Category: Collaboration and workspace


http://msdn.microsoft.com/en-us/library/windows/hardware/dn529134

Advertisements

You can found many articles about this issue:

http://social.technet.microsoft.com/Forums/en/sharepointadmin/thread/d782e431-1034-48a6-9d57-df87dc51f0b6
http://www.bronios.com/index.php/2008/07/10/moss-people-picker-cannot-search-ad-users-from-other-domains/
http://blogs.msdn.com/b/jingmeili/archive/2007/02/26/people-picker-in-moss-2007-can-t-find-people-in-non-default-domains.aspx

http://technet.microsoft.com/en-us/library/gg602068.aspx

When users and groups are migrated using the Active Directory Migration Tool (ADMT) or using Quest Migration Manager, there is an option to copy the SID’s of the objects in the source domain to the target domain. The reason for this is to allow migrated users to access resources which are still located in the source domain, and hence are secured with SID’s of the source domain.

By default a trust doesn’t allows users to access resources by using SID’s from their SID history. This is security feature. When creating a trust the following message is shown:

image

SIDhistory can be temporarily enabled until all resources are migrated from the source domain. SID history should be enabled on the outgoing trust of the trusting domain. The following example will explain the roles of the domains in the commands:

  • Source domain
    • contains the user & group objects before migration
    • contains the resources to be accessible during the migration
    • is called the “trusting” domain
  • Target domain
    • contains the user & group objects after they are migrated
    • is called the “trusted” domain

Which command to use depends on the type of the trust:

  • External trust: netdom trust trustingDomain /domain:trustedDomain /quarantine:no
  • Forest trust: netdom trust trustingDomain /domain:trustedDomain /enableSIDhistory:yes

It might seem contradictory that one command requires yes and the other no, but in fact these both enable the use of SIDhistory across the trust. If you want to determine the current state, simply execute the command without the “:no” or “:yes” behind them. An example:

image

Depending from which side of the trust you launch this command, you might have to specify additional credentials, you can specify (optional) credentials for both the trusting and the trusted domain. The commandline options for netdom trust are explained at TechNet.

Today I received “access is denied” both at trying to enable SIDhistory or simply trying to determine the current setting.

image

The reason? “Network access: Allow anonymous SID/Name translation” has to be enabled on the domain controllers. This settings can be found in the domain controllers GPO’s (either the default or your custom ones) at “Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options”. On a Windows 2003 domain this is not disabled by default, but in my Windows 2008 R2 target domain, the Microsoft Enterprise Client security model is implemented and this disables the anonymous SID/Name translation. if you want additional information about this setting, check KB823659

I think it might actually be necessary to enable this when configuring or reading the current setting concerning the SIDhistory. I don’t think this has to be enabled for SIDhistory to actually work. If it does, I’ll post an update in the following weeks.

My source: http://portal.sivarajan.com/2009/06/sid-filtering-access-is-denied.html

In the end all is fine:

image

Tout d’abord il faut se munir du film DVD ou de la séquence à insérer. Puis il faut la convertir au format AVI,

Pour le faire, utiliser l’utilitaire gratuit “Quick Media Converter”: http://www.01net.com/telecharger/windows/Multimedia/encodeurs_et_decodeurs/fiches/42769.html

Cette fois, vous voulez couper un morceau du film converti afin de l’insérer dans une présentation open office impress:

Pour couper le morceau du film, vous pouvez utiliser Windows movie maker: http://www.commentcamarche.net/faq/12810-couper-une-video-avec-windows-movie-maker#top

ou VirtualDub: http://www.tutomaker.com/tutoriaux/informatique/couper-extraire-morceau,video-virtualdubmod,18.html

Créer un dossier appeller par exemple “ma présentation” et y copier la séquence vidéo au format avi, et de ce même répertoire, créer un présentation open office impress

et sauvegarder la dans ce même répertoire. Dans open office impress; il suffit d’insérer la séquence vidéo (l’option Insertion/Objets/Vidéo) et de sauvegarder le tout dans le même répertoire.

Lire ceci: http://user.services.openoffice.org/fr/forum/viewtopic.php?f=5&t=10759

Note: questions/réponses sur open office impress: http://wiki.services.openoffice.org/wiki/Fr.openoffice.org/FAQ/Impress/101