In reply to the last two: Sending an email is very useful in our environment where 50% of our users are remote and we have a large number of linux & OSX users who never login to the domain, hence they aren't aware of password expiration until it's too late.
If you have anyone who knows some basic scripting you could setup a job to run Network Account Password Age, find the users with passwords x days old and send an email. The link to download the software:
http://www.jsiinc.com/SUBH/tip3900/rh3988.htm
I've run into this many times. If the flow-tcp-mss setting on the firewall side doesn't fix it, you'll need to change your MTU on the windows end. Here's what I send to my users having the same problem:
To change your MTU:
First, get your current IP : Start > Run > cmd > ipconfig
Second...
Try setting the MTU to 1400 on your Win2K box thats behind the linksys. Also you may need to allow port 500 UDP incoming on the linksys for IKE.
On your Netscreen you may want to add this line via cli:
set flow tcp-mss
It'll stop fragmentation which tends to kill terminal services.
telnet to the netscreen and try this cli command:
set flow tcp-mss
save
Tons of my users were having this problem with outlook. seems to be due to fragmentation. this'll limit the maximum segement size and should keep outlook from hanging.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.