Errata for Windows 2000 Active Directory

The email address to request a catalog or be put on the O'Reilly mailing list was changed from "nuts@oreilly.com" to "info@oreilly.com".

"This hierarchy is made up of objects that can act as containers and objects cannot." Now reads: "This hierarchy is made up of objects that can act as containers and objects that cannot."

I noticed a simple subject-verb agreement error on page 13 in the paragraph that begins "Active Directory is split into...": Text: "One NC is known as the Configuration and holds data representing the entire configuration of the forest, e.g., the list of NCs, how the physical network of sites and servers are configured, and so on." Unless I'm terribly mistaken, and in which case I would beg your pardon, the middle clause should be: "e.g., the list of NCs, how the physical network of sites and servers is configured,". AUTHOR: Paul is quite right. Thanks Paul!

"Although the Schema appears to be a child of the Configuration, ..." Now reads: "Although the Schema container appears to be a child of the Configuration container, ..."

"This ensures that should a search **** comes ***** in from a user for a property that exists in the GC, but to which the user has no read permission, the property will not be returned." Now reads: "This ensures that should a search **** come ***** in from a user for a property that exists in the GC, but to which the user has no read permission, the property will not be returned."

In the second Note Tip, the formatting of the LDAP path has been changed so the entries: "cn= Default Query Policy, cn=Query-Policies..." appear closer together.

The title of column 4 did read: "Attribute defined on which object" Now reads: "Attribute is defined on which class"

Figure 4-1 the arrow showing the passage of time has been changed to point down, rather than up.

The bottom-left entry in Table 4-2 was changed from "1111" to "1112".

"If at any point you...Either or both can be used to help solve your problems" Now reads: "If at any point you need to debug group policies, there are two mechanisms: using a checked version of a DLL to produce a special log, or setting registry settings to generate verbose information to the normal event logs. The former has worked for Windows NT for some time and so is adequately described for Windows NT 4.0 System Policies in Microsoft Knowledge Base article Q154120, which can be found at http://support.microsoft.com/support/kb/articles/q154/1/20.asp. The next two sections cover each of these methods, and either or both may be used to solve your problem. However, you should note that the former is probably the more difficult of the two soley because you need to contact Microsoft to get hold of the checked version of the DLL you need, whereas the latter is solely a registry change."

"Zoomit...can be found on their web site at http://www.zoomit.com/." Now reads: "Zoomit and its VIA software was the recognized industry leader in directory interoperability and consolidation in 1999, when Microsoft purchased the company. The product is now available as Microsoft Metadirectory Services. More details can be found here: http://www.microsoft.com/WINDOWS2000/guide/server/features/mms.asp." The footnote at the bottom of the page has also been removed.

"Microsoft would like everyone to use Active Directory as the one true directory service; so would Novell, Netscape, and Sun." Now reads: "Microsoft would like everyone to use Active Directory as the one true directory service; just as Novell and Netscape/Sun/iPlanet would like you to use theirs."