

Cannot tell if this is correct behaviour or I am missing out on something?
Thanks,
Aaron


On Thu, Mar 12, 2009 at 10:45 PM, Aaron Seet <icelava@...> wrote:

> I am looking at a customer's environment where custom .NET programs carry
> out user account provisioning jobs to AD every past midnight. They can
> create users or adjust attributes, based on data from SAP.
>
> Quite often, the use of the System.DirectoryServices.DirectoryEntry
> class to make changes would result in errors recorded in the log file.
>
>
>     *“The Directory service is Busy”*
>
> *   at System.DirectoryServices.Interop.IAds.SetInfo()*
>
> *   at System.DirectoryServices.DirectoryEntry.CommitChanges()*
>
> What types of condition would result in such a response?
>
>
> Thanks,
> Aaron
>


[Non-text portions of this message have been removed]

You should be able to uninstall the ADAM instance from the *Windows
Add/Remove Programs* control panel.


Regards,
Aaron

On Thu, Dec 25, 2008 at 4:10 AM, Ashish Kanoongo
<ashishkanoongo@...>wrote:

>   Hello
>
> I have created 3 ADAM Instance. How do I remove 1 instance including
> their configuration instance also.
>
> Is there any GUI tool available on ADAM other then ADSIEdit utility for
> useer maint?
> .
>
>


[Non-text portions of this message have been removed]

My company uses ADAM for data. We've pushed the limits of writing to AD/AM to
the point that we were getting the same type of message. Initially, we thought
we could put in a write throttle and it seemed to work for about a month. Then
we started getting them again. More writes occurring. After digging some more,
what I determined was causing the issue was AD/AM objects that were not being
disposed of properly. As a standard practice within my company, if an object
implements the DISPOSE method, we wrap up the call in a "USING" statement. End
result is that the "The Directory service is Busy" error disappeared. Plus
memory usage dropped.

Stuart Miller, MCP, MCSD stumiller@...

> To: ADSIANDDirectoryServices@yahoogroups.com
> From: icelava@...
> Date: Mon, 23 Mar 2009 09:58:00 +0800
> Subject: [ADSI-DirSrv] Re: "Directory Service is Busy"
>
> I had been recommended to check out the DirectoryServicesCOMException class,
> which is features an ExtendedError property and ExtendedErrorMessage
> property. However it appears this is only available in .NET 2.0. This
> environment is running .NET 1.1.
>
> I am taking a clue from Joe Kaplan's past suggestion on troubleshooting
> using P/invoke direct into activeds.dll
>
>
http://groups.google.com/group/microsoft.public.adsi.general/msg/d3d9285c640ff58\
3?dmode=source&hl=en
>
> I referenced the ADsGetLastError function doc
>
> http://msdn.microsoft.com/en-us/library/aa772183(VS.85).aspx
>
> and made a matching C# method
> [DllImport("activeds.dll", SetLastError = true, CharSet =
> CharSet.Unicode)]
> private static extern int ADsGetLastError(out int lpError,
> StringBuilder
> lpErrorBuf, int dwErrorBufLen, StringBuilder lpNameBuf, int dwNameBufLen);
>
> public static string GetErrorMessageForLastAdsiError(int hresult)
> {
> int win32Facility = unchecked((int)0x80070000);
> int bufferSize = 256;
> int hr;
> int functionError;
>
> StringBuilder errorDescription, nameDescription;
>
> int errorCode;
>
> // What does win32Facility serve here?
> if ((hresult & win32Facility) == win32Facility)
> {
>
> errorDescription = new StringBuilder(bufferSize);
> nameDescription = new StringBuilder(bufferSize);
>
> hr = ADsGetLastError(out errorCode, errorDescription, bufferSize,
> nameDescription, bufferSize);
> if (hr == 0)
> {
> return string.Format("{0}: {1} ({2})", errorCode,
> errorDescription,
> nameDescription);
> }
> else
> {
> functionError = Marshal.GetLastWin32Error();
> throw new
> System.ComponentModel.Win32Exception(functionError);
> }
> }
> else
> {
> return string.Empty;
> }
> }
>
> I tested it in a virtual environment domain, with a simple call to search
> OUs when the domain controller machine was paused, thereby not responding.
> The call to ADsGetLastError() came back with an errorCode of 0 and a mere
> message of "(LDAP Provider)"
>
> Cannot tell if this is correct behaviour or I am missing out on something?
> Thanks,
> Aaron
>
>
> On Thu, Mar 12, 2009 at 10:45 PM, Aaron Seet <icelava@...> wrote:
>
> > I am looking at a customer's environment where custom .NET programs carry
> > out user account provisioning jobs to AD every past midnight. They can
> > create users or adjust attributes, based on data from SAP.
> >
> > Quite often, the use of the System.DirectoryServices.DirectoryEntry
> > class to make changes would result in errors recorded in the log file.
> >
> >
> > *“The Directory service is Busy”*
> >
> > * at System.DirectoryServices.Interop.IAds.SetInfo()*
> >
> > * at System.DirectoryServices.DirectoryEntry.CommitChanges()*
> >
> > What types of condition would result in such a response?
> >
> >
> > Thanks,
> > Aaron
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Yahoo! Groups Links
>
>
>


[Non-text portions of this message have been removed]

Yesterday I got hold of the actual source employee data and log file that
was used to update AD, and checked it against the user account provisioning
code. I began to observe a pattern in the errors, where employees/users with
no supervisor (NULL) were inducing the “directory service is busy error”.
Because they have no supervisor, the code logic attempts to assign a mere “
“ space into their AD user object’s manager property.

So I tested this theory out in my home domain,

                         public static void BlankManager(string username)
                         {
                                     DirectoryEntry updateUser =
FindStaticUser(username);
                                     if (updateUser == null)
                                                 throw new
ApplicationException(username + " not found in the static OU.");

                                     updateUser.Properties["manager"].Value =
" ";
                                     updateUser.CommitChanges();

                         }

                         public static void UnassignManager(string username)
                         {
                                     DirectoryEntry updateUser =
FindStaticUser(username);
                                     if (updateUser == null)
                                                 throw new
ApplicationException(username + " not found in the static OU.");

                                     if
(updateUser.Properties.Contains("manager"))
                                     {

updateUser.Properties["manager"].RemoveAt(0);
                                                 updateUser.CommitChanges();
                                     }

                         }

True enough, the first method will cause the “Directory service is busy”
error to surface – after a typical 30-second wait. Additional info returned
from that p/invoke method call:

8409: 000020D9: SvcErr: DSID-031510BA, problem 5001 (BUSY), data 13
  (LDAP Provider)

The manager attribute is designed to accept a DN that points to another user
object, so it appears a whitespace character is not going to cut it. The
second method is able to properly remove any manager currently assigned to a
user. It does seem odd though, why wouldn’t AD immediately respond stating
“invalid user DN; cannot assign manager” for an error message. In this
manner, it seems to think a single space character is a valid DN and
attempts to go look for that in the AD store, and even thinks it is busy.

At any rate we have reported our findings to the customer and hopefully be
able to test this out in their environment soon.

Thanks,
Aaron


[Non-text portions of this message have been removed]

In an interesting turn of events, we have gotten access to one of the
customer's test domain, and I wasted no time attempting the same tests onto
this domain. Surprisingly the method to assign a " " whitespace to the
manager property *actually works*. The user's manager property will no
longer show another user. It seems the production domain and my home domain
are exhibiting some sort of behaviour that this test domain, and possibly
the past development domains, were not "inflicted" with. That may suggest
why the previous developers did not find anything wrong with this code.

Does anybody have any experience or further insight to explain this
behaviour? Is a whitespace considered a valid way to unassign a user's
manager?


Thanks,
Aaron

On Tue, Mar 24, 2009 at 11:53 AM, Aaron Seet <icelava@...> wrote:

> Yesterday I got hold of the actual source employee data and log file that
> was used to update AD, and checked it against the user account provisioning
> code. I began to observe a pattern in the errors, where employees/users with
> no supervisor (NULL) were inducing the “directory service is busy error”.
> Because they have no supervisor, the code logic attempts to assign a mere “
> “ space into their AD user object’s manager property.
> .
> .
> .
> The manager attribute is designed to accept a DN that points to another
> user object, so it appears a whitespace character is not going to cut it.
> The second method is able to properly remove any manager currently assigned
> to a user. It does seem odd though, why wouldn’t AD immediately respond
> stating “invalid user DN; cannot assign manager” for an error message. In
> this manner, it seems to think a single space character is a valid DN and
> attempts to go look for that in the AD store, and even thinks it is busy.
>


[Non-text portions of this message have been removed]

On further investigation, a domain controller that is not patched to SP1 or
SP2, thereby remaining at RTM patch level, would accept a “ “ space value
for a user’s Manager property when assigned programmatically. When the
domain controller is at least applied with SP1, a half-minute delay would
happen before return the “Directory service is busy” error.



On 1st april approval was granted to deploy the code fix to the production
environment, and the user account provisioning job succeeded without error.



Aaron


On Thu, Mar 26, 2009 at 3:36 PM, Aaron Seet <icelava@...> wrote:

> In an interesting turn of events, we have gotten access to one of the
> customer's test domain, and I wasted no time attempting the same tests onto
> this domain. Surprisingly the method to assign a " " whitespace to the
> manager property *actually works*. The user's manager property will no
> longer show another user. It seems the production domain and my home domain
> are exhibiting some sort of behaviour that this test domain, and possibly
> the past development domains, were not "inflicted" with. That may suggest
> why the previous developers did not find anything wrong with this code.
>
> Does anybody have any experience or further insight to explain this
> behaviour? Is a whitespace considered a valid way to unassign a user's
> manager?
>
>
> Thanks,
> Aaron
>


[Non-text portions of this message have been removed]

Hi Techies,

I am having 10 W2K3 SP2 DC's and 5 Exchange 2003 with SP2 Boxes. User's AD
accounts are getting deleted often. I am not able to track them. Also not sure
from which DC's or Exchange boxes accounts are getting deleted. The security
event for deletion is 630 but how and where to check. Need help to sort this

Please help

Regards,
BT

Howdie!

Enable auditing in a gpo linked to the domain controllers OU. It should advise
your dcs to log deletion attempts then. Make sure you check the security logs of
all dcs as only one dc (where the deletion happens) logs it in its eventlog.

Cheers,
florian

-----Original Message-----
From: bhaskar_maahi <bhaskar_maahi@...>
Sent: Montag, 11. Mai 2009 00:07
To: ADSIANDDirectoryServices@yahoogroups.com
Subject: [ADSI-DirSrv] User deletion in AD



Hi Techies,

  I am having 10 W2K3 SP2 DC's and 5 Exchange 2003 with SP2 Boxes. User's AD
accounts are getting deleted often. I am not able to track them. Also not sure
from which DC's or Exchange boxes accounts are getting deleted. The security
event for deletion is 630 but how and where to check. Need help to sort this

  Please help

  Regards,
  BT



[Non-text portions of this message have been removed]

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory...I have group policy management
console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration--->Windows settings--->Internet
Explorer maintenance---->URL's---->Important URL's remain the same in firefox as
well...& Group policy object--->User configuration--->Windows
settings--->Internet Explorer maintenance---->Browser user interface--->Browser
title--->Customize broswer title be effective as well...

Request everyone who are aware about this to help me...

Howdie!



The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.



Cheers,

Florian



From: ADSIANDDirectoryServices@yahoogroups.com
[mailto:ADSIANDDirectoryServices@yahoogroups.com] On Behalf Of nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectoryServices@yahoogroups.com
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory





Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory...I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration--->Windows settings--->Internet
Explorer maintenance---->URL's---->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration--->Windows
settings--->Internet Explorer maintenance---->Browser user
interface--->Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...





[Non-text portions of this message have been removed]

Hi Florian,

I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know how
can I make Mozilla firefox as the default browser for that OU...




________________________________
From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

 
Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
[mailto:ADSIANDDirectorySer vices@yahoogroup s.com] On Behalf Of nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]





       See the Web&#39;s breaking stories, chosen by people like you. Check out
Yahoo! Buzz. http://in.buzz.yahoo.com/

[Non-text portions of this message have been removed]

Howdie!



Is Firefox already installed on the boxes? If not - how are you going to
distribute them? In the Firefox MSI there should be a switch/property to set
whether Firefox should advertise itself as the default application.



With Firefox already installed on the boxes, I'm afraid there's no built-in
GPO to set it as the default browser. I guess you'll have to set it manually
using a startup or logon script, a custom ADM template file or Group Policy
Preference. The corresponding registry entries are, as far as I can tell,
correctly mentioned in this Microsoft Forums thread:



http://social.technet.microsoft.com/Forums/en-US/appvgeneralsequencing/threa
d/00cdcb83-7bd2-4fae-b5c2-b8038d6f1943 - it's the second last posting. You
obviously have to change the path to IE in this example to the executable of
firefox.



Cheers,

Florian



From: nagaraju podugollu [mailto:nagaraju_p_p@...]
Sent: Donnerstag, 27. August 2009 12:04
To: ADSIANDDirectoryServices@yahoogroups.com; florian@...
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory



Hi Florian,



I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know
how can I make Mozilla firefox as the default browser for that OU...



   _____

From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory



Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDirectoryServices%40yahoogroups.com>
[mailto:ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDirectoryServices%40yahoogroups.com> ] On Behalf Of
nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDirectoryServices%40yahoogroups.com>
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]




start: 2009-06-21 end: 0000-00-00

   _____

Love Cricket? Check out live scores, photos, video highlights and more.
Click here
<http://in.rd.yahoo.com/tagline_cricket_2/*http:/cricket.yahoo.com> .



[Non-text portions of this message have been removed]

Hi Florian,

Firefox is already installed on those boxes and as you have said there would be
an option to set that internet browser as the default application for internet
browing,however I should go through the link to make a startup script or
Gpo,because if there are more users we cant go and set it as the default
application...

I will go through the link and see if it works...

Thanks in advance Florian...


________________________________
From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Thursday, 27 August, 2009 3:59:26 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

 
Howdie!

Is Firefox already installed on the boxes? If not - how are you going to
distribute them? In the Firefox MSI there should be a switch/property to set
whether Firefox should advertise itself as the default application.

With Firefox already installed on the boxes, I'm afraid there's no built-in
GPO to set it as the default browser. I guess you'll have to set it manually
using a startup or logon script, a custom ADM template file or Group Policy
Preference. The corresponding registry entries are, as far as I can tell,
correctly mentioned in this Microsoft Forums thread:

http://social. technet.microsof t.com/Forums/ en-US/appvgenera lsequencing/
threa
d/00cdcb83-7bd2- 4fae-b5c2- b8038d6f1943 - it's the second last posting. You
obviously have to change the path to IE in this example to the executable of
firefox.

Cheers,

Florian

From: nagaraju podugollu [mailto:nagaraju_p_p@ yahoo.co. in]
Sent: Donnerstag, 27. August 2009 12:04
To: ADSIANDDirectorySer vices@yahoogroup s.com; florian@frickelsoft .net
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi Florian,

I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know
how can I make Mozilla firefox as the default browser for that OU...

_____

From: Florian Frommherz <florian@frickelsoft .net>
To: ADSIANDDirectorySer vices@yahoogroup s.com
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
[mailto:ADSIANDDire ctorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com> ] On Behalf Of
nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]

start: 2009-06-21 end: 0000-00-00

_____

Love Cricket? Check out live scores, photos, video highlights and more.
Click here
<http://in.rd. yahoo.com/ tagline_cricket_ 2/*http:/ cricket.yahoo. com> .

[Non-text portions of this message have been removed]





       Fitness on your mind? Check out nearby gyms on Yahoo! India Local
http://in.local.yahoo.com/

[Non-text portions of this message have been removed]

Hi Florian,

I have tried setting the registries in GPO->Computer configuration->windows
settings->security settings->registry->right pane ->right click and add new key
and have added the keys for machine and current user in users default and few
times in shell command options I had to remove the space after url however this
didnt work...

I have even copied the entire data of registry keys which are there in that
forum and have created a file with extension .reg and added it to the users
startup and logon scripts as well however it didnt work, I have saved those
registry values in a file with .reg extension and executed it on a workstation
PC as administrator and it has asked me whether it should update the registry
values when I have clicked yes it updated and after a logoff and relogin it
worked.

However I want this to work for that OU...

Thanks in advance...



________________________________
From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Thursday, 27 August, 2009 3:59:26 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

 
Howdie!

Is Firefox already installed on the boxes? If not - how are you going to
distribute them? In the Firefox MSI there should be a switch/property to set
whether Firefox should advertise itself as the default application.

With Firefox already installed on the boxes, I'm afraid there's no built-in
GPO to set it as the default browser. I guess you'll have to set it manually
using a startup or logon script, a custom ADM template file or Group Policy
Preference. The corresponding registry entries are, as far as I can tell,
correctly mentioned in this Microsoft Forums thread:

http://social. technet.microsof t.com/Forums/ en-US/appvgenera lsequencing/
threa
d/00cdcb83-7bd2- 4fae-b5c2- b8038d6f1943 - it's the second last posting. You
obviously have to change the path to IE in this example to the executable of
firefox.

Cheers,

Florian

From: nagaraju podugollu [mailto:nagaraju_p_p@ yahoo.co. in]
Sent: Donnerstag, 27. August 2009 12:04
To: ADSIANDDirectorySer vices@yahoogroup s.com; florian@frickelsoft .net
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi Florian,

I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know
how can I make Mozilla firefox as the default browser for that OU...

_____

From: Florian Frommherz <florian@frickelsoft .net>
To: ADSIANDDirectorySer vices@yahoogroup s.com
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
[mailto:ADSIANDDire ctorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com> ] On Behalf Of
nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]

start: 2009-06-21 end: 0000-00-00

_____

Love Cricket? Check out live scores, photos, video highlights and more.
Click here
<http://in.rd. yahoo.com/ tagline_cricket_ 2/*http:/ cricket.yahoo. com> .

[Non-text portions of this message have been removed]





       Love Cricket? Check out live scores, photos, video highlights and more.
Click here http://cricket.yahoo.com

[Non-text portions of this message have been removed]

Howdie!



A couple of things here: First, the Windows Settings\Security
Settings\Registry applet is only used for tweaking permission on already
existing registry keys. You cannot add new ones there. It's just a
permission thing.



Second, the way you tried to work it out with the .reg file was correct. Was
you need to do is, rather than executing it in a user logon script, you fire
it in a computer startup script. There's a difference between the two: while
the user logon script runs in the logged on user's context, the computer
startup script runs in the SYSTEM context. Obviously, the two contexts (user
vs. SYSTEM) have different permissions on the system. Users aren't allowed
to write into the CLASSES hive (or the LOCAL_MACHINE hive for most parts).
The SYSTEM account is allowed to do that - so you need to use a computer
startup script to call your .reg file. The script could be as simple as



Regedit /s \\server\share\myReg.reg



- where myReg.reg is your reg file and /s stands for "silent" so it doesn't
ask questions.



Cheers,

Florian



From: nagaraju podugollu [mailto:nagaraju_p_p@...]
Sent: Freitag, 28. August 2009 12:36
To: ADSIANDDirectoryServices@yahoogroups.com; florian@...
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory



Hi Florian,



I have tried setting the registries in GPO->Computer configuration->windows
settings->security settings->registry->right pane ->right click and add new
key and have added the keys for machine and current user in users default
and few times in shell command options I had to remove the space after url
however this didnt work...



I have even copied the entire data of registry keys which are there in that
forum and have created a file with extension .reg and added it to the users
startup and logon scripts as well however it didnt work, I have saved those
registry values in a file with .reg extension and executed it on a
workstation PC as administrator and it has asked me whether it should update
the registry values when I have clicked yes it updated and after a logoff
and relogin it worked.



However I want this to work for that OU...



Thanks in advance...



   _____

From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Thursday, 27 August, 2009 3:59:26 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory



Howdie!

Is Firefox already installed on the boxes? If not - how are you going to
distribute them? In the Firefox MSI there should be a switch/property to set
whether Firefox should advertise itself as the default application.

With Firefox already installed on the boxes, I'm afraid there's no built-in
GPO to set it as the default browser. I guess you'll have to set it manually
using a startup or logon script, a custom ADM template file or Group Policy
Preference. The corresponding registry entries are, as far as I can tell,
correctly mentioned in this Microsoft Forums thread:

http://social. technet.microsof t.com/Forums/ en-US/appvgenera lsequencing/
threa
<http://social.technet.microsoft.com/Forums/en-US/appvgeneralsequencing/thre
a>
d/00cdcb83-7bd2- 4fae-b5c2- b8038d6f1943 - it's the second last posting. You
obviously have to change the path to IE in this example to the executable of
firefox.

Cheers,

Florian

From: nagaraju podugollu [mailto:nagaraju_p_p@ yahoo.co. in
<mailto:nagaraju_p_p%40yahoo.co.in> ]
Sent: Donnerstag, 27. August 2009 12:04
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDirectoryServices%40yahoogroups.com> ; florian@frickelsoft
.net <mailto:florian%40frickelsoft.net>
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi Florian,

I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know
how can I make Mozilla firefox as the default browser for that OU...

_____

From: Florian Frommherz <florian@frickelsoft .net
<mailto:florian%40frickelsoft.net> >
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDirectoryServices%40yahoogroups.com>
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
[mailto:ADSIANDDire ctorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com> ] On Behalf Of
nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]

start: 2009-06-21 end: 0000-00-00

_____

Love Cricket? Check out live scores, photos, video highlights and more.
Click here
<http://in.rd. yahoo.com/ tagline_cricket_ 2/*http:/ cricket.yahoo. com
<http://in.rd.yahoo.com/tagline_cricket_2/*http:/cricket.yahoo.com> > .

[Non-text portions of this message have been removed]







   _____

See the Web's breaking stories, chosen by people like you. Check out Yahoo!
Buzz <http://in.rd.yahoo.com/tagline_buzz_1/*http:/in.buzz.yahoo.com/> .



[Non-text portions of this message have been removed]

Hi Florian,

Thank you for yopur suggestion, I was a lil busy with personal and professional
works too much that I havent even checked my mails from saturday evening...I
have just checked it now...

I will try the method which you have suggested and check the outcome...Thank you
very much Florian...




________________________________
From: Florian Frommherz <florian@...>
To: ADSIANDDirectoryServices@yahoogroups.com
Sent: Friday, 28 August, 2009 4:17:38 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

 
Howdie!

A couple of things here: First, the Windows Settings\Security
Settings\Registry applet is only used for tweaking permission on already
existing registry keys. You cannot add new ones there. It's just a
permission thing.

Second, the way you tried to work it out with the .reg file was correct. Was
you need to do is, rather than executing it in a user logon script, you fire
it in a computer startup script. There's a difference between the two: while
the user logon script runs in the logged on user's context, the computer
startup script runs in the SYSTEM context. Obviously, the two contexts (user
vs. SYSTEM) have different permissions on the system. Users aren't allowed
to write into the CLASSES hive (or the LOCAL_MACHINE hive for most parts).
The SYSTEM account is allowed to do that - so you need to use a computer
startup script to call your .reg file. The script could be as simple as

Regedit /s \\server\share\ myReg.reg

- where myReg.reg is your reg file and /s stands for "silent" so it doesn't
ask questions.

Cheers,

Florian

From: nagaraju podugollu [mailto:nagaraju_p_p@ yahoo.co. in]
Sent: Freitag, 28. August 2009 12:36
To: ADSIANDDirectorySer vices@yahoogroup s.com; florian@frickelsoft .net
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi Florian,

I have tried setting the registries in GPO->Computer configuration- >windows
settings->security settings->registry- >right pane ->right click and add new
key and have added the keys for machine and current user in users default
and few times in shell command options I had to remove the space after url
however this didnt work...

I have even copied the entire data of registry keys which are there in that
forum and have created a file with extension .reg and added it to the users
startup and logon scripts as well however it didnt work, I have saved those
registry values in a file with .reg extension and executed it on a
workstation PC as administrator and it has asked me whether it should update
the registry values when I have clicked yes it updated and after a logoff
and relogin it worked.

However I want this to work for that OU...

Thanks in advance...

_____

From: Florian Frommherz <florian@frickelsoft .net>
To: ADSIANDDirectorySer vices@yahoogroup s.com
Sent: Thursday, 27 August, 2009 3:59:26 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Howdie!

Is Firefox already installed on the boxes? If not - how are you going to
distribute them? In the Firefox MSI there should be a switch/property to set
whether Firefox should advertise itself as the default application.

With Firefox already installed on the boxes, I'm afraid there's no built-in
GPO to set it as the default browser. I guess you'll have to set it manually
using a startup or logon script, a custom ADM template file or Group Policy
Preference. The corresponding registry entries are, as far as I can tell,
correctly mentioned in this Microsoft Forums thread:

http://social. technet.microsof t.com/Forums/ en-US/appvgenera lsequencing/
threa
<http://social. technet.microsof t.com/Forums/ en-US/appvgenera lsequencing/
thre
a>
d/00cdcb83-7bd2- 4fae-b5c2- b8038d6f1943 - it's the second last posting. You
obviously have to change the path to IE in this example to the executable of
firefox.

Cheers,

Florian

From: nagaraju podugollu [mailto:nagaraju_ p_p@ yahoo.co. in
<mailto:nagaraju_ p_p%40yahoo. co.in> ]
Sent: Donnerstag, 27. August 2009 12:04
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com> ; florian@frickelsoft
.net <mailto:florian% 40frickelsoft. net>
Subject: Re: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi Florian,

I dont have any issue's creating a different GPO for firefox and also
mentionening the Important links as well in that GPO, however I want to know
how can I make Mozilla firefox as the default browser for that OU...

_____

From: Florian Frommherz <florian@frickelsof t .net
<mailto:florian% 40frickelsoft. net> >
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
Sent: Thursday, 27 August, 2009 1:10:53 PM
Subject: RE: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Howdie!

The homepage won't change if you use the IE Group Policy and people use
Firefox. You will have to basically create a different GPO for Firefox users
as Firefox stores its configuration differently.

Cheers,

Florian

From: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
[mailto:ADSIANDDire ctorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com> ] On Behalf Of
nagaraju_p_p
Sent: Donnerstag, 27. August 2009 06:38
To: ADSIANDDirectorySer vices@yahoogroup s.com
<mailto:ADSIANDDire ctoryServices% 40yahoogroups. com>
Subject: [ADSI-DirSrv] how to change default browser for an OU in Active
directory

Hi all,

I want to changte the default browser from Microsoft Internet Explorer to
Mozilla Firefox For an OU in Active directory... I have group policy
management console installed...

Also if I change the default browser would the Homepage which we specify in
Group policy object--->User configuration- -->Windows settings---> Internet
Explorer maintenance- --->URL's- --->Important URL's remain the same in
firefox as well...& Group policy object--->User configuration- -->Windows
settings---> Internet Explorer maintenance- --->Browser user
interface--- >Browser title--->Customize broswer title be effective as
well...

Request everyone who are aware about this to help me...

[Non-text portions of this message have been removed]

start: 2009-06-21 end: 0000-00-00

_____

Love Cricket? Check out live scores, photos, video highlights and more.
Click here
<http://in.rd. yahoo.com/ tagline_cricket_ 2/*http:/ cricket.yahoo. com
<http://in.rd. yahoo.com/ tagline_cricket_ 2/*http:/ cricket.yahoo. com> > .

[Non-text portions of this message have been removed]

_____

See the Web's breaking stories, chosen by people like you. Check out Yahoo!
Buzz <http://in.rd. yahoo.com/ tagline_buzz_ 1/*http:/ in.buzz.yahoo. com/> .

[Non-text portions of this message have been removed]





       See the Web&#39;s breaking stories, chosen by people like you. Check out
Yahoo! Buzz. http://in.buzz.yahoo.com/

[Non-text portions of this message have been removed]

Hi,

Im trying to connect to a Novell directory using .NET.  I need to get the GUID
from nodes in the tree to store in a database.  However when I try to access
DirectoryEntry.Guid it throws the following exception:


System.Runtime.InteropServices.ExternalException
{"Exception from HRESULT: 0x8000500D"}

The Guid property works correctly when connecting to a windows active directory.

I've done some googling and there is some info about this problem but no
solutions.  Has anybody else experienced this or have any suggestions about how
I can get around it.

Many Thanks,
Martyn.