Home All Groups Group Topic Archive Search About



Windows Server Active Directory

microsoft.public.windows.server.active_directory
Score GPO on Admin account, can't change
Mike - 7 May 2005 7:48 PM - 4 messages
What seems like overnight, the Adminstrator account on our Win2k server running terminal services appears to be locked out of certian functions like our terminal server user accounts. The administrator account shows it is part of the Adminstrators group, but ...
Score HOW TO MOVE GC FOR ANOTHER AD
Eddie Santos - 7 May 2005 1:50 PM - 2 messages
Hi guys, I have in my network TWO ACTIVE DIRECTORY SERVERS. naming - AD1 and AD2 My AD1 crashed, now a I HAVE to move GC to AD2 How can I do it ??? If you have a step by step of this process, please help-me. ...
Score I cannot stop this error Please help
Joe - 7 May 2005 11:36 AM - 14 messages
Hello, In the event ID of my w2k3 server I am getting errorsID 1030 and 1058 I have tried to follow the KB article290647 but I do not see a Winnt folder in my server. so I cannot procede with that portion. I then followed it more to the Note: ...
Score Moving all users to a new server
TDC - 6 May 2005 11:21 PM - 3 messages
I am moving my user profiles from a 2003 server to a new 2003 server in the same domain. I want to change the home directory and user profile path for all users in one fell swoop. Is there a tool or procedure for doing this for ...
Score Active Directory Database Files
Vic - 6 May 2005 10:03 PM - 2 messages
Would anyone know if it is possible to move the Active Directory database files to a shared drive? What I want to accomplish is to move the database files to a shared exclusively for the AD files located on a SAN for backup ...
Score can you make a local profile into a mandatory profile
Tadashi Inayama - 6 May 2005 9:35 PM - 3 messages
or does a mandatory profile need to be a roaming profile? how can I lock down a shared local profile? Thanks, Tadashi ...
Score IM and GCs
Pat - 6 May 2005 8:34 PM - 6 messages
Hi Need some of your expertise on this... is this right? The Infrastructure Master should not be placed on a GC. Tip: Make sure the Infrastructure Master has a GC in the same site as a direct replication partner. Exception 1: It's OK to put the Infrastructure Master on a GC if your forest ...
Score Roaming Profile Error
Victor Molina - 6 May 2005 6:51 PM - 5 messages
We just started to implement roaming profiles on our network. I am getting the following error...   Event Type: Error   Event Source: Userenv   Event Category: None   Event ID: 1509   Date:  5/6/2005   Time:  11:13:48 AM ...
Score Change IP Address on first and only Domain Controller
villagod - 6 May 2005 5:32 PM - 9 messages
Is it possible to change the root's domain controller ip address?  This DC is the only DC and several member servers in the forest.  DNS is install on the DC also.  Any advice would be greatly appreciated. ...
Score New Site
john d - 6 May 2005 4:46 PM - 7 messages
My company is opening a second office down the road.  The existing office (Office A) will be connected to the new office (Office B) via a secure IP VPN offered by our ISP utilizing a full T1 of bandwidth.  ...
Score Computer Name
t3st1ng - 6 May 2005 4:32 PM - 3 messages
In the past I've come across situations where it was necessary to physically replace a web or database server. I have almost always come across issues when attempting to give the replacement machine the same computer name, and have ended up renaming the new machine instead.  This in turn requires ...
Score Cached Logins
scott - 6 May 2005 3:53 PM - 8 messages
I have a PDC (Server_PDC1) and a subdomain PDC (Server_PDC1sub). If Server_PDC1 goes offline, then Server_PDC1sub can not login if it needs rebooting. The same is true for Win XP clients to these servers. Both servers are WIN 2003 Standard edition. ...
Score Trust Question
Dman - 6 May 2005 3:20 PM - 4 messages
Gang, this is a repost from a few weeks ago because I didn't get a response...looking for any input!   :) We need to establish a trust between a Windows 2003 domain and a Windows 2000 domain.  In order to make name resolution work, we will use a ...
Score Demoted DC still shows in AD Sites and Services
GillH - 6 May 2005 3:02 PM - 4 messages
We demoted a Windows 2000 Domain Controller in a site that contains three other DC's running Windows 2003. We have a single domain and all DC's are GC's. The demoted DC still displays in AD Sites and Services. Shouldn't this ...
Score NTDS Replication
Maverick & Goose - 6 May 2005 2:49 PM - 3 messages
Having issues with automatically generated site replication partners.  Have tried unchecking "bridge all site links" underneath the Intersite transports within the IP container, and then deleting the automatically created objects. After carrying out this process the automatically generated partners then ...
Score Active Directory bind to 3rd party LDAP for authentication
Jason S - 6 May 2005 2:47 PM - 5 messages
I have a standalone Active Directory in a test domain.  I would like to be able to have users access services in this domain using credentials that are stored in our corporate directory (3rd party LDAP server).  I can add user ...
Score DNS and AD issues
BookerW - 6 May 2005 2:34 PM - 5 messages
Trying to determine the cause of two errors.  I joined a computer as a child domain to a root domain.   I used the ip addresses of the root dns server(rootdomain.com) in the tcp/ip dns settings when I ran the dcpromo on ...
Score NT Domain Rename and Upgrade to Serer 2003
Polly - 6 May 2005 2:08 PM - 4 messages
Hi I have a few questions I hope you can help with. I am involved in a project to re-name an NT Domain then use an in-house upgrade to Server 2003.  My prefered method would have been build a new 2003 ...
Score Domain Controllers OU
GMartin - 6 May 2005 1:11 PM - 11 messages
Can this be relocated?  If so, what impact will it have? We've finally come up with a workable AD structure and I'd like to move it as a sub-OU of another OU. Thanks \\Greg ...
Score DLL error
Daniel - 6 May 2005 12:31 PM - 2 messages
Hi there! I am from Brasil, i am not so good in english language. I have installed a Active Directory in a Windows Server 2003 Standard. I create a new organization unit and a user for it. The problem is when I try to access a application (Delphi based). ...
Score Find out which port is being used for LDAP?
Lee Derbyshire - 6 May 2005 12:25 PM - 8 messages
Hi All, How do you find out which port number a W2K3 server is listening for LDAP queries on?  I know it's usually 389, but if you wanted to change it, where would you do it?  I can't find this setting in any of the ...
Score active directory problem
Tunga Torgal - 6 May 2005 12:22 PM - 2 messages
I have the following c# code to find an employee's copmany wide ID from its given username... Code works fine in much of the situations.. But sometimes it gives "an operation error occured.." error.. What is the reason of it? Is there anyone having an idea??? ...
Score Group Policy: Disable Right Click
Shreevie - 6 May 2005 10:22 AM - 3 messages
We're currently running 2003 server on our domain, we upgraded less then a year ago from 2K. On 2K there was a way to disable right clicking objects in windows explorer by using a group policy, i haven't been able to find this in ...
Score CSVDE Errorlevels
Matt - 6 May 2005 10:10 AM - 4 messages
I am using CSVDE to extract data from our 2003 AD and have noticed that the errorlevels vary if a problem occurs. I know that an errorlevel of 0 means that the command completed successfully but can't find any reference defining what the errorlevels mean if the ...
Score ADAM Feature Request
Jims - 6 May 2005 3:43 AM - 3 messages
Netscape/Iplanet/SunOne directory logs record the IP of all binding devices. Our IT security dept. likes this.   ADAM doesn't record IP's of binding devices.  This is a significant disadvantage of ADAM as an Netscape/Iplanet/SunOne directory replacement.  Please include in next SP. ...
Score AD password chnange anomolie
Jims - 6 May 2005 3:19 AM - 4 messages
Headline: LDAP binds to AD after user password change allows for old password usage up to ~30 minutes after password change!     This thread started as a potential ADAM problem but the ADAM common denominator has since been ruled out.  We are are a two domain forest ...
Score May 17th Visio Partner Webcast: Visio IT Tools to Automate Network Design
Ken Hoffman (Volt/Microsoft) - 6 May 2005 12:27 AM - 1 message
Microsoft Visio Professional 2003 is a leading tool used by IT professionals to diagram networks.  Did you know that Microsoft partners have built powerful solutions on Visio that can save hours in designing and maintaining your network? On Tuesday May 17th at 9am (PDT) the May Visio Partner Webcast will feature ...
Score NT4 to Win 2K3 upgarding
Jun - 5 May 2005 8:57 PM - 9 messages
Hi We are going to upgrade NT4 domain to Win2K3 domain. I have two questions as follows: 1. The current NT4 domain name is Newyork. We would like to change to Corp.company.com in Win2K3 domain after upgarding. During the Active ...
Score From indivdiual PC's to an AD
JRF081579 - 5 May 2005 8:18 PM - 5 messages
Current situation - I walked into a company where every computer is pretty much a stand alone system.  The only thing the network is being used for is internet access.  Therefore, each person has files saved in thier computer.  ...
Score Trusting external domain
Joe - 5 May 2005 7:31 PM - 8 messages
I have a domain that I put in a dmz.   This domain is 123.abc.com.    The internal domain is 456.abc.com.   I did not make this a child domain as it is ...
Score Need help with AD Base DN, User DN etc.
Kevin Cowans - 5 May 2005 7:21 PM - 3 messages
Hello all I am in the process of installing some Web Filtering software and it is asking for the following Active Directory attributes: Base DN User DN My Domain is:  armthorpe.doncaster.sch.uk My User Accounts are in the default 'Users' folder of the Active Directory ...
Score ADMT v2 - Custom User Attribute data did not migrate
Space Junk - 5 May 2005 6:45 PM - 1 message
We have a custom user attribute in our source domain.  I extended the schema in the target domain to have the same attribute, but the data does not com over after migration. Any ideas? ...
Score Permission to create printers
Brian Tillman - 5 May 2005 6:09 PM - 2 messages
What permissions are required to grant to a user to make that user able to create and share local print queues in Windows Server 2003?  Placing the user in the Print Operators builtin group doesn't seem to cut it. ...
Score Event ID 11
GreenThumb - 5 May 2005 5:21 PM - 3 messages
Hi All- For some reason I started getting this error message in the event log on my DC.  It's coming from the SQL server.  What do I need to do to fix this? Thanks!! --GreenThumb-- There are multiple accounts with name MSSQLSvc/XXXXXXXXXXXXX:1433 of type ...
Score access is denied joining domain
jkeithw - 5 May 2005 5:10 PM - 5 messages
I have a W2K AD environment.  I had a local admin at one of my offices screw up a member server by trying to take it off the domain.  To make a long story short I cannot get the member server to unjoin or rejoin the domain.  Even ...
Score can I get an email notification of account management events?
=pathfinder= - 5 May 2005 4:28 PM - 3 messages
hi, is there a way to have AD send me an email/alert for any account management events that take place? I would want it for new account creation and permission changes. TIA. ...
Score Migrate standalone domain to new forest as child domain
Rob Wagner - 5 May 2005 3:46 PM - 2 messages
I have a Windows 2003 Domain (call it 'company.com'), and because of business changes, need to change the domain to become company.newcompany.com.  The newcompany.com forest root domain does not exist, so I've got unlimited ...
Score Group Policy Modeling Wizard - Provider Load Failure
Boomer - 5 May 2005 2:43 PM - 1 message
After trying to use the Group Policy Modeling Wizard, I get this error message: The Wizard was unable to generate the Group Policy data due to the error listed below. Details: Provider Load Failure Does anyone have any ideas about this error? Can't find anything on it. -Boomer ...
Score newbie - Simple LDAP search in Outlook
Shawn - 5 May 2005 2:41 PM - 4 messages
We just migrated to AD so forgive my ignorance.  All I want to do is create an LDAP query in Outlook.  My GC is on a separate server than my Exchange 2003 server.  Here's what I'm doing: ...
Score ADMT - Migrating Users - Look in Field Unavailable
Space Junk - 5 May 2005 2:36 PM - 5 messages
I am trying to do test runs using ADMT v2.  I have a two way trust created between my two domains that are in different forests. I have a Domain Admin accuont from the source domain configured to be able ...
Score CRM HELP
Backup - 5 May 2005 2:19 PM - 2 messages
So far on two different occasions I have failed (well I think I have) to implement the install of CRM. This last time I fulfilled all the prerequisite requirements that were needed for CRM to work. So when I attempted to browse to my CRM sites: ...
Score Tree Root Trust
fnguy - 5 May 2005 2:18 PM - 5 messages
What is a tree root trust? ...
Score LDAP QUERY for secondary SMTP addresses
MJG - 5 May 2005 2:00 PM - 3 messages
I'm trying to create a query to show which users have an email address in a specific domain.  The LDAP queries only appear to work on the primary SMTP address for users with an exchange mailbox.  Is there a way to query ...
Score Group Policy it "trumped" by Windows Media Player?
Nick - 5 May 2005 12:40 PM - 6 messages
I impose a Group Policy on my users at the domain level that activates their screen saver after 10 minutes of idle time, with the "On resume, password protect" option checked. In this way, their PC locks after 10 minutes & only ...
Score Administrator on a Domain Controller in AD problem !!!
Maarten - 5 May 2005 10:39 AM - 2 messages
Hello, I have a customer where we have 1 Domain and 2 Sites. One of the sites has only one Domain Controller. We don't want the administrator over there to completely administer the AD. So we made a group for them and give them ...
Score AD Authentication
Eng - 5 May 2005 3:21 AM - 2 messages
Hi All, I have 4 site and each site have its own domain controller. How can I check the users is authenticate on which domain controller? How can I force the user to authenticate on the Domain cotroller at their own site? ...
Score Domain controller machine certificates
jasonf - 5 May 2005 2:30 AM - 2 messages
Can someone explain how domain controllers get a multi purpose computer cert issued by root. There is no cert server installed in the domain. Is it used for domain replication? I also noticed under trusted root authorities there are entries named after ...
Score Transfer from W2k3 to W2K3
Jerry Dubuke - 5 May 2005 2:24 AM - 6 messages
Hi all, I am in the process of upgrading an NT 4.0 network. I installed a new NT box (called it INTERIM), took the PDC role, upgraded to 2K3 and A.D.  Being the first  W2K3 domain controller, it took all FSMO ...
Score Move inhibit
Draiden - 5 May 2005 1:34 AM - 2 messages
Hello all, Our company has issues with users accidentially clicking and dragging folders from common shared areas into others.  It seems that folders move from their home into other folders "by themselves."  We are using Windows XP clients and Windows Server 2003.  I was wondering, does anyone know of a good ...
Score AD search in My network Places
Greg - 4 May 2005 10:48 PM - 2 messages
How can I get more results when I search AD using the "Search Active Directory" in "My Network Places" Example: when I do a search for a user name and double click it, I only get 3 tabs returned, "General, Address, Business" I need to add a tab to that ...
Score ADAM userproxy password anomolie?
Jims - 4 May 2005 10:14 PM - 9 messages
We are using adam to authenticate users of several applications.  The adam users are userproxy objects and all exist in a couple AD 2003 domains. Users log into the app, the app performs a simple bind to the adam server ...
Score csvde and csv
aks - 4 May 2005 10:10 PM - 2 messages
Can someone help me know when using csvde, how to enter a string containing a comma in .csv file. case A) for e.g, the below works fine, as string "ProductionManufacturing" is one word with no delimiters: dn,sAMAccountName,userPrincipalName,department,objectClass ...
Score Changing default columns in search when adding members to groups
pbOR - 4 May 2005 10:01 PM - 2 messages
In adding members to Groups, how do I change the default columns that display when I search the domain for objects? I'd like to always view the first and last name as I search for the correct user.  This would make it easier to add multiple users to multiple Groups. ...
Score Allow user to edit AD fields
Greg - 4 May 2005 9:51 PM - 5 messages
I have set the ACL permissions in AD correctly to allow a user to edit only certin fields, like address and phone# in AD users and computers. Is there an application I can use/download/buy that will allow the user to ...
Score KDC Event ID 23
djoman27 - 4 May 2005 9:04 PM - 1 message
I have recently started getting this message.... Source: KDC Category: None Event ID: 23 Description: The KDC received invalid messages of type changepassword. I can not find any support on this issue.  Any help from anyone would be helpfull in fixing this problem. ...
Score How to restrict printers from being seen in different Sites?
John - 4 May 2005 8:40 PM - 2 messages
Hi, Here is the situation: It's a Windows 2003 Domain. I have 2 sites: Site A and Site B.  Printers are installed and published on File servers in both sites.  The question is : How can I restrict users From ...
Score dsadd query
AndyMan - 4 May 2005 7:11 PM - 2 messages
I am trying to create a dsadd command line which will create OU's and users in Active DIrectory WITHOUT knowing the domain name. At the moment the following line will create an ou called "ManagedUsers" in the domail test.local: ...
Score Scripting User Creation with AD sets user as Disabled
Barry Hallman - 4 May 2005 7:11 PM - 4 messages
I have written a vba script to create new users for a 2003 Std Ed Server.  The users are all created but all appear as "disabled".  I have use the LDAP provider.  Using ADSIEDIT.MSC, I cannot find a property to set with my script ...
Score Group Permissions
Eshprof - 4 May 2005 5:40 PM - 2 messages
We are in the process of cleaning up our groups.  We have several hundred that are empty, but before we delete them we want to know what resources they've been assigned to. Where can I go or what can I type to find out what resource a certain group ...
Score Cannot Add/Remove Active Directory Servers
Ray - 4 May 2005 5:11 PM - 2 messages
Hi there, I think something wrong with our active directory, we cannot add/remove DCs, we got the error, Managing the network session with maindc.image.local failed "Logon Failure: The target account name is incorrect." Something wrong with the main domain controller, I recalled there is a ...
Score variable to make home directory default to display name
Rick Bonanno - 4 May 2005 5:07 PM - 5 messages
In AD Users and Computers I'd like to set up home folders to default to "dispaly name" rather than "user name".  Is there a %variable% I can use to do this.  Thanks, Rick Bonanno ...
Score ADMIN TOOLS
Stew - 4 May 2005 4:20 PM - 3 messages
when i try to edit the e-mail address (from my local machine) i get "Access is Denied, Facility: Win32, ID no: c0070005, Microsoft Active Directory - Exchange Extension". This works from the server with no problems with my login. My account has ...
Score DFS Restore problem
Warner@nospam.postalias - 4 May 2005 4:00 PM - 1 message
I had to replace and restore a DFS Root server.  It was one of two DNS servers that point to the same root.  I have gone through and checked all the settings and security, but there still seems to be a problem.  The redundancy ...
Score AD Domain Name same as Public Domain Name
MacKenzie Mickelsen - 4 May 2005 3:57 PM - 12 messages
Hey everyone I am stupid! When we set things up we set our internal network we used our public domain name in the set up(mostly because we were having all of our internet stuff hosted). Recently we have switched and are now hosting things ...
Score Establish Windows 2000 to 2003 Active Directory Domain Trust with
RossBale - 4 May 2005 3:48 PM - 7 messages
Trying to establish a Trust between an AD2003/AD2000 domain through a firewall.  Firewall doesn't seem to be blocking any traffic, although when I run NLTEST /SC_QUERY:domain name, I get I_NetLogonControl Failed : Status = 1355 0x52b ERROR_NO_SUCH_DOMAIN, but if I do NLTEST /DSGETDC:DOMAIN NAME I ...
Score GPO Filtering: Not Applied (Empty)
Brian Whiting - 4 May 2005 3:27 PM - 2 messages
I created a GPO to enable object access auditing (success and failure) and linked it to the domain. I set it to no override.  The security permissions on the GPO has Authenticated Users assigned Read and Apply group policy. ...
Score Implementing IPSEC with Group Policy
Elvis - 4 May 2005 1:36 PM - 1 message
Hi, I am running Windows 2003 acorss 20 branch offices and I would like to implement IPsec using group policy. Is there any documnet or can someone assist me with a step by step implementation. Also how much of a load does ...
Score Problems Authenticating to Exchange 2000 after 2003 serve SP1
Mike - 4 May 2005 11:14 AM - 2 messages
I just service packed all my 2003 DCs to SP1.  This week I am having problems with my end users loggin into Exchange 2000 via Outlook 2003. They go off line and when they try to get back on the are prompted to enter in thier ...
Score DC Removal fails: Failed finding a suitable domain controller
Steve Buckley - 4 May 2005 10:03 AM - 9 messages
I am repairing a consideribly damaged Win2K AD setup and am currently trying to demote the most troublesome DC (I'll call it SERVER1) from the network. I have patched up the DNS service records as best I can and added a reverse ...
Score Get the canonicalName of a domainDNS object
Ran Davidovitz - 4 May 2005 8:11 AM - 5 messages
How can i get the canonical name of a specific domainDNS? My code does the following: 1. connect using directory entry to: "LDAP://RootDSE" 2. Get the "rootDomainNamingContext" 3. Connect to GC:// + rootDomainNamingContext that i got 4. Find all the domainDns using a directory searcher ...
Score How to allow a group to reset the passwords of protected group members
François_Beretti - 4 May 2005 6:47 AM - 1 message
Hello I use windows 2003 server I want to let a group of my domain reset the passwords of the print operators group members. I can't. As I saw, the control delegation can only be applied to a container. But ...
Score RE: User must change password at next logon...
Cooper - 4 May 2005 5:51 AM - 2 messages
Any chance someone has learned anything new on this??  Having the same problem here too.  And I agree, it doesn't make the IT guys look all that great.  Password changes should be simple, and yet.... ...
Score Upgrading Windows 2000 to 2003 AD
david - 3 May 2005 11:30 PM - 5 messages
Our organization is upgrading our W2K file server to a new Server 2003 machine.  We are also implementing Active Directory for the very first time. I am having a little trouble trying to figure what the best way would ...
Score Users Home Directory move
Mark - 3 May 2005 9:11 PM - 4 messages
I am move 1000 users home directories to a new server with a different name and ip address. Is there any tools out there to help me with this, because it would be tought to go throught all the users account and change the path. ...
Score Creating Incoming/Outgoing Trusts
Craig N - 3 May 2005 6:47 PM - 5 messages
I have a domain here locally, and a domain elsewhere that is connected through the WAN. I want to create a trust so that the users in my local domain can use there logins on the other domain. However, I want to prevent ...
Score Need to disable terminal server lock
Greydude - 3 May 2005 6:33 PM - 3 messages
When a client is logged in through remote desktop, the session stays active and the RD desktop stays open,  but the system times them out and locks the workstation. Is there a way I can disable this timeout through group policy? ...
Score Adding entries to the Users and Computers
eyoungST - 3 May 2005 5:59 PM - 5 messages
Not sure if this is the correct group for this, but I am trying to add items to the User and Computers form in AD. There are items I want to be able to edit using the Users and Computers form instead of scripting or using ...
Score Computer Description vs. AD Computer Object Description
troy240sx@yahoo.com - 3 May 2005 5:27 PM - 4 messages
Are these attributes the same?  If I fill in the computer description on a Windows XP computer will it fill in the Description field on the computer object in the AD.  I have tested this in both a production and a lab ...
Score Delegating admin roll
Nathan - 3 May 2005 4:04 PM - 2 messages
We are in the process of evaluating delegating the domain admin roll, meaning that the current domain admins would no longer be in the domain admins group but delegated all of the necessary administrative functions. What is the best way to allow non domain admins the ability to manage domain ...
Score Disaster Recovery of Win2003 Domain controller to different hardware
mjw - 3 May 2005 1:35 PM - 3 messages
I am trying to restore a windows 2003 domain controller for disaster recovery testing. The machine I am trying to restore to has a different hardware spec, as in the event of a disaster it is unlikely I would be able to get a server of ...
Score Intra-site replication SYSVOL/Domain-DFS-root..
marv - 3 May 2005 11:22 AM - 5 messages
Why doesn´t FRS use different schedules to replicate SYSVOL contents and DFS-Volumes? ...
Score Upgrade Win2K AD to Native Mode, File sharing problem
lhiway - 3 May 2005 7:05 AM - 6 messages
I have a file server which was a domain controller running on Win2k Mixed mode.  I followed the convention of my company IT department to set ACLs on the share files by: 1. put all the authenticated users to a Globle Group ...
Score gpo folder missing from sysvol folder
Tadashi Inayama - 2 May 2005 11:58 PM - 11 messages
what does it mean when the folder for the gpo you created is no longer there at the my.domain.com/sysvol/my.domain.com/policies ?? since if the policy folder is no longer there, I can't process those gpo's ...
Score Logon server in an enterprise enviroment
Elvis - 2 May 2005 11:24 PM - 3 messages
Hi, I have the following situation. Windows 2003 AD enviroment, across 30 branchoffices of varying WAN speeds mostly good though. Logical star routing topology.  We have a single forest, and a Domain controller at every branch office. Every DC is a GC, DNS, WINS.. We are using subnets in the ad sites ...
Score DC cannot see AD
Kahonu - 2 May 2005 10:20 PM - 2 messages
Aloha kakou, When trying to run "AD Users and Computers", I receive a "Naming information cannot be located because: The server is not operational. Contact your sysadmin etc....." I suspect DNS. When all worked, I had a DC1, DC2 and DC3. DNS was running ...
Score Domain Admin password changes
Mike B - 2 May 2005 10:06 PM - 2 messages
We are running AD 2003.  My boss wants to set the default domain admin password and put that password in a safe for security.  The problem is that an domain admin can change that adminstrator password.  Is there a way to ...
Score Password Policy Issue
Mike - 2 May 2005 9:38 PM - 4 messages
Windows 2003 AD domain. My client doesn't want to use complex passwords. I've created a OU w/ a GP to prevent the comlex requirements. I've "Blocked Policy inheritance". I've also disabled/changed the settings in /Computer configuration/Windows ...
Score GPO WinXP roaming profile issue
MattMJF@Yahoo.com - 2 May 2005 3:58 PM - 6 messages
LAN ENVIRONMENT: Windows 2000/2003 Servers AD Domain at Windows 2000 functional level.  Client computers running WindowsXP Professional though in process of migrating from WinNT 4.0 to WinXP so most clients are NT.  About 6,000 seats in this enterprise LAN. ...
Score Cant create a user in Active Directory for Win2k3
JC - 1 May 2005 4:39 PM - 9 messages
I have been trying to create a user in Win2003 Standard Edition with SP 1. I get this msg:   Windows cannot set the password for <user> because:   The password does not meet the password policy requirements. Check the ...
Score What is the Best way to give AD domain User-x right to configure Network Properties?
Burt Reynolds - 1 May 2005 9:04 AM - 1 message
Hello, Simple: Just wanted to give one of my users the right to configure and examine his network properties. The "Network Configuration Operators" group promises to do exactly this. How deceitful Microsoft features can be. I Have a fresh install of W2k3 and an xp sp2 box newly joined to the ...
Next »