Windows Server Active Directory

Syncing domain to ADAM

dstambaugh - 2 Sep 2006 8:14 PM - 7 messages

I've just started playing with ADAM SP1. I read alot of websites and I am not sure what my problem is. I have ADAM running on a virtual server (Server 2003 SP1) on my XP box. I am trying to get ADAM running so I ...

how can they get your xp cd key

timothy4love69 - 2 Sep 2006 2:16 PM - 12 messages

how can they get your xp cd key or product key, can you stop tham from getting it. i don't know if this question ever been asked ...

Forest and Exchange

Montag - 2 Sep 2006 9:55 AM - 4 messages

I need to install 2 exchange server: the back-end is in DOMAIN-A (2003 domain) the front-end is in DOMAIN-B (2000 PDC) What are the steps to connect the two domain in a forest without reinstall all ??? ...

How do I script bulk-remove the SIDHistory value from my AD user accounts?

Spin - 2 Sep 2006 12:08 AM - 4 messages

Gurus, How do I bulk-remove the SIDHistory value from my AD user accounts? I did a domain migration six months ago, and migrated SIDHistory. I have since created hundreds of additional new fresh accounts. I guess what I am ...

Can you restart a service on multiple pcs?

castillo.jeremias - 1 Sep 2006 9:15 PM - 4 messages

Is there a way to stop/start/restart a service on multiple pcs? Thanks! ...

Establish trust between NT 4 domain and 2003 native

Bill - 1 Sep 2006 8:57 PM - 8 messages

We keep getting "unable to contact domain" while trying to establish a trust connection between a NT 4 domain and 2000 native AD domain. WINS and network connectivity are in place, but the trust continues to fail. Does the fact ...

Active Directory Atributes

ninjabytes - 1 Sep 2006 8:34 PM - 5 messages

Hello, I was wondering if you guys know if there is *any* thing that could retrieve Active Directory atributes through JAVA from Linux. We are using Linux + Centrify ([link]) Thanks ...

Identifying Obsolete / Non-active Network Computers Listed in AD

Jim - 1 Sep 2006 8:22 PM - 3 messages

I am using Windows 2003 server with Active Directory. I have computers showing in the computer "organization unit" and I believe quite a few of them are no longer connected in the network. Is there a script that can be run to ...

Printer Not Connecting

Chip - 1 Sep 2006 8:04 PM - 3 messages

I have one user that is set up in the AD like all other users, but one problem. She can not connect to one specific printer. She gets an error of: "You do nothave suffecient access to your computer to connect to the selected ...

disable or rename administrator account

UBEST - 1 Sep 2006 7:38 PM - 5 messages

Hello, For security reason, we have to disable or rename Domain administrator account and domain member server's local administrator account. We have some concerns about tha changes: Can anyone please answer the following concerns? If we rename or disable administrator account for AD or Windows 2003 ...

Delegate permissions

jacksneed2000 - 1 Sep 2006 7:37 PM - 3 messages

I have a group of security officers that require read access on all domain workstations and servers, so that they may monitor all computers for virus activity, suspicious event log entries, etc. We cannot make these security officers domain administrators. Ideally, we would like ...

oops- Domain Admins locked out - Group Policy

BookerW - 1 Sep 2006 7:08 PM - 4 messages

Outside of contacting the Enterprise admins, can anyone think of a way to reverse the following. I have a GPO that I set the Read and Apply Group Policy delegation permission to Deny. Now of course, when I click on that GPO, it says ...

Bind Redirection in ADAM

Jonildo Santos - 1 Sep 2006 6:28 PM - 10 messages

I am configuring they ADAM him for do bind redirection with him Activates Directory. But, this presenting the down the error when I try to add a user with its SID: ***Calling Add... ldap_add_ext_s(ld, 'cn=testproxy,dc=nwtraders,dc=msft',[2] attrs, SvrCtrls, ...

"Certsvc_dcom_access" security group not created after installing

Troy H. - 1 Sep 2006 6:26 PM - 3 messages

Hi, I've installed Certificate Services on a DC in a lab in order to troubleshoot something in production. The problem is, there's supposed to be a new security group called "CERTSRV_DCOM_ACCESS" and there's not. Any ideas? ...

Terminal Server GPO Issue

Jon - Server Admin - 1 Sep 2006 5:24 PM - 9 messages

I have a GPO that contains user and computer settings for a group of users being applied to 6 Terminal servers running 2003 that are in a certain OU within our Active Directory. Within this policy are folder redirection ...

2 domains, 1 Ex2k box.

Matt - 1 Sep 2006 5:11 PM - 3 messages

I have an existing W2k domain and Ex2k server in that domain. I want to add a second domain (2k3) to the forest and have both domains access the one exchange box. I ran domain prep on both domains, setup DNS etc . . . and have ...

AD Partition Creation error

Rob Quast - 1 Sep 2006 3:48 PM - 3 messages

Hello, I'm trying to create an Active Directory Partition according to the following directions [link] I am receiving the following error domain management: create nc dc=testing,dc=facstaff,dc=ccsu,dc=edu ...

2003 migration

BlueIT - 1 Sep 2006 3:46 PM - 7 messages

Any help appreciated.... Two domain controllers. In our case I'll use S1 and S2, domain name US. S1 holds all 5 FSMO roles (netdom query fsmo). The domain is real simple. Have another domain that is trusted with US. We did have an ...

restoring DC

tilopa - 1 Sep 2006 3:40 PM - 5 messages

We have a single active directory domain with 4 separate physical locations. Each location has its own Domain Controller A B C D. We will be moving 3 of our locations to 1 new location giving us 2 locations. In preperation for the move I am going to test the new curcuit at the ...

Active Directory Migration Tool

Gort - 1 Sep 2006 1:24 PM - 7 messages

my question is when you are using the ADMT does the new DC need to be installed as a new DC in an existing domain? what I need to do is migrate from an existing server 2000 Ad domain to ...

Roaming Profiles

Gadget Geek - 1 Sep 2006 1:11 PM - 10 messages

I am stepping in behind a IT vendor who set up our Windows 2003 Small Business Server. They set up roaming profiles. I think they may have botched it up since you can not delete icons off of your desktop. If you log ...

Exchange installation

Gadget Geek - 1 Sep 2006 1:01 PM - 6 messages

Hey folks, I set up Exchange on Windows NT about 6 years ago. Now I want to do it again on Windows 2003 Small Business Server but feel a little rusty ;-). Does anyone have a guide which is online, or a book I can buy which they ...

Getting Active Directory replication working over firewalls & nat

ca99uk - 1 Sep 2006 12:08 PM - 5 messages

Hello, we currently have a situation where we need to get active directory replication working between two domain controllers that are at two sites seperated with two firewalls and routing devices. I have read a number of Microsoft white papers but would like to here from anyone who ...

custom admin template

Paul - 1 Sep 2006 11:36 AM - 5 messages

Ok here is the setup, I am trying to create a custom adm file to set the background colour on all PC's. I found this adm file on the web: CLASS USER CATEGORY "Desktop" KEYNAME "Control Panel\Colors" ...

explorer sometime not start after change to AD login

Wicka - 1 Sep 2006 3:27 AM - 2 messages

Hi All, We have NT4 Domain and a New AD 2003 Domain on my network, every computer have join the new domain but login by NT4 Domain User accounts for a long time, no problem occur during that period. Then we now migrating user from NT 4 Domain to AD Domain Users. We just ...

Active Directory Query for Enabled Users

jdh201 - 1 Sep 2006 1:32 AM - 2 messages

This seems kind of simple considering that finding the disabled users requires a check box to be turned on, but I need the oposite. I need a way to list all of the users in and OU that are enabled. I may be missing ...

need vb script

israni.girish - 1 Sep 2006 1:23 AM - 3 messages

I need a vb script which can read global group names information from txt file and lists the members ...

Published App won't install

Nate - 31 Aug 2006 9:41 PM - 2 messages

I published an application for my users to install. None of them have local admin rights on their machines. When logged in as a regular user and try to install the new program from Add/Remove programs, I get an error that the application requires Internet Explorer 6, and cannot continue. There are Windows XP SP2 Machines, I know for fact that IE 6 is installed. ...

DNS-DC-WINS server operates at 400MB available mem

Marlon Brown - 31 Aug 2006 9:25 PM - 2 messages

I noticed that a couple of servers "DNS-DC-WINS", each with 2GB physical memory each are operating at 400-500 available MBytes. Is there any specific regkey I need to tweak to make them take advantage of the physical memory, or should I just pump more physical RAM on them ? ...

AD Replication fails with RPC error

Ryan - 31 Aug 2006 9:15 PM - 9 messages

When I ask DC1 (2003,R2) to Replicate with DC2 (2003) i get the following error. "The following error occured during the attempt of synchroning names context <domain> from DC1 to DC2. The RPC Server is unavailable. Could this be a DNS error? both DC's have DNS running, with all the ...

krbtgt after upgrade to 2003

Kent - 31 Aug 2006 8:38 PM - 4 messages

We migrated to a full 2003 functional AD structure. KRBTGT is an account that is still listed but disabled. I gather this is not needed in 2003. Can this account be deleted. When try, can't because states "built in ...

Restricting Read access to an attribute in ADAM

Thomas Chan - 31 Aug 2006 7:19 PM - 6 messages

Hello Support, I currently have an attribute in ADAM, carLicense that I would like to protect. So I would like to have the Administrator group be able to read this attribute, but not the Readers group. I use the following command: ...

disappearing folders

mmark75 - 31 Aug 2006 7:13 PM - 2 messages

I have a question concerning directory listings with Windows server 2k3 AD. I'm noticing that at times, upon disconnection from the network and reconnection. I'm not getting a complete directory listing after mapping the drive(if i have 30 subfolders under a network folder share, ...

History in IE6

Chris - 31 Aug 2006 7:00 PM - 3 messages

For some reason, the History in my IE6 on Win XP SP2 system has stopped working. The History folder is empty, no files at all, and nothing is being stored. After playing about for a while, I decided to download IE7 and install that, ...

Global Catalog Partition Occupancy

Marcos - 31 Aug 2006 6:53 PM - 2 messages

Hi there, I used this parameter to publish my GC early. Now that my GC has finished replicating, is it safe to remove this key from the registry? Can anyone help? Thanks. ...

"change password " Permission

moyer - 31 Aug 2006 6:18 PM - 4 messages

I am an It auditor. Ive noticed in our active directory that the everyone group is a member of the domain admin group with change password permissions. Is this a default setting/proper delegation. I am assuming it just gives the ...

Moving a DC to a new Site

Jeff - 31 Aug 2006 6:06 PM - 2 messages

Hello, I am physically moving a new, operational Domain Controller to a new site and subnet for a branch office. The server is 2003, r2 on a 2003 ADS domain. It is a third DNS server, DHCP server for an new subnet (turned down) and DC. ...

Domain logon

Gillies - 31 Aug 2006 5:50 PM - 2 messages

Greetings, Using Win2k3 R2, 1 domain, 2 DCs with DNS servers (secure). Say DC1 and DC2. DC1 works fine and admins can logon normally. So in order to test DC2 I unplugged DC1 from the network. ...

Forest Trusts

altria - 31 Aug 2006 4:21 PM - 3 messages

Hello All, I am unable to create forest trusts between domains in my environment. It tells me that it cannot contact the machine but I am able to communicate via ping, nslookup, etc..... I have raised both forests to win 2k3 and still it ...

domain setup

rvegas - 31 Aug 2006 4:15 PM - 3 messages

I have 3 locations each has 2 servers to be setup as DCs. This is what im trying to do. domain.com to.domain.com fl.domain.com uk.domain.com ...

Utility to show user's last logon/logoff time

John - 31 Aug 2006 2:37 PM - 4 messages

Hi, Sometime ago I downloaded and installed an utility that will add another tab to the User Properties window. This shows some additional user information such as UID, last logon/logoff time, etc. I pretty sure I loaded on a domain controller but the tab has disappeared. ...

Computer accounts password changes

Haim Beyhan - 31 Aug 2006 2:34 PM - 3 messages

I have some test machines that contain ghost images for different operating systems. Each of these images has a different machine name and is part of the AD domain. There are situations that we do not load these images too ...

Directory Services Restore mode problem

xkp - 31 Aug 2006 2:27 PM - 2 messages

Hi all, my windows 2000 server has been invaded by malware recently so after a while i run on it prevx. But after the reboot i have the following error: --------- Directory services could not start : A transaction recover failed. Please reboot into Directory Services Restore Mode, check the event log ...

ADAM and Global Catalog

Juan Carlos Perez - 31 Aug 2006 2:01 PM - 2 messages

Hi, It is possible to synchronize ADAM with the information provided by the Global Catalog? how I can obtain this? regards, Juan Carlos. ...

Prevent software install

ITDUDE27 - 31 Aug 2006 1:31 PM - 6 messages

Hello world, I'm trying to prevent the users from installing software on the workstations. which policy would I enable to lock that? Thanks. ...

Help locate failed DC in AD - Server Failed Unexpectedly

KennyW - 31 Aug 2006 1:29 PM - 2 messages

Hi all, I recentley had a Windows 2000 box (Named 'Centeral001_PDC') die on me which left me seizing various roles (FSMO related roles etc). I noticed when running a dcdiag against one of my working Windows 2003 DC servers that ...

AD - permissions on the network

RC - 31 Aug 2006 1:06 PM - 5 messages

is it possible to configure a script, gpo, or push something through AD, ldap, that will remove all permissions from the local administrators group of the machine and replace it with ones I want on there. Basically we do not allow users to have local admin rights for obvious ...

Unable to loggin from workstationo

Gadget Geek - 31 Aug 2006 1:01 PM - 5 messages

I am setting up a domain on Windows Business Server 2003. I am having trouble logging in certain users, on their computers, to the domain. I can log onto the domain from these workstations using the administrator user name ...

Resolving SIDs to user names

christoph - 31 Aug 2006 12:36 PM - 5 messages

Hi, I'm not sure whether this topic belongs in this group, I didn't find any better place. Usually when I open the security tab of a file or folder the SIDs contained in the Access Control Entries in the DACL are converted to ...

ForeignSecurityPrincipals

christoph - 31 Aug 2006 12:28 PM - 4 messages

Hi, can someone tell me how this container is actually populated and which objects get stored there? It's definitely not "all objects from trusted domains" as some papers say. If it is only those objects that are used in domain local groups ...

what value to specify as "Unique X.500 Object ID" for my custom attribute

Akhlaq Khan - 31 Aug 2006 12:19 PM - 4 messages

hi, we are running windows server 2003 domain environemnt in our office. we are developing an application for our local use which uses AD as its main source of user information. for this purpose, we need to add some custom attributes ...

Send As rigth clarification

david - 31 Aug 2006 10:18 AM - 2 messages

Hi, some further info on the problem: after some searching in the newsgroup I've found out that (using the LDAP-tool) I see an entry in the user properties for the problem user : Matched DNs: Getting 1 entries: 3> publicDelegates: CN=user2,CN=Users,DC=domain,DC=com; CN=info ...

AD and Expired Password Checking and how to test?

ohaya - 31 Aug 2006 10:15 AM - 14 messages

Hi, I'm trying to write some code that will detect when an Ad user's password has expired. Ideally, this 'expired password' detection should work identically to how AD itself works wrt when a password is expired or not, i.e., it should give me the same results as if I tried to login ...

Send As right in AD Users

david - 31 Aug 2006 8:33 AM - 3 messages

Hi, I'm having a bit of trouble with AD. I have several users who have send as rights on other users mailboxes. But now I have created a new user and I want to grant two other users "Send ...

Domain Controller Security Policy

Mansoor - 31 Aug 2006 8:09 AM - 7 messages

One of our administrator have accediantely implemented software restriction policy. due to which we are not able to access any .msc tools from start menu, and there are several exes which we are not able to run from shortcuts on servers. now i have tryed to open Domain Security Policy & Domain ...

Ldifde strange characters

Eduard - 31 Aug 2006 7:56 AM - 2 messages

Hello, When i execute: "ldifde -f c:\real.ldf -s SERVER -d "CN=Real,CN=Users,DC=domain,DC=loc" -r objectClass=group -l member" And open real.ldf members context name not appear. Appear strange characters like this: dn: CN=Real,CN=Users,DC=Administracio_Justicia,DC=loc ...

Remote Manage.

Al - 31 Aug 2006 7:43 AM - 3 messages

I am trying to "remotely" manage one of my clients through Active Directory with no luck. The client is using Windows 2000 Professional. when i try to manage the computer I am not able to access the "Local Users and Groups" panel. The error message is "Unavailable to manage", and ...

Restricted Groups

Laura - 31 Aug 2006 2:13 AM - 7 messages

I have read through most of the postings regarding Restricted Groups and I am still having problems trying to create a Restricted Groups and making the domain users a member of the local computer admin group. Running Windows 2003 Server SP1 ...

Audit file move

Debra - 31 Aug 2006 1:22 AM - 2 messages

Is there a way to audit if a file is moved? We want to audit our desktops to find out if users are moving company data to an external hard drive etc.. Thanks in Advance! ...

Delegate control help...

Mugen - 30 Aug 2006 11:43 PM - 3 messages

I move a domain group to new OU that i want to be managed by a user. I grant read/wirte permission by using Delegate Control wizard, then i create a new MMC in the user's desktop and select that OU and choose "New window from ...

Given a list of domain computers - how can I script the placement of these computers into a specific

Spin - 30 Aug 2006 10:21 PM - 3 messages

Gurus, Given a list of domain computers - how can I script the placement of these computers into a specific OU? ...

Creating a replica of a forest

warsai - 30 Aug 2006 8:40 PM - 3 messages

Hi there, For DR purposes, I would like to create a replica of my production forest. Here is what I tried to do: I created a system state backup of the forest. Installed a new server, connected it to a totally different subnet with no ...

Servers not appearing in AD

BugginOuT - 30 Aug 2006 8:39 PM - 16 messages

I know this is kind of strange, but the last 2 servers that we've recently built and added to the domain does not appear in Active Directory. The last 10 or so workstations that I've configure does appear in AD, is ...

An application, script, or AD Saved query that ...

Eric B - 30 Aug 2006 8:04 PM - 4 messages

Sorry, this a repost with added information only because I really am stumped! Is there a way to determine which users are not a part of any distribution group? That is, they may be a part of a security group, but not a part of any ...

use NETBIOS name to search AD in c#

thatsastounding - 30 Aug 2006 7:18 PM - 3 messages

Hi. I am relatively new to using aactive directory and code to access it. Basically, I am trying to find a Security Group within the AD. I want to be able to search based on the NETBIOS name. Another catch is ...

permissions for AD environment

altria - 30 Aug 2006 6:05 PM - 2 messages

Hello All, I am wondering exactly what permissions I could give temporary workers in an IT dept? Some of thier job functions would be adding machines to domain, accessing share folders on server, etc.... Right now , I have them as Server Operators, primarily for adding ...

DNS Reverse Lookup and forwarding requests

Eshprof - 30 Aug 2006 5:21 PM - 9 messages

If a DNS server tries to resolve a reverse lookup and can't, does it forward that off to the forwarding address to try resolving it that way? I am guessing it does. Thanks. ...

Newbie Help please LDAP shared address book for Outlook 2003

Roundy - 30 Aug 2006 4:58 PM - 4 messages

I am trying to setup a shared address book for our company. We are running Windows 2003 Server Standard Edition. I added a contact to Active Directory Users and Computers under an OU called Watertronics. I added one contact to ...

Limit user logon to a certain pc?

Cyber-Guy - 30 Aug 2006 4:49 PM - 5 messages

Greetings, Has anyone done this before I know its possible using group policy but just don't remember which option in the group policy to activate? I would like to limit a user or in another words associate a user to a ...

Can you downgrade a server OS?

CATCOMPUTERS - 30 Aug 2006 4:36 PM - 2 messages

ie. Win2k3 Enterprise to Win2k3 Standard Edition? We have a customer who's server is currently having problems, and they think that the copy of Win2k3 that they have is not legit. ...

hiding contacts from directory search (LDAP)

tnt - 30 Aug 2006 4:08 PM - 10 messages

Hello, Can somebody point me to the right directions. I want to hide the contacts from certain people in the domain. When users search directory service using Outlook expresss,(if a user has a domain account opens up outlook express, he/she can view all the contacts by ...

DNS Error

Eric - 30 Aug 2006 4:05 PM - 2 messages

On our test network we have DNS setup. We changed the Domain name so I dcpromoed my server down rebooted and dcpromoed back up to the new domain name. DNS did not replicate. I could finally get some of the enties in DNS but no service records would come over. Finally I decided to rebuild the machine. I installed DNS but did configure it at all then dcpromoed it up to the new domain and WOW DNS now has service records on my machine (It worked). Does anyone know what causes this? It has biten me twice thus far. ...

Issues with ADS replications

texmansru47 via WinServerKB.com - 30 Aug 2006 3:58 PM - 2 messages

I inherited a poorly built ADS structure. Luckily it is a very small implementation (two DCs and botu 15 servers). The problem is I do not see very good and fast ADS replication. On a structure of this size we should ...

Remote access to event viewer denied.

Al - 30 Aug 2006 3:55 PM - 5 messages

I am trying to remotely manage a computer. When i try to access the event viewer branch in the snap-in tree, i recieve an "event viewer access denied" Why is this happening and how can i solve it? Thanks, ...

How do I setup so that user can join computers to domain but not as domain admin

Corey Arndt - 30 Aug 2006 3:51 PM - 3 messages

I am looking to have a user be able to join computers to the domain but not be able to be a part of the Domain Admin Group. This will also require that the user have Admin Rights on the computer when ...

Searching AD using vbscript

DhamAngry - 30 Aug 2006 3:51 PM - 3 messages

I'm on a Windows XP Pro comptuer joined to domain1. I can search by script against AD on domain1. I want to be able to search domain2 (by script) from my computer on domain1. My scripts are all set up correctly using different credentials for domain2, ...

Adding a Column to the AD display

Jeff - 30 Aug 2006 3:39 PM - 2 messages

IS there a way to cusomize the display fields you see when you have the users folder highlighted? I would like to add the Display Name field to the view because it is different than the Name field. ...

Extracting Servers from OU

Tarun Sood - 30 Aug 2006 3:16 PM - 2 messages

HI everyone I have a simple question .......... If we want to know that what Servers we have under which OU how can we achieve that is there any script or command to get that Thanks in advance ...

help with exchange pop3 email

IT-MONEY - 30 Aug 2006 2:37 PM - 2 messages

We have a group of users we are joining to our doamin they use outlook express pop3 email. We do not allow out going smtp outgoing mail on our firewall. It there a way to setup mailboxes fo them in our excahnge server ...

Domain accounts being locked, only from specific machines

djwaz - 30 Aug 2006 2:01 PM - 2 messages

I am having an issue where any domain user logged on to certain machines in our domain will become Locked. I can track which machines it is happening from, even dis-joined from domain and re-joined and issue still exists. ...

Log on to: Windows XP Pro Domain Logon Question

Phil Buzzette - 30 Aug 2006 1:50 PM - 6 messages

So, when you turn on your computer and your logon screen comes up, you will have your domain name and your local computer name. What I am trying to is have multiple domain logon options here. The situation is that we have multiple customers with domains and we want to ...

Disable Internet Connection Wizard and accept defaults

KJacks - 30 Aug 2006 1:29 PM - 6 messages

We have a program called Deep Freeze on our student computers which prevents any changes to a computer when restarted. The problem we are having is that everytime a student logs on he/she has to go through the internet connection ...

Amend multiple users' Home Folder path

M_Hood - 30 Aug 2006 12:50 PM - 10 messages

Hi All, We have just configured a new Win2003 server and intend to transfer all User Data files to this new server from the current machine, also win2003. At present, the users home folder (H:) connects to \\nt_pdc\users$\.... The new server is called aesg1, and we are keeping the same directory ...

default web home group policy

GPGP - 30 Aug 2006 11:33 AM - 4 messages

Hi, just created a group policy for default web home page and linked to a user OU. Login as a user in this OU, the default web home page is as set in the group policy. However, the user can reset the home page and after resetting the home page ...

compare ad in time

chriske911 - 30 Aug 2006 9:56 AM - 2 messages

is there any way that I can compare all AD policies to a snapshot in time? I use the new GPMC every day and it is surely a huge improvement in reporting and making backups of policies now that I have those features I would like to be able to compare all ...

Moving between forests

jwd - 30 Aug 2006 7:39 AM - 15 messages

Hi, I have always been under the impression that the only way to move anything between forests is migrate as it is not possible to move a entire domain for instance from one forest to another even in 2003. I have recently had a conversation with someone who says it is possible to ...

Adding a VPN subnet to Sites&Services?

cute.fluff@gmail.com - 30 Aug 2006 5:37 AM - 4 messages

Hello all, im kidna fresh so take it ez on me :) im recieveing EventID 5807 all the listed IP's belong to VPN connections in my network so should i add the subnet of my VPN conenctions to the sites&services subnets? ...

Locking Down Account Administrator

Corey_in_Canada - 30 Aug 2006 12:57 AM - 8 messages

Hello Group, We would like to restrict the default Account Administrator user or create a new user account with limited access. We would like the account to only create, disable, reset password etc, user and group accounts but NOT delete ...

IP Group in AD

Muthu - 29 Aug 2006 11:50 PM - 4 messages

Is it possible to create a group of IP Address in AD like Group of usernames? I want this for ISA Server IP Restrictions. regards, muthu ...

User Placement in Child Domain Based Forest

TomWard5432 - 29 Aug 2006 10:19 PM - 5 messages

I have a root domain in europe and a child domain located in the US. I am the administrator of the child domain. The domains are connected via VPN appliances. There is a DC for the root in europe and a DC in the US for the ...

GPO Issue: Deny 'Apply Group Policy' doesn't work.

Mikepiliotis - 29 Aug 2006 9:25 PM - 7 messages

Hello all - I've got a strange issue - I am trying to apply a GPO to all of my workstations for WSUS settings. I am applying the GPOs to sites, and I am trying to set up the security so that none of my servers are ...

Sample wsh logon scripts

FletchInRaleigh - 29 Aug 2006 8:48 PM - 2 messages

Hi, I am looking for sample wsh logon scripts that will iterate thru a user's Group Memberships and map the proper (Win 2003 Server) Network Shares on each workstation. WSH seems to be the best tool for writing logon scripts to read ...

Re: hiding contacts (ojbect) from directory search (LDAP)

Jorge de Almeida Pinto [MVP - DS] - 29 Aug 2006 8:27 PM - 3 messages

and because you already put the contacts in a separate OU assign DENY to that group on the OU for "this object and all child objects" ...

DsBindW error

tony - 29 Aug 2006 7:44 PM - 3 messages

I am trying to rejoin my secondary dc back into the domain. I initially ran dcpromo /forceremoval and rebooted the server. Now on the primary dc, I am trying to clean up metadata with ntdsutil but getting the error shown below ...

Changing the IP Address of an ADAM server

Thomas Chan - 29 Aug 2006 6:30 PM - 2 messages

Hello, We are changing our network configuration and that results in changing the IP addresses of our ADAM servers. The names of the machines do not change, only the IP addresses. What are the implication(s) when the ADAM servers are ...

AD question

goundhog - 29 Aug 2006 5:49 PM - 13 messages

We have 2 non- trusted 2003 AD domains - A and B There is a network link in place Is it possible for a user from domain A to take his laptop to domain B and logon so he is authenticated in domain A and access all resources ...

Question for Laura E. Hunter [MVP]

Miguel - 29 Aug 2006 5:22 PM - 3 messages

hi:/ In a question of the 24/08/2006 "DS Add User" You answer is very good, just i have a question. what should input in this part of the vbscript? ' Determine DNS domain name from RootDSE object. Set objRootDSE = GetObject("LDAP://RootDSE") ...

Missing user object in AD container

Chris in Tempe, AZ - 29 Aug 2006 5:19 PM - 4 messages

I have a few user objects that I can not see in their respective containers. I CAN see the user if I do a query or if I click on View - Advanced Features in the ADUC tool bar. Also, if I want to add the user to a local security ...

checking a PC's last contact with network through Active Directory

WMorrissey - 29 Aug 2006 5:07 PM - 6 messages

Im running AD in a windows 2003 domain. Im wondering if there is any way to check a PC's last contact with the network through AD. Maybe a tool or something, etc. Any help would be appreciated. Thanks. ...

Domain Controller DNS Error

Stan Cooper - 29 Aug 2006 4:49 PM - 19 messages

I have a relitively small network with two domain controllers running Windows Server 2003 SP1 and all of the up-to-date patches. The Forest and Domain are 2003 Functional Level. DC2 is fully functional and is only the ...

weighted DC preferences for user login *within* a site?

forwarding mail from one user account to another

AD Site Criteria and DFS

How to allow specific users access to a specific directory

Printers in ADUC

view password in AD

Domain Subnet Change

who can make workstation to join domain?

LPT1 timeout DOS Printing

Active Directory - security boundaries

Extending Active Directory schema using DirectoryEntry

ADAM connecting to incorrect server

Duplicate Profile Folders for domain users-- Please Help?

Solicting opinions - What is your favorite SSH client?

LDAP query help request.

Copying Group Policy Settings

Restricted Group Problem My Scenario and problem..what am i doing

Moving/exporting users from one AD to another

Does anyone know where I can download ADHC from?

Manage all server folder/file permissions from MMC?

AD Delagation

logon script

Event ID 4136/Ci Service failed logon

Slow file share access from Win2K3 server

Active Directory Design

How many DC's for 15,000 users ? Where is the documentation ?

Schema replication problem

Password expirey

DC rebuild

Making domain account as Local Administrator

DCpromo error in win2k3 and AD2000

Grop Poicy Error - Reg.

delegation and site creation

Can't set Terminal Services profile path for some users

Preventing PC linked to ADS with ISDN from connecting every 7 minu

How can I list all service principals in a Windows 2003 Active Directory?

ADAM SP1 on Win2K3 SP1

Preparing to backup using shadow copy...

Change Full Computer Name of a DC

HELP ME ANYONE wth this problem with Win XP PRO

post steps after a gracefull DC demotion

Detailed info on WINS