|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Windows Server Active Directorymicrosoft.public.windows.server.active_directory
DNS/Kerberos/LDAP integration question
Spin -
28 Jan 2006 7:08 PM - 6 messages
When a user logs onto a workstation joined to an AD domain, the machine uses DNS to locate domain controllers in the users site, and the user then authenticates to the Active Directory instance on the domain controller DNS sent him to. Kerberos does this authentication, and LDAP is not involved in ...
Certificate Authority is also a DC, want to demote?
Nick-Mars -
28 Jan 2006 4:58 PM - 9 messages
Background: 2003 server SP 1 running Exchange 2003, SP2. Server is also a DC and a Certificate Authority. When I initially set up my Certficate Authority I had problems that I thought would be resolved by making the server a DC as well. ...
Domain redundancy
SHAMMY -
28 Jan 2006 3:03 PM - 5 messages
Hi all I have a windows server 2003(standard) configured as a domain controller and another server 2003(standard) configured as additional DC for that domain. I thought that will be enough for domain level redundancy.But when i make ...
Netlogon / Sysvol
Leo_Surf -
28 Jan 2006 1:39 PM - 7 messages
Hello, I have Windows 2000 server (Domain Controller) and Windows XP clients. I have certain policies and logon scripts in Sysvol/Netlogon folder, issue is users are able to browse (by \\mydomain.com) the sysvol and netlogon folders adn can see the scripts. Please help me in sorting this out. ...
legacyExchangeDN - May I change it to a user?
RodeCa -
28 Jan 2006 12:52 PM - 13 messages
I have a Exchange2K3 server on a Windows2K3. It is an upgrade of Exchange5.5 on WinNT. The lay out was a bit different, and some mailboxes have inherited "unwanted" values in that "legacyExchangeDN" property: recipient containers which no longer exist, mailbox (hidden) names from a different naming ...
Creating a MMC Taskpad to Reset Passwords
Heinrich -
28 Jan 2006 12:39 PM - 2 messages
Hi Would like some info on creating an MMC Taskpad for resetting Domain Passwords and Unlocking accounts Thx HH ...
Setting-up DNS for Active Directory Users without losing user data.
Snowman -
28 Jan 2006 8:44 AM - 3 messages
I am running server 2003 and a few weeks ago set up Active Directory Users (will call ADir), with the wizard correctly settup DNS for me along the way. Since then, for reasons I canoot fully recall, I have changed the DNS settings. I believe that the slow logon speed on client ...
Group Policy
John -
28 Jan 2006 2:37 AM - 2 messages
Ok, I want to restrict my users from being able to login to the domain during specific times. I found the following article. [link] I thought it would be best to setup a group policy to do what I am wanting ...
Hello
Cary Shultz -
28 Jan 2006 12:51 AM - 7 messages
Okay, Have been gone for some time but am back again (and, no, I was not in jail!). So, hopefully I can help answer some questions. And, maybe ask some every now and then. ...
Cant find domain with some accounts
RobGMiller -
28 Jan 2006 12:19 AM - 2 messages
This is a windows 2000 station connecting to a Windows 2000 Small business server setup as the PDC. An account that is part of the administrators group can login but the administrator account cannot. The error messages suggests that the domain cannot be contacted. ...
Changing name or IP address on Domain Controller
Mark Levy -
27 Jan 2006 11:51 PM - 6 messages
Are there any unforseen ramifications to changing the IP address or name of a domain controller? What about a DC that's also a DNS server. Obviously, I'll need to change the appropriate entries in DNS, but it's been ...
change hardware
braim -
27 Jan 2006 11:11 PM - 4 messages
hi every one i have pc with windows xp prof membre of domain .the problem is the matherboard is dead .and i must change all the hardware .if i put the hdd in new pc i have blue screen .are the a way to correcte the problem of windows ...
Group Policy - Shutdown/Startup Scripts Question
Jon Urso -
27 Jan 2006 10:22 PM - 5 messages
Hello, I have configured a GPO to run simple batch-style shutdown and startup scripts on all computers and have linked the GPO to the appropriate OU in my AD domain. I tested the scripts with my own local PC in a test OU first and ...
Group Policy for enabling remote desktop
APT SA -
27 Jan 2006 10:09 PM - 4 messages
I want to enable remoted desktop on all the XP sp2 boxes in my network. Where is the group policy setting for this? Thanks -Paul ...
Time server, need to move or just dc promo down?
Doug L -
27 Jan 2006 9:06 PM - 2 messages
Hi, I have an old server which is housing the windows time synch, or whatever its called, if I just promo this down, will it hurt anything. Or do I need to move something? I want to get rid of this server and set it up to run ...
Saving Settings in AD Users & Computers
AnthonyS -
27 Jan 2006 8:51 PM - 3 messages
This might sound kind of silly but how do you save the settings that you make in AD Users & Computers? I created some Saved Queries and also changed the appearance of how my OU's are displayed and when I exit Users & Computers and ...
Remove Dirty Boxes [WildPacket]
WILDPACKET -
27 Jan 2006 8:18 PM - 5 messages
Got about 600 computers in our domain which are not active, now before I remove them I want to ping/nslookup those in one shot. Found few tools but don't work accordingly. I want something in which I can import the list of all computers and then ...
Need help with global AD DNS server placement
ken444444 -
27 Jan 2006 8:17 PM - 6 messages
I have an existing 6 site Windows 2000 AD installation for about 125 users. It will be upgraded to Windows 2003 AD. Currently, the infrastructure is strung together with no logic about which servers run DNS or what DNS servers ...
what's the difference between a connect, bind and authentication?
Spin -
27 Jan 2006 8:12 PM - 3 messages
In the AD world, and in layman's terms please, what's the difference between a connect, a bind and an authentication? Does a user for instance do all three of these when he logs on in the morning? ...
*** object replcation disable ***
Frank -
27 Jan 2006 7:49 PM - 2 messages
Hi all, I probably asked the following question before but I just want to confirm for the last time, hope someone can answer it: If two ADAMs are in the same configuration set already and they replicate, can I filter out some classes in the object from the replication by disabling ...
Is there ~1000 value limit for multi-valued attributes is ADAM?
Jayesh Naithani -
27 Jan 2006 7:41 PM - 6 messages
Is there a 1000 (1024 of 1300) value limit to the number of values that can assigned to a multi-valued attribute? Is this information available online/within any ADAM documentation? Thank you, - Jayesh Naithani ...
Complex Passwords
Dan Andryszak -
27 Jan 2006 6:40 PM - 4 messages
I have two questions: Can I use Windows 2000 Group Policy to enable complex passwords and set a mask that the password must be a minimum of 6 characters and the 2nd character be a numeric value? Can I use Windows 2000 Group Policy to require a complex password on NT 4.0 ...
User logon connection dropped overnight.
Johnny Rio -
27 Jan 2006 6:27 PM - 6 messages
Is there a default setting with W2k3 that drops user connections overnight? I have instructed my users to log off before going home instead of simply locking their PCs b/c when they return in the morning, their user connection ...
Slow logon when appying personal settings
Johnny Rio -
27 Jan 2006 6:18 PM - 5 messages
I've read numerous post about slow logons mainly dealing with DNS issues and other DNS entries in the network settings. In my W2k3 Server environment, all PCs are set to obtain IP and DNS info automatically. No other DNS ...
Any way to tell owner of files on file server?
Johnny Rio -
27 Jan 2006 6:10 PM - 5 messages
In Novell I could click the properties of a file and tell who wrote the file (owner) to the file server. I don't see that in Microsoft. Is there any way to do this in MS on a W2k3 Server with AD? ...
Trust relationship between workstation and domain
Johnny Rio -
27 Jan 2006 5:36 PM - 3 messages
I'm having trouble with local file access permissions on an XPsp2 PC that I joined to a W2k3 server domain. The user has both a local account and a domain account on that PC as administrator. However, they cannot access ...
Changing Passwords & RSOP
Lindsey Cramer -
27 Jan 2006 5:22 PM - 2 messages
I have a GPO setup to change my local administrator's password on all of my boxes. I have specified a startup script and defined a parameter as the new password. I also have this GPO filtered out to Domain Computers vs. Auth. ...
Server Operators
COT-AD -
27 Jan 2006 3:51 PM - 2 messages
We have several admins in the Server Operators group and we would like to clean it up. We want to make sure we will not break anything by removing their membership. If I remember correctly, the Server Operators group only ...
NTDS ISAM and NTDS SDPROP errors
Ashraf -
27 Jan 2006 3:40 PM - 5 messages
I really need any help with this, I have a DC running Windows 2000 that started to have problem with the replication and getting two errors all the time. The first error is event ID 404 with the description below: ...
certificate of type DomainController has failed
Mr. Backup -
27 Jan 2006 1:52 PM - 6 messages
Recently I have started to receive the following error. Automatic enrollment against the certification authority exchange for a certificate of type DomainController has failed. (0x800706ba) The RPC server is unavailable. .. Another certification authority will be tried. Does anyone happen to know what this pertains to and measures to take to ...
LDAP query failing
kevinL -
27 Jan 2006 12:58 PM - 6 messages
My organization is really beginning to see the value of AD as an enterprise directory and I want to encourage that. We make good use of IIS for a variety of applications but our intranet runs on Apache, v 2.0.52. Users provide user names and passwords to access ...
Trying to Direct user into specific Shared folder
Steven -
27 Jan 2006 11:46 AM - 2 messages
I am trying to direct my active directory users into their own personal folder in the server whenever they log in to the system. For example: David log in to the system using PC #4, when David click on my ...
Rename user account
Craig -
27 Jan 2006 10:40 AM - 3 messages
This may be a silly question, but if a user changes their lastname and we therefore want to rename their account and email address in AD, is there a easy way for the emails going to the old address to also be ...
DSGET & DSQUERY Problem
wills.jason -
27 Jan 2006 10:35 AM - 6 messages
i am trying to get a simple spreedsheet detailing our entire AD group membership, so i used this code in acommand prompt: dsquery group -name * - limit 1000 | dsget group -members > C:\result.csv this works great, and lists all the users name - but they don't have ...
Shadow copies
SW -
27 Jan 2006 10:14 AM - 4 messages
My volume says I need a minimum of 300mb's of space to creat e a shadow volume. However my exam book states I need a minimum of 100mb - which is correct? ...
Disaster recovery
Frederik De Muyter -
27 Jan 2006 9:08 AM - 3 messages
Hi, Suppose i have 5 dc's for a domain named test.intra. DC1 is holding all FSMO roles. I perform regular backup's off all DC's(not needed i think). Suppose DC1 failes how do i go about it to restore it. Is there a difference ...
CSVDE ERROR
BacklightSoul123456789 -
27 Jan 2006 4:53 AM - 17 messages
I am receiving an error message of Connecting to "(null)" Logging in as current user using SSPI Importing directory from file "c:\users.csv" Loading entries. Parsing error on line 3 0 entries modified successfully. An error has occured in the program ...
Error 16650
mike -
27 Jan 2006 3:59 AM - 7 messages
I have tried everything I can find on the subject (Event ID 16650) but no luck. I have two DCs, one of which is very old and the disk drive is "making noises". (Never a good sign.) I would like to promote a third Win2000 server ...
GC and Operations Master on same
Dev -
27 Jan 2006 3:53 AM - 12 messages
I understand MS recommends not to place the Operations Master and GC on the same machine. In addition, they recommend no GC in the branch locations. Here's what I'm proposing to do: Hub Site: ParentDomain.com - 1 server DC, GC, DNS (default domain install) ...
Windows 2000 to Windows 2003 AD migration
Spin -
27 Jan 2006 2:07 AM - 9 messages
Hi Gurus, I am basically doing a Windows 2000 to Windows 2003 AD migration. When I migrate users, when I migrate the account can I tell it to leave a copy of itself in the source domain instead of removing it? This way if I have ...
Renamed PDC
Richard Brown -
27 Jan 2006 2:04 AM - 2 messages
I was not paying attention on a KVM and accidentally renamed the machine (not the domain) that is our PDC. This machine is is a Small Business Server 2003, and there is one other member server on the domain. The changes don't ...
Which AD to Restore
Mel -
27 Jan 2006 12:22 AM - 11 messages
Hi, I am working with a client that has 3 DC's, one Forest, one domain, no Exchange, all DC's are 2k. The FSMO roles were never separated from DC1. DC1 crashed 9 months ago, DC2 and DC3 kept on "running". The client's tech ...
Limit scope on AdamSync.exe
Marty List -
26 Jan 2006 11:55 PM - 4 messages
Is there a good reference for the XML config file used by AdamSync.exe? The info in the Windows Server 2003 R2 help file is almost useless. Specifically I'm looking for a way to limit the scope (Base, OneLevel, Subtree) ...
policy
youssef -
26 Jan 2006 11:24 PM - 5 messages
hi everyone i applied the domain from week ago , the network consists of : 30 users in the network , isa server , DC , vpn server and i have some questions : 1. Before we were in a workgroup , the manner to enable file sharing was : ...
MSDTC warning message 53258
Al Christoph -
26 Jan 2006 10:22 PM - 4 messages
On my Win 2004 Enterprise Server toy for programmers learn how real men make a living:-) I recently DCPromo'd its domain controller out of existence as it had made a royal mess of things in my SBS server which does more or less keep ...
System.DirectoryServices.ActiveDirectory.ApplicationPartition constructor
richlm -
26 Jan 2006 10:06 PM - 4 messages
I am creating a new application partition in ADAM using the .NET framework constructor for ApplicationPartition in System.DirectoryServices.ActiveDirectory namespace. It works fine if I use a distinguished name like "DC=mycompany,DC=com" but anything other than 2 DC= causes the constructor to throw an exception: ...
LDAP Security
Scott -
26 Jan 2006 9:46 PM - 17 messages
Hello, I've noticed that any authenticated user can query my Active Directory. Is there a way to only allow certain users to perform a query? Thanks, Scott ...
GPO for OU
Chip pellegrino -
26 Jan 2006 9:37 PM - 6 messages
I created an OU called "Domain Computers" and created another OU inside it called "Human Resources". I created GPO and linked it to the "Human Resources" OU. I then moved computers from "Computers" to "Human Resources" but the GPO does not get applied to the computers in the "Human Resourced" ...
Active Directory Encryption
dasimmon -
26 Jan 2006 9:33 PM - 2 messages
Does anyone know what type of encryption is used for storing AD data, such as passwords, in the AD DB? ...
Active Directory Folders
rodge -
26 Jan 2006 9:06 PM - 17 messages
I was recently reading through a book called Windows Server System Deployment Guide for Midsize Businesses with 50-250 PC's and the book mentions that there is a good practice for organizing Active Directory OU's. They recommend that under the domain, you create an OU named after the company and under ...
password not syncing
Hutch -
26 Jan 2006 8:55 PM - 4 messages
AD 2000, Exchange 2000 This happens everytime this users is prompted to change her password. After going through the steps of changing password, her outlook will then prompt her for her user name, domain name, and password. I can duplicte this with her everytime. However, after this happens, if she ...
DNS Forwarders AD
Rustom -
26 Jan 2006 8:23 PM - 2 messages
Suddenly internet resolution is failing sparodically. I have conducted a DCDIAG DNS test a domain controller and here are the results. It states that the forwarders are unavailable and root hints are also failing. Any ideas as internet works, goes down for 5min, then comes back up again ...
Universal Group Issue
COT-AD -
26 Jan 2006 8:22 PM - 10 messages
We have a multiple domain environment. When you use the Active Directory Users and Computers snap-in, and you click the Membership tab on the user's Properties dialog box to view the Universal Group membership for a specific ...
AdamSync.exe sent all objects to LostAndFound
Marty List -
26 Jan 2006 8:08 PM - 5 messages
I had AdamSync.exe running as a scheduled task for a couple weeks, and I thought everything was going so well. Until every object was renamed and moved to the LostAndFound. As far as I know nothing was changed, this is running in a lab ...
Attn: Lee flight - Repost of Concurrent LDAP Binds
Jay worley -
26 Jan 2006 7:36 PM - 7 messages
Lee, are you sure ADAM 1.0 and SP1 support Concurrent LDAP Binds? I have looked at both 1.0 and SP1, but I do not see supportedExtensions listed as a RootDSE attribute. Neither can I query for it using a simple ADSI script. ...
Active Directory - Visual Basic 6.0 Code Examples
Active Directory - Visual Basic 6.0 Code -
26 Jan 2006 6:37 PM - 2 messages
Can someone provide a code example for Visual Basic 6.0 of how to lookup information about a user in Active Directory? Can someone provide a code example for Visual Basic 6.0 of how to authenticate a user password that resides within active directory? ...
Active Directory Relication on 2003 Servers
Razvan Despa -
26 Jan 2006 5:52 PM - 3 messages
Hi all, what is the best tool to keep an eye on the replication of the DCs? Anyone has a readme file for DCDIAG? Thanks, Razvan Despa ...
Clear replication Queue
msteinhoff -
26 Jan 2006 5:41 PM - 8 messages
Is there a way to clear the queue, or reset replication on the FSMO PDC emulator? ...
Can't add new 2K3 DC to existing domain - error message!
jrm73 -
26 Jan 2006 5:02 PM - 7 messages
I have a WIN2K3 domain with 2 DC's. One is WIN 2K and the other is 2K3. It was originally 2K domain and I upgraded to 2K3 (adprep/domain prep etc) over a month ago with no problems. It let me add a 2K3 DC just ...
Adrep -forestrep and adprep -domainprep performed on which server
Rob -
26 Jan 2006 4:51 PM - 4 messages
I have 5 DCs, 5 member servers (2 - W2K and 3 -W2003). Is the Adrep -forestrep and adprep -domainprep commands ran on the 2000 Dc with the FSMO roles or on a 2003 member server? ...
Windows 2003 AD restoring
leobis -
26 Jan 2006 4:39 PM - 2 messages
Hi all, in my network lab I 've 2 Dc's (both Windows server 2003 SP1); Unfortunately using the snapshot tool of VMware I am afraid of having corrupted the AD on the first DC (DC1), and to make things worst I 've found ...
element not found
James -
26 Jan 2006 4:22 PM - 2 messages
When I try to add an AD user ID to the local admin group on a W2K workstation, I get the error message "element not found". That is, I (domain Admin) cannot browse AD & pick that user ID from it. This happens only on few ...
Win2k terminal services in a Win2k3 native mode AD
Clarky -
26 Jan 2006 4:20 PM - 4 messages
Hello everyone! Were about to migrate from an NT4 network to a Win2k3 AD. We have a number of Win2k TS servers running in application mode and the devices connecting to them are Win2k pro desktops. We also have a number of Exchange 5.5 servers. ...
Server farm grade scale / checklist
Dean Schmaus -
26 Jan 2006 4:16 PM - 3 messages
Does anyone know if a document exists that management could use to evaluate the current state of our server farm? What they are looking for is something that is similar to a checklist that could include anything from “Do you have ...
Group Policy for Windows XP Firewall
micromark -
26 Jan 2006 3:31 PM - 3 messages
Hiya, Does anyone know if it is possible to add a group policy within Active Directory (running on Windows Server 2000/Exchange Server 2000) to control the Windows XP firewall on domain machines? Thanks, Mark ...
External Trusts and "specified user doesn't exist"
Craig Barraclough -
26 Jan 2006 3:19 PM - 7 messages
Hi We are currently intergrating 2 separate company networks after a takeover, we intend to fully intergrate the other network into ours but in the meantime we have users who need access to resources on both networks. When i try to make a trust from one of our 2003 DC's i get an error message ...
modify sIDHistory
Damir Kh. Shakirov -
26 Jan 2006 3:17 PM - 5 messages
Whether it is possible modify attribute sIDHistory by means of ADSI Edit? I wish by means of ADMT to clone accounts from domain A in domain B. And then to copy attribute sIDHistory at clones in this attribute already at ...
Concurrent LDAP Binds
Jay worley -
26 Jan 2006 2:37 PM - 4 messages
Is this a feature of ADAM in the R2 release? The documentation I've found suggests that the rootDSE will display a supportedExtensions attribute with a OID value of 1.2.840.113556.1.4.1781. It would appear that the original ...
Securing a DC with firewall?
Gaspar -
26 Jan 2006 2:36 PM - 4 messages
Is it a good practice to secure each AD controller with the Windows 2003's build it firewall? Or windows 2003 already secures ports by opening those necessary to run Active Directory (and closing all others)? Thanks ...
Count Domain User Logon
Andy Mac -
26 Jan 2006 2:20 PM - 4 messages
I want to be able to count, on a monthly basis normally, how many true user logins actullally logon to the domain. Someone mentioned a script from Richard Mueller in a previous post, but I cant see it on his site ...
MIIS multiple forests
PBJ -
26 Jan 2006 2:02 PM - 5 messages
I have 2 forests across the network and I'm trying to find a solution that can import the user accounts from their forests to our OU as well as get updates as new users are created and password changes. All forests will have ...
DSQUERY - [WildPacket]
WILDPACKET -
26 Jan 2006 1:36 PM - 16 messages
When I run the following command to find inactive computers this is the error I receive. Running Windows 2003 Server DC. C:\>dsquery computer domainroot -inactive 2 dsquery failed:The parameter is incorrect.:Windows could not run this query ...
create Child OU from script
cnikola -
26 Jan 2006 1:12 PM - 5 messages
Hi All , I need to create 100 child OU , i have code for creating 1 child OU : ======================================= Option Explicit Dim objRoot, objDomain, objOU Dim strContainer err.number = vbEmpty ' Section to create the OU defined by strContainer strContainer ="OU=Child,OU=Accounts" ...
Removing 'This Computer' from logon screen
Deborggraeve Randy -
26 Jan 2006 12:47 PM - 4 messages
Hi, We want to remove the 'this computer' from the logon screen, so people MUST logon to the domain and cannot logon locally no more. How can this be done? ...
allow domain browsing in W2003 AD
Honza Novak -
26 Jan 2006 10:08 AM - 5 messages
Hello, my question might be a bit stupid ... as i expect solution to be really easy, but i wasn't able to find it form some time. I have W2003 SBS installed with AD domain. All i need at the moment is ...
Add Windows Security Principal as ADAM Admin via LDIFDE?
jeff henrichs -
26 Jan 2006 4:53 AM - 6 messages
What we are trying to do: Backup a production ADAM instance (NTBackup) and restore into a lab environment for troubleshooting. Issue #1: Lab environment has no trusts to production, so Windows security principal ADAM administrators are unavailable. Issue #2: ADAM security principals with admin rights (we have the hotfix and ...
Adding a tab to User properties
ssgadams -
26 Jan 2006 3:26 AM - 2 messages
I would like to add new Tab to the users properties in Active Directory and add custom fields to this tab (page) something like a Text box for is the user a power user etc.. as well as other fields. ...
Use second Domain controller
Mohan -
26 Jan 2006 2:29 AM - 9 messages
Hi Everbody, I have 3 servers: 1) First Domain Controller (Windows 2003 Server Std sp1 ) 2) Second Domain controller (Windows 2003 Server Std sp1) 3) Exchange server 2003 sp2 (Windows 2003 Server Std sp1) recently i have put second dc, its was working fine, replication also ...
GPO
Juan -
26 Jan 2006 2:13 AM - 4 messages
I would like to deploy a wireless GPO to my wireless users in an Active Directory environment, using radius but not certificate services. If someone can share a link on how to deploy an automatic configuration to wireless Windows XP SP 2 clients that would be great ...
group policy removal
Adam -
25 Jan 2006 11:47 PM - 2 messages
We are using the file redirection (My Documents) option under a GPO. The server that the files were being redirected has crash and is no longer online. I would have thought that I could update the GPO with new server ...
Missing PDC
Wayne -
25 Jan 2006 10:11 PM - 4 messages
Hi, I have stumbled into a strange problem. I have a site that I took over a few weeks ago, and they wanted to install Terminal Server Application Mode on their Win 2003K server. I started looking at the setup, and found the ...
GPOs are not taking effect - Event ID 1054
Steve -
25 Jan 2006 10:05 PM - 8 messages
Problem: When I try to create and add a group policy object, the policy doesn’t apply to the OU. I get the following event log error message: Source: Userenv Type: Error Event ID: 1054 User: NT Authority\System ...
Migrating a NT4 Domain into an Active Directory Domain
Bill Freeze -
25 Jan 2006 9:08 PM - 6 messages
I have two locations, A and B. Location A is running Windows 2003 with Active Directory and uses a Domain named us.company.com. Location B is running Windows NT 4.0 and uses its own Domain named xyz. I have a new ...
How to enable Remote Desktop using GPO
JJ -
25 Jan 2006 8:59 PM - 3 messages
How to enable Remote Desktop on Windows XP Pro(domain computers) using GPO on Windows 2003 Srv ? I cannot find such setting, looks like only solution is manualy enable remote desktop connection on every pc in domain. I already made rdp port exception in Windows Firewall on WinXP mashines.... ...
2000 AD to 2003 AD
Perry -
25 Jan 2006 8:46 PM - 4 messages
I have a question concerning upgrading to Win2K3 environment. For the past few years we had a Win2K domain and recently we added a few new Win2K3 to the mix one of which is an exchange 2003 server on a win2K3 box. At this point ...
GPO IE Proxy Settings
DemoDog -
25 Jan 2006 8:40 PM - 5 messages
All: Having trouble setting the proxy in IE. User Config/Winodws Settings/ IE Maintenance/Connection/Proxy Settings PC's in this OU are picking up other GPO's, why not this one? Suggestion on troubleshooting? tia D ...
Native Mode Clarification
Adrian Moseley -
25 Jan 2006 8:16 PM - 4 messages
Just so I am clear, we want to move our Windows 2003 AD to Native mode. Every server in this domain is running Windows 2003 Sp-1. I also have an older domain that is a WinNt 4.0 Domain with a PDC and BDC, It has a trust relationship with our AD Domain. Is this older domain keeping us from moving to Native Mode? ...
ForestPrep / Domain Prep Scenerio
Rob -
25 Jan 2006 8:07 PM - 9 messages
Has anyone tried this senerio? Successful, not successful? Other Ideas? ______________________________________________________ Create a temporary dc running W2000 Server Make a Global Catalog Server and DNS Perform ADPREP /forestprep Move the schema master role to this server Backup System State ...
Domain Controller Firewall
bishop -
25 Jan 2006 7:35 PM - 10 messages
Hi, I created a GPO for the Domain Controllers OU that contain firewall settings for the Domain Profile. However, after forcing it and restarting the DCs numerous times, it still does not apply the firewall settings. I know GPO is ...
My users' password dont work all of a sudden.
Mike Dormante -
25 Jan 2006 7:25 PM - 4 messages
Hi Folx; We have 2k3 domin with AD (one domain controller) I have about 40 users. this morning non of my users were able to log on to the network because of wrong password. Once I reset their password to what they were, all worked fine. This hapened ...
DC's will not replicate
Paul Cannon -
25 Jan 2006 7:22 PM - 4 messages
one of my domain controllers will not replicate with my pdc emulator. I went into Sites and Services, dug down to the NTDS setting, choose the server, right clicked and selected Replicated now. The following error message appeared : ...
How to move the First DC to other machine?
JP -
25 Jan 2006 7:01 PM - 5 messages
Hi, I am planning to move the first DC (also a GC) in the domain to a new more powerful machine. I have moved all the FSMO roles to another DCs, however I noticed that when I shutdown the first DC our Exchange ...
Chinese Branch Office issue: AD Design question
Wayne A. Harris -
25 Jan 2006 6:44 PM - 2 messages
I am trying to control a rumor. My AD design will include a branch office located in China. My client believes that there is a Chinese governmental regulation stating that the Chinese government must have Domain Admin priv in AD ...
AD Site Creation and DNS
JamFan -
25 Jan 2006 6:43 PM - 2 messages
I am creating a second site for DR purposes. I have DCPromo'd the DR server. I am going to lag replication for 4 days in the event anything happens over the weekend(this DC is strictly for DR) I am not sure what to do about DNS. ...
Home Folders
Dean -
25 Jan 2006 6:43 PM - 9 messages
We want to implement home folders so that our users can connect to a mapped drive from 'My Computer' and save their work onto a server. However, during our testing with Server 2003 and 2000/XP clients we have found that when the ...
LDAP Read Permission
Steve N -
25 Jan 2006 6:36 PM - 2 messages
I need to setup a user that has full rights to read all of AD for a 3rd party application. I do not want to use anonymous binding or a domain admin account because of the security risks involved. Does anyone know what ...
GPMC and Remote ADU&C, ADS&S console errors
Edog -
25 Jan 2006 6:36 PM - 5 messages
I am having some interesting issues. First, this all used to work fine a couple of weeks ago, and nothing has changed in configurations... When I am logged into my workstation and try to access the GPMC, ADU&C, or ...
Test AD
Heath Higgins -
25 Jan 2006 6:12 PM - 2 messages
Howdy, I am doing an Active Directory 2003 upgrade from Active Directory 2000. I currently have 2 x W2K SP4 DCs and 1 x W2K3 SP1 Dc. I have just promoted a 2nd W2K3 SP1 DC. I plan to remove the W2K DCs and raise the forest ...
Created a Group Policy Execption
Craig -
25 Jan 2006 5:52 PM - 2 messages
How do I setup a Group Policy Object and exclude either a single computer or single user? I want to set a default domain object for XP sp2 clients but want to exclude myself from the policy. ...
Native Vs. Mixed Clarification
Adrian Moseley -
25 Jan 2006 5:14 PM - 4 messages
Just so I am clear, we want to move our Windows 2003 AD to Native mode. Every server in this domain is running Windows 2003 Sp-1. I also have an older domain that is a WinNt 4.0 Domain with a PDC and BDC, It has a trust relationship with our AD Domain. Is this older domain keeping us from moving to Native Mode? ...
|
|||||||||||||||||||||||