Re: Oracle on Windows with Active Directory

As I remember, I was authenticated against AD. The 'problem' server is up in Spokane and I'm in Denver, and the only way I could login remotely (while it was in AD), was to authenticate against AD. Because of this, Oracle insisted on grabbing all the information it could from AD, and not allowing me to specify anything different. In the workgroup configuration I didn't have the problem.

Our AD was designed by the folks at DOI, who I have never been impressed with yet in 18 years for any kind of technical decision, so there are quite a few flaws in the system. This was just the one that caused me the most grief until I moved it out of AD, and I've been so busy since I haven't bothered to investigate further since at least now it's working. One of these days though I imagine somebody will eventually force me to place these three servers back in AD, and knowing some of the pitfalls I'll encounter and how to address them would be handy. It may also allow me to either keep them in a workgroup, or at least force some changes in our AD implementation if this arrangement is less than ideal, instead of waiting until the last minute to try and get changes made.

One of biggest gripes/fears with our AD implementation (and why I prefer to keep the machines in a workgroup), is that any Domain Admin from any of the other agencies could fairly easily write a group policy to add themselves as an administrator on my machines and then force the policy out, and I am unable to prevent inheritance of group policies. It may be a groundless fear, but it still a possibility that I am dead-set against. I've only been lucky so far in that we are so big and dispersed, my machines have escaped detection so far.

If this configuration is problemmatic, that would be good to know when they finally catch up with me.

Thanks.

-- 
-- Bill Ferguson


On Thu, Oct 30, 2008 at 6:48 AM, Paul Drake <bdbafh_at_gmail.com> wrote:


>

>

>

> Bill,

>

> Were you logged on locally, or authenticated against the active directory

> when you were installing the software?

>

> I typically use a local OS account when installing the oracle software and

> have a local account own the oracle services.

>

> thanks,

>

> Paul

>

>

>

--
http://www.freelists.org/webpage/oracle-l