Windows Server Active Directory

GPO Objects not available on the server

Edward Cook - 10 Jun 2006 7:59 PM - 2 messages

Here is a strange problem that I have been strugling with recently. The GPO Admin templates won't show up on the server if they are to be pulled from the GPO. But they show up on a workstation when looking at the GPO. If I set ...

W2k to W2k3

Sam - 10 Jun 2006 6:01 PM - 3 messages

Hi, I have a single label domain name eg WindChimes. I wish to change it to WindChimes.Com. If I were to upgrade my windows 2000 DC to Windows 2003, would I be able then to perform a domain name change? ...

Given access to edit active directory

pbuzzby - 10 Jun 2006 9:21 AM - 6 messages

Hi We are tighing up permission on our office network and want to remove the admin permissions to a lot of server. What i need to do is allow an Actiove directory group to login to the domain controller and ONLY have access to the magae active directory ...

Assigning Administrator permission to a OU through group policy

pbuzzby - 10 Jun 2006 9:16 AM - 4 messages

Hi I am quite new to group policy as we don't use it much in the office. I have an OU of virtual machines and i need to make a Active directory group have local administrator permisions on all of these machines. ...

Learning Active Directory? Any ideas?

Advo - 10 Jun 2006 9:03 AM - 4 messages

For a new job roll, i will need to brush up on active directory, can anyone recommend any tutorials, or books etc for this? Thanks, Much apreciated ...

AD is stuffed

Lance - 10 Jun 2006 1:23 AM - 4 messages

I have a simple AD Domain. Single forest root domain. 1 subnet 2 domain controllers both on the same network. One DC had AD on it and I added AD to the second. In Sites and services I made sure both DC's are global catalog ...

Domain rename

Ben Snape - 10 Jun 2006 12:04 AM - 11 messages

I have tried several times to rename my domain using rendom.exe but always ger Error 13 after rendom /execute here is a the dclist after execute <?xml version="1.0" ?> - <DcList> <Hash>*_*_*_*_*_*_*_*_*_*_*_*_=</Hash> ...

PKI Published Certs/Name Mappings

Inoffensive - 9 Jun 2006 10:51 PM - 2 messages

In Active Directory Users/Computers, a user has the "Published Certificates" tab and a "Name Mappings" window. What services do these provide in PKI? Do they work together? I couldn't find any descriptive information on these. Thank you... ...

Error when joining member server

Geoff Walker - 9 Jun 2006 7:27 PM - 9 messages

Getting an odd error with the network config and joing it to the domain, until today when I was able to (barely) work around it, despite 3 different installs from 3 different media sets. The error is: "An error occurred attempting to join the domain domain.com: ...

fsmo roles restore...

Darren - 9 Jun 2006 7:07 PM - 3 messages

Hello everyone, My production environment consist of a single forest,single domain and all 5 fsmo's roles are stored among 2 DC's . Can I perform a test restore of my production environment using a backup from any one of the DC's or do I ...

trust: type external Error: the server is not operational

George - 9 Jun 2006 6:23 PM - 3 messages

i created a trust external, two-way, non-tansitive between two domains. the trust verifies from both ends and I am able to add users from domain A to a domain-local group in domain B. Unfortunately for me I am unable to add users from domain B to a ...

Reboot several DC's ?

bigstyle - 9 Jun 2006 6:08 PM - 7 messages

Hello, I have several DC's that will be shutdown during a week end. Then I will have to power on them. Is there a particular DC that has to boot first ? (For example the PDC that is holding the schema master ?) ...

policy only for windows xp

Johan deheugden - 9 Jun 2006 5:41 PM - 3 messages

i would like to link a domain policy to an ou where windows xp and 2000 clients resides. the policy may only be executed on the windows xp clients.is their a way to write something for wmi and to link that to the policy?thank ...

Mandatory Profile and GPO

Ken Lizotte - 9 Jun 2006 5:18 PM - 4 messages

I hope this is appropriate for this group. I have a type of employee that I would like to give mandatory desktop and security settings. I have Server 2003 on 1 DC (DC1) and several XP Pro Workstations. I created an OU called 'Estimators' and created a GPO called 'Estimator ...

AD Delegation Fails - Permissions Disappear

rovert506 - 9 Jun 2006 5:14 PM - 4 messages

Windows Server 2003 Standard: I'm trying to delegate control of some OU's to three groups. Each of these groups will have specific permissions (unlock accounts, reset password, create/manage/delete). I've tried multiple times to delegate the control, ...

Schema Mismatch Causes Excessive WAN Activity

schema_mangler - 9 Jun 2006 4:12 PM - 3 messages

I have a 5-site network (mycompany.local) which uses Windows Server 2003. From the home office three days ago I attempted the installation of Windows Services For UNIX 3.5 to a branch office over terminal services. SFU 3.0 and ...

Forest Trust

FredinKC - 9 Jun 2006 3:54 PM - 3 messages

I have been fighting this for a few days now. Is there one location that has EXACT instructions and troubleshooting for setting a forest trust between 2 Windows 2003 domains? I keep getting RPC errors no matter what combo of ...

Windows XP Firewall on NIC

RC - 9 Jun 2006 3:38 PM - 7 messages

can i disable the windows xp NIC firewall through group policy? Maybe i am being impatience but i cant seem to find it Rich ...

question regarding usn rollback and exchange

Andy D - 9 Jun 2006 3:19 PM - 3 messages

We had to do a restore on a DC thats running exchange due to a hard drive failure. This DC is in a child domain of companyA. Its now having replication issues with the parent domain. I understand i need to demote and promote it back into the domain( there is ...

Restrict Access to a Member Server

ChuckMcGuire - 9 Jun 2006 2:57 PM - 2 messages

I have just added a member server to my domain and would like to restrict access to the server only to admins. Right now any user in AD can log in locally to the server. On my DC only an admin can log in locally or ...

Renaming 2003 built in accounts & honey pot

SteveP - 9 Jun 2006 2:35 PM - 8 messages

MS reccomends that the built in administrator account be renamed and the guest account be renamed and disabled. Also a hony pot admin account be created to catch intruders. I'd like to follow this, but it raises some ...

Remote Office Configuration

kunundrum - 9 Jun 2006 2:32 PM - 5 messages

Hello, I have a question regarding what is the best choice for a remote office setup. Network Overview ============== My network consists of three sites all connect via internal 512Kbps VSAT system. All routable we can ping each site via IP. ...

Add W2003 R2 to W2000 AD, adprep fails

Mymy - 9 Jun 2006 1:03 PM - 3 messages

Hi, I have 2 domain controller W2000 in Active Directory. First one: W2000 SP4 + Exchange SP3 Second one: W2000 SP4 I wanna add a W2003 R2 to my Active Directory. I use the command: adprep /forestprep from my cd2 of W2003 R2 on the ...

one-way trust not working

Mr. Do - 9 Jun 2006 1:03 PM - 8 messages

I set up a one-way trust between two Windows Server 2003 domains (not in the same forest). The trust was set up successfully and the Validate button says it works. However, authentication doesn't work when rights to a resource in the trusting domain are assigned to an account in the ...

Add W2003 R2 to W2000 AD, adprep fails

myanissa - 9 Jun 2006 12:51 PM - 6 messages

Hi, I have 2 domain controller W2000 in Active Directory. First one: W2000 SP4 + Exchange SP3 Second one: W2000 SP4 I wanna add a W2003 R2 to my Active Directory. I use the command: adprep /forestprep from my cd2 of W2003 R2 on the ...

How to rename a Domain in SBE 2003

J. S. EDV - 9 Jun 2006 12:05 PM - 7 messages

Hello, during the installation process of a Windows Server 2003 SBE I have misspelled the domain name. Is there a possibility to rename the domain name without reinstalling the whole system? I have seen domain rename tools for the 2003 Standard Server family but ...

Restrict managing AD ojects

panzer75 - 9 Jun 2006 9:02 AM - 13 messages

Hi, I want to restrict some members of Domain Administrator group only to read AD. It means no reseting passwords, no deleting users or other objects, no making new objects, only read. Is this possible and how? Thanx in advance! ...

Domain controller replication

Shaun - 9 Jun 2006 7:24 AM - 4 messages

Hi, We had a major problem yesterday when our main DC crashed. Now we found that our 2nd DC was not updating DNS settings, mail was not flowing. How do we know that DNS or any Active Directory information is supposedly ...

AD, DHCP or maybe DNS problem?

Greg P - 9 Jun 2006 4:48 AM - 22 messages

FYI: this is a double post because I want' sure which forum is was the correct place to post this question. I have also posted on the technet windows server general newsgroup but I think this is a better forum. ...

Need to input the account and password when access "\\DC\netlogon"

taylor.li - 9 Jun 2006 3:26 AM - 5 messages

I found some strange problem when I accessed the folder "netlogon" in the DC(Windows Server 2003). I tried to access the share folder netlogon in the DC from Win2K server with the account "administrator"----domain administrator account, it reminds 'incorrect password or unknown username for ...

Repadmin

Darren - 9 Jun 2006 2:04 AM - 2 messages

Hello everyone I ran the following command on one of my DC's (repadmin /showutdvec * cn=configuration,dc=mydomain.dc=com) and I saw a few entries what appears to be stale entries. Should this be of any concern and if so how can they be removed from AD??? ...

Computer accounts

mibo_44 - 9 Jun 2006 1:36 AM - 4 messages

What is the best way to find any old computers in your domain that are no longer in use, but still have a computer account? Is the computer password the best way? I've read some posts that active computers can still have ...

How many users are connected to AD

Corvety - 8 Jun 2006 11:43 PM - 5 messages

I have Windows 2003 AD, Is there any way to know how many users are connected to my AD at any moment, i have 500 user and to DC , iÂ´m looking for a comand like net user or something like this. ...

Domain Question

Scotty Smith - 8 Jun 2006 10:48 PM - 4 messages

We have 4 domains that appear in the windows login screen so any user can find a workstation and login to any of the 4 domains. What I would like to do is set up the workstation to only show 2 of the 4 ...

Duplicate Domain Names Listed

Charles Tolento - 8 Jun 2006 10:26 PM - 2 messages

Greetings I have a Windows 2003 Enterprise Edition R2 Forest with 2 domains. The Root domain is lets say Root.local and the second domain is Test.local (separate tree in the same forest). When I go to Active Directory Users & Computers to ...

group policy question on workstation and terminal server for same

Martin_C - 8 Jun 2006 10:26 PM - 7 messages

UserA has access to Terminal server and workstation I want to do the following UserA can access control panel on workstation User A can't access control panel on Terminal server How do I do it? ...

Renaming an OU

Jim in Cleveland - 8 Jun 2006 9:28 PM - 2 messages

I have a test OU that I now what to turn live. I have two policies assigned to this OU. If I rename the OU, will the policies still apply? I've also see in Group policy mgmt snap in that there is an option to rename the OU at ...

adprep.exe /forestprep R2 on 2003 domain fails

Hiro - 8 Jun 2006 9:00 PM - 9 messages

We have two Windows Server 2003 domain controllers. An additional domain controller is being setup that runs Windows Server 2003 R2. I attempted to add the R2 server as a domain controller and got the error leading me to run adprep.exe on the domain. ...

Controlling VPN Access

VMITMgr - 8 Jun 2006 8:24 PM - 4 messages

I've been asked to set up VPN access to our network. The connectivity side seems easy enough. I've got that set up and working. What I don't see is an easy way to determine who can use the VPN. I don't want it open to all users. ...

Variables with in Login Script

SEgerton - 8 Jun 2006 8:16 PM - 2 messages

Im trying to use a variable in my login script. It works fine when the variable is at the end of the path. For example; Net Use P: \\server\users\%username% This works fine; but when the variable is in the middle of the path, it ...

use of .local domain for remote site vs rea domain name

George - 8 Jun 2006 8:06 PM - 3 messages

hi, we are adding a remote site that will be connected to HQ via permanent IPSEC link PIX to PIX. I am told that we may be changing our domain name in HQ therefore I do not wish to use site or subdomain in that new location - ...

How to Rename and Address computers in a AD domain

Mrmystery44 - 8 Jun 2006 8:03 PM - 4 messages

Hi, I am very new to AD, so I apologize in advance is this is a very basic question. I am supporting computers spread out all over the USA, and have a inventory of spares if a computer fails. The installed computers are members of a ...

Moving DC`s to other OU`s

jering - 8 Jun 2006 6:25 PM - 9 messages

Are there any problems related to moving domain controllers to other OU`s than the default container "Domain controllers"? As long as the policy "Default domain controller policy" are linked to the specific OU, I can`t see any problem...but I would like to get this confirmed. ...

Problem with DC

jering - 8 Jun 2006 6:22 PM - 12 messages

Domain: 2000 mixed mode DC 1: Windows Server 2003 Standard edition SP1 DC 2: Wndows Server 2000 Advanced edition SP3 The domain also contains 5 terminalservers with Windows Server 2003 Standard edition SP1. They all belongs to a Citrix PS 4.0 farm with several published ...

How to remove individual ACEs from ADAM directory object

Jims - 8 Jun 2006 6:11 PM - 2 messages

What is the dsacl command string to remove an individual ACE? I'd like to remove two (contradictory) ACEs from an object in ADAM but can't figure out the correct dsacl command. Thanks The ACEs I'd like to remove are: ...

Automated messages

Daniel - 8 Jun 2006 5:39 PM - 2 messages

Is there a way that I can setup an automated email to be sent out to remind remote VPN users that their password is about to expire a few days in advance such as users get who are regularly connected to the network? ...

Configuration Container

DemoDog - 8 Jun 2006 5:26 PM - 7 messages

All: W2K3 AD Domain Functional Level; W2K3 What happened to the configuration container? In another thread, I'm trying to get rid of a CA server running on a domain controller. I need to remove objects within the configuration container, but ...

DNS Suffix Search List

RC - 8 Jun 2006 4:19 PM - 4 messages

Is there any way to append a DNS Suffix Search list either with some GPO I am not aware of or by some other means for Windows 2000 clients without going to every 2K computer and manually entering this in? ...

Server 2003 DC not enforcing GP on 2000 Pro clients

tmhark - 8 Jun 2006 4:04 PM - 2 messages

Looking at getting new DCs this year with server 2003 and AD. Currently a 2000 shop exclusively (servers and workstations). Doing a mini lan to test. 2003 GPs worked great with XP, but are lacking with the 2000 clients. We found a permission change article to get XP clients to inherit 2000 ...

Extending ADAM Schema Referral was returned from Server

drew.eugene - 8 Jun 2006 3:03 PM - 3 messages

Hello- I am attempting to extend the ADAM Schema using and LDIF file. However, when I run the below command I receive the below error. I am pretty new to ADAM and AD and cannot find a post that explains this ...

Querying AD using SQL

TCS-ADSAdmin - 8 Jun 2006 3:01 PM - 3 messages

We are trying to query AD Database (User Object) for USN Number of an user object. We are getting the result but the value sql is giving is very different number than the ADSI Edit / ADUC Interface is showing. ...

software install by gpo

rodge - 8 Jun 2006 1:46 PM - 2 messages

I tried to find this info but had no luck, hoping someone here will know. I need to push out windows defender over a WAN and I want to use the script section of a GPO. Where can I find info on the process and possible any ...

Script running

Dennis Backherms - 8 Jun 2006 1:25 PM - 2 messages

How do I run multiple scripts in AD in the logon script box? Do I separate each script with a comma or something else? Is it possible to run multiple scripts this way? ...

No Joy backing up

Mario Manzano - 8 Jun 2006 1:17 PM - 3 messages

Hello! Thank you for reading this! We have 2 servers one acting as a backup for the other. In the backup server, where a "copy" of AD resides when we attempt to run the ASR in order to create a system backup and a recovery disk the following message shows in ...

Sync Active Directory Across Domains

Jonathan - 8 Jun 2006 12:40 PM - 6 messages

I have three domains. Production, Staging, and Development. IS there a tool that I can use so I can replicate my users along with all their attributes to each domain. That is to say, I have user xyz in production. User needs an ...

problems with with shortcut to published shares in AD

Robert Cracknell - 8 Jun 2006 10:40 AM - 3 messages

Hi, I am running 2000 and when I go to network neighbourhood and browse entire network I can see microsoft windows network and directory. Under XP I cant see "directory" is this a change in XP? Problem I have is that I have a ...

Joining two domains

Drazen - 8 Jun 2006 10:28 AM - 7 messages

Ok, we have two remote locations, each with its own domain (PDC and BDC in each domain). I have established a network link (its a network to network link over Internet via VPN, 256 kbps capacity) between those two locations and now we would like to set up trusts so that users from ...

domain trust: two way between w2k and w2k3

George - 8 Jun 2006 10:18 AM - 3 messages

I need to create a trust between out w2k domain(London,UK) and another w2k3 domain(Santo Domingo,DR). It would be a two way trust as admins are in london and need to accedd the doughter company, but DR need to access our servers ...

Change Intersite replication to speed as Intrasite

Jonte@bson.se - 8 Jun 2006 8:02 AM - 7 messages

We have created several site because we wanted the users to use their local resources first but the link speed are good as a LAN. Now the time to make a change takes 15 minutes, which is the minimum value you could set on a ...

cannot access member server from non-domain computer

dt827@t2bsolutions.com - 8 Jun 2006 7:23 AM - 5 messages

I did a new install of 2003 server and made it the sole DC (for now) of a new forest and domain. I did another new install of 2003 server and joined it to the new domain as a member server. I created a test file ...

Group Policy setting

Rahisuddin Shah - 8 Jun 2006 7:03 AM - 2 messages

Hello All, I have a question to all of you and thanks in advance to all. We are using the domain wide group policy for locking the system if its idle for 5 minutes. Some users complain that when they run powerpoint ...

Microsoft recommendation of lone server for Active Directory

Vel - 8 Jun 2006 6:59 AM - 5 messages

Greetings, I have searched for any concrete article /knowledgebase / anything that shows Microsoft actually recommends a lone server as an Active Driectory server, with no additional running application, but with no results. Does anyone know any? Thank you. ...

event messages

Chandresh - 8 Jun 2006 6:19 AM - 9 messages

Does anyone has list of Active Directory Events and brief description of each event. I want to understand all different kind of events generated by active directory and hence looking out for list of events. Will there be any difference in no. of events as well as the format of ...

Adprep /forestprep for W2k3 r2

Andy Wolsten - 8 Jun 2006 6:15 AM - 4 messages

Hi, Is it advisable to run adprep /forestprep to introduce r2 server in to domain during office hours or out of office hours. should users log off? ...

"Preparing Network Connections" on restored DC

Amihai Bareket - 8 Jun 2006 5:53 AM - 3 messages

I've fully restored a Windows Server 2003 Domain Controller to a new server in a lab environment for testing purposes. The production environment of this DC was - - Single forest, Native 2003 mode - Single Tree - 2 Domains - Root & Child, Native 2003 mode ...

"Preparing Network Connections" on restored DC

Amihai Bareket - 8 Jun 2006 5:51 AM - 5 messages

I've restored a Windows Server 2003 Domain Controller to a lab environment for testing purposes. The production environment of this DC was - - Single forest - Single Tree - 2 Domains - Root & Child - DC DCs in each domain - Every DC is a GC & DNS Server ...

replication works one way but not other way

Luca - 8 Jun 2006 3:11 AM - 4 messages

We have a single domain name with several sites, each site has its own DC which is GC and also DNS server. We have just added a new site and the DC in that site is having trouble with replication. It can repliate from our ...

Active Directory will not start

Scott - 8 Jun 2006 2:25 AM - 5 messages

HELP! ! I have a client that started having problems this morning. When I was able to get here I found that the DC will not boot and gives the error "Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error status: 0xc00002d. Reboot into ...

Users Can't Log Into Local Machine That Is Attached To A Domain

Dominick D. - 8 Jun 2006 2:22 AM - 12 messages

Hello, Gurus, I have a DC and a local XP machine on the same subnet; I created a user account and when I try to log this user on the attached local machine, I get this message that says local security policy does not permit user to ...

AD not replicating between Domain Controllers

ColinCamp - 8 Jun 2006 1:41 AM - 8 messages

Good day, I have 3 domain controllers (all windows 2003 standard) on my LAN (All on the same subnet, 1 is a G.Cat, the others are not. Active Directory seems to be working between two but not the 3rd server. I can create new accounts ...

Question for Jorge

Darren - 8 Jun 2006 1:23 AM - 3 messages

Jorge, I have a question in regards to the following article on your website ,,,"Kicking NTFRS to start replicating after SYSVOL non-auth. restore " In my Win2003 AD environment new GPO's typical take about 3 hours to replicate to DC's at various remote location, which is understood because my ...

New Site, can't get logons using local DC

Randy Galliano - 7 Jun 2006 9:47 PM - 6 messages

Hello, I have two sites connected via a T1 VPN. I just added the 2nd site and put in a new DC. The DC is a Global Catalog server. I previously added computers to the domain prior to the new site addition. When I do a set l I ...

DNS Issue with large numbers of domain controllers

chriss3 [MVP] - 7 Jun 2006 9:28 PM - 3 messages

Hello, How are you configure AD-Integrated DNS Zones for large domains with many numbers of domain controllers? Okay. Here is the issue, each DC that hosts the DNS Zone for it's own domain register it self as an NS record for that domain zone. ...

Active Directory

JoeG - 7 Jun 2006 8:44 PM - 5 messages

New password policy will not update for domain. Will work for local system logon. Changes were made to the Default Domain Policy. When changing user password it will prompt for the previous policy which was at least two charactors, can't use previous four etc. Using Windows 2000 SP4 servers, two ...

User Manager Pro

JP - 7 Jun 2006 8:12 PM - 7 messages

Can someone clarify something for us In running User Manager Pro ([link]), we noticed that this software retrieves information from our domain including machine info and transfers it back to their IP location via HTTP. Doesn't that constitute as ...

Time server configuration

Darren - 7 Jun 2006 8:11 PM - 2 messages

My root PDc emulator uses an external time source , should I point my remote location DC's to the root DC or is this done automatically... I read somewhere W/Staion clients and member servers use their local domain ...

PKI Questions

sektor - 7 Jun 2006 7:41 PM - 8 messages

Hello. I am researching setting up PKI for our company. Here is some background: (75) users (2) domain controllers (3) memeber servers (3) 4 servers not part of the domain, yet (runs a CRM) (1) ISA 2004 Server, setup as firewall and VPN server ...

Active Direcory Login Scripts for drive mappings.

SEgerton - 7 Jun 2006 6:55 PM - 3 messages

Im new to Active Directory and im trying to create Login Scripts for drive mappings. I've been successful with creating login scripts using simple bat files. For example; net use n: \\server\users\username I'm creating the login script Group Policy at the OU level. So of my drive ...

File Server Rights

SEgerton - 7 Jun 2006 6:54 PM - 2 messages

I have an issues. I'm new to Active Directory, coming from a Netware background. First, I have one file server that is connected to the new domain. I haven't ran the file server fole utility. Don't think i have to. ...

AD account name duplication

PCSoothsayer - 7 Jun 2006 6:40 PM - 2 messages

We have an environment where we'd like to create a separate user account & mailbox with the same first & last name as their existing previous account (although with a different SMTP address). When trying to do this, AD stops ...

Time problem

Jeff - 7 Jun 2006 4:38 PM - 3 messages

In the past, my W2K domain controller was getting the time source from an external NTP server. All other servers and workstations syncronized properly. I've since configured my other Windows 2003 domain controller for external NTP time. Still, my other servers and workstations are looking at the old server for ...

Renaming new Client in AD with old name

Dave_R - 7 Jun 2006 4:32 PM - 2 messages

One of the computer connected to Domain died. I got a new computer to replace. When I name new computer as old computer name I get an error. Old_Pc name PC_1. New_Pc name PC_1 Is there a way to replace computers and still keep the same name in AD? ...

DC removal

Darren - 7 Jun 2006 3:49 PM - 7 messages

Hi, All My environment consist of a single/forest single domain and 13 remote locations . each location consist of a local DC/GC . One of the remote offices in my has recently close . As a result the DC at ...

Disable search printer option

bonepin - 7 Jun 2006 3:46 PM - 2 messages

HEllo All, I would like to disable the "search printer" (in active directory) option on a windows XP client. Thanx in advance ...

Demoting last DC?

FombyJambox - 7 Jun 2006 3:44 PM - 8 messages

When I demote the last DC in a domain that is no longer needed, will I be given the chance to create a local admin account and PW for the box? Also, this server runs SQL Server and I need to keep that up an running. From what ...

Temporary Local Admin Access for Techs

mpallo - 7 Jun 2006 2:42 PM - 6 messages

Hello, I am trying to find the easiest way to allow 6 or 7 of our software people to have local admin access to the workstations they log onto for software deployment purposes. I have read about setting up a group policy using "Restricted Groups" but it ...

Reconnecting a DC to the network - tombstone issues?

Dave - 7 Jun 2006 2:41 PM - 6 messages

Due to connectivity problems, the VPN between our two sites has been out for just over 3 months. At each end we have a domain controller and Exchange Server (2003 Servers). Obviously due to the time lapse between the two having ...

Any issue?

Peter - 7 Jun 2006 2:05 PM - 3 messages

Hi all, Is there any issue if I run exchange 2003 forestprep and domainprep in the network with mixed windows 2000 and windows 2003 R2 domain controllers? THANK YOU! ...

Win2k DC boots with "systemced" error

GLasky - 7 Jun 2006 1:17 PM - 2 messages

I followed the directions Microsoft provided about renaming original system hive, copying the system hive from the repair folder, reboot machine load the original bad hive and compact. When I put the compacted original hive back the machine will boot but will function as a domain controller. Is there any ...

Core servers

peterc - 7 Jun 2006 1:12 PM - 7 messages

I am involved with an AD migration. The new domain structure is and empty root, two DCs different sites, no user accounts. One child domain crossing multiple sites. The designer has specified that the two domain controllers holding the PDc, INF and RID roles for the child domain be isolated from user ...

netgiag.exe Entry point not found

faji - 7 Jun 2006 1:08 PM - 4 messages

When from command window I type netdiag /v I get the following error "The procedure entry point DnsIsDynamic RegistrationEnabled could not be located in the dynamic link library DNSAPI.dll" ...

Resetting the ms-DS-MachineAccountQuota attribute for a single use

Kruse - 7 Jun 2006 12:45 PM - 2 messages

In KB251335, Microsoft states that it is possible to reset the limit, when an user has exceeded the maximum number of computer accounts he is allowed to create in this domain. But how do I do this. ...

W2K3 Domain .. dcpromo ... remove CA

DemoDog - 7 Jun 2006 12:43 PM - 4 messages

All: Goal: Repurpose an overpowered domain controller platform, DC1. I brought up 2 other servers in the domain, removed/transferred GC, FSMO, DNS, etc. etc. from DC1. Now when I run dcpromo on DC1, I find I need to remove CA from the server ...

Security Failure audit

aurels - 7 Jun 2006 12:14 PM - 2 messages

Hello, I have many and many Security Failure audit from the same user. It a windows 2003 Server , last patch , SQL 2000 on it Here you can see the event Event Type: Failure Audit Event Source: Security ...

W2KSBS Unsupported Restore - UNS Error - Partial Solution

DodgyDave - 7 Jun 2006 8:26 AM - 2 messages

So OK, I now know that I should not have used Ghost to restore my Windows 2000SBS server back to a previous state, but it did work on test. I only have one Domain and only two AD servers. Now, all the advice I have read, recommends demoting the offending server, ...

2003 R2 adprep /forestprep

Andy Wolsten - 7 Jun 2006 4:08 AM - 7 messages

Hi, when running adprep /forestprep in preperation for windows 2k3 standard r2, will it require a reboot of the server. I am just trying to schedule the work. Is it ok to run in busines hours, are users requrired to log off? ...

Applying GPs defined under a OU to a user at the top of the tree

Patrick - 7 Jun 2006 3:55 AM - 2 messages

We have a Windows 2003 AD and I have users sitting in Users container sitting at the top of the tree. I have a OU (say OU1) created under the tree and have defined Group Policies for it. I have a Global (Security) group living within ...

Permission Proagation Problem

Nixon751 - 7 Jun 2006 3:46 AM - 2 messages

Hi, I recently migrated a WIN2K server from an old NT4 domain to a new W2K3 AD environment using the ADMT tool. Most things went well. However, when I try to propogate the new domain's Domain Admin Group to directories on the ...

Joining a system to a domain

Vicky - 7 Jun 2006 3:10 AM - 4 messages

I have a network where in, hundreds of systems are joined to our domain as well as removed from our domain on almost daily basis. This is a setup for a IT training centre. The task of installing the client OS & joining the system to the domain is ...

External Time source Vs Internal Time Source

Akn - 7 Jun 2006 3:07 AM - 3 messages

Hello Everyone, I'm supposed to recommend how to configure time service for my organization. We are a large enterprise with offices in many countries and multiple active directory forests. Some of these forests will have trust between then some ...

using userPrincipleName for ADAM login

"Access is denied" error from trusted domain

GPO security filtering problems

How to re-add deleted workstation back to domain, no local admin p

LDAP Calls?

Help needed with permissions on shared folders in W2K3 AD

New 2003 server into 2000 environment

Disable LDAP On ADAM, and Only Use LDAPS

reset user passwords using asp

Trouble when a DC goes down

Remote subnet without a DC

Bypass using UPN or DOMAIN\username format on dialog boxes in XP/2003

Restricting File Types

Change Local Admin Password / Username via Group Policy

Upgrading from 2000 to 2003 Active Directory

Windows 2003 Domain trees FRS error

Problem with setting up SSL for ADAM

DNS zones

deleted group

Active Directory Home Folders

Modifying active directory schema

Global Catalog

Printers Randomly Disapering from Directory Listing

new member server added to domain

dsHeuristics

Global Catalog not installing

Clearing previous search results from custom AD search shortcut

Unable to logon to server (domain does not exist)

NTDS Setting is missing from Sites

Block Email of certain file name or even content

Using ADMT

Computer in Domain Admins

DNS not getting Info from Clients

Domain/Forest consolidation question

Directory service log

GPO

Accessing a Child Domain

Add 2003 Server to 2000 Domain

Can netdom use a list of target from a text file?

"Active Directory" "user object" lost "Allow Inheritable" check problem

Clients taking to long to login.

What's the better way to switch?

WINS problem

DHCP icons

problem with setting password to ADAM user

Address Change

Change of Address

Enumerate DCs via vbScript

AD authentication "HELP"

Finding user privileges for users in Active Directory

assigning Home folders in windows 2003 AD

Changing the Display Name Created using ADUC (2003)

%username%

Service login when domain down

Demoting 2000 DC's for 2003 migration

Custom icon in ADUC

2003 domain - one DC prompting for credentials?

Replacing Server Hardware

Assign password policy to OU

Guessing problem with AD and AD Integrated DNS

Authentication Using ADAM ?