Errata

The email address to request a catalog or be put on the O'Reilly mailing list was changed from "nuts@oreilly.com" to "info@oreilly.com".

"This hierarchy is made up of objects that can act as
containers and objects cannot."

Now reads:

"This hierarchy is made up of objects that can act as
containers and objects that cannot."

I noticed a simple subject-verb agreement error on page 13 in the paragraph that begins "Active Directory is split into...":
Text:
"One NC is known as the Configuration and holds data representing the entire
configuration of the forest, e.g., the list of NCs, how the physical network
of sites and servers are configured, and so on."

Unless I'm terribly mistaken, and in which case I would beg your pardon, the
middle clause should be: "e.g., the list of NCs, how the physical network of
sites and servers is configured,".

AUTHOR: Paul is quite right. Thanks Paul!

"Although the Schema appears to be a child of the Configuration, ..."

Now reads:

"Although the Schema container appears to be a child of the Configuration
container, ..."

"This ensures that should a search **** comes ***** in from
a user for a property that exists in the GC, but to which
the user has no read permission, the property will not be
returned."

Now reads:

"This ensures that should a search **** come ***** in from
a user for a property that exists in the GC, but to which
the user has no read permission, the property will not be
returned."

In the second Note Tip, the formatting of the LDAP path has been changed so the entries: "cn= Default Query Policy, cn=Query-Policies..."
appear closer together.

The title of column 4 did read:

"Attribute defined on which object"

Now reads:

"Attribute is defined on which class"

Figure 4-1 the arrow showing the passage of time has been changed to point down, rather than up.

The bottom-left entry in Table 4-2 was changed from "1111" to "1112".

"If at any point you...Either or both can be used to help solve your
problems"

Now reads:

"If at any point you need to debug group policies, there are two
mechanisms: using a checked version of a DLL to produce a special log, or
setting registry settings to generate verbose information to the normal
event logs. The former has worked for Windows NT for some time and so is
adequately described for Windows NT 4.0 System Policies in Microsoft
Knowledge Base article Q154120, which can be found at
http://support.microsoft.com/support/kb/articles/q154/1/20.asp. The next two
sections cover each of these methods, and either or both may be used to
solve your problem. However, you should note that the former is probably the
more difficult of the two soley because you need to contact
Microsoft to get hold of the checked version of the DLL you need, whereas
the latter is solely a registry change."

"Zoomit...can be found on their web site at http://www.zoomit.com/."

Now reads:

"Zoomit and its VIA software was the recognized industry leader in
directory interoperability and consolidation in 1999, when Microsoft
purchased the company. The product is now available as Microsoft
Metadirectory Services. More details can be found here:
http://www.microsoft.com/WINDOWS2000/guide/server/features/mms.asp."

The footnote at the bottom of the page has also been removed.

"Microsoft would like everyone to use Active Directory as the one true
directory service; so would Novell, Netscape, and Sun."

Now reads:

"Microsoft would like everyone to use Active Directory as the one true
directory service; just as Novell and Netscape/Sun/iPlanet would like you to
use theirs."