Windows Server Active Directory

swapping faulty 2000 dc for a new server with 2003

Goku 316 - 9 Sep 2006 11:11 PM - 5 messages

For a few months now I have been submitting request generally about AD, DNS and Terminal services.. The reason again is that I use to be tech support level 1 not too long ago and every 4 months I was promoted. Now I am at the management level. ...

Question

wendyma - 9 Sep 2006 2:07 PM - 5 messages

I got this laptop and am unable to get past the login screen. It is trying to login to a Network Domain (it was used at an office by different people). How can I get past this or do I have to ...

How do I uninstall Active directory in Windows 2003 if server will not boot in normal mode?

RO_UK - 9 Sep 2006 12:46 PM - 6 messages

Hi all, I hope someone can help.... I have my exchange server 2003 running on the second domain controller with Windows 2003 installed. My first domain controller (windows 2003) is running fine. However the active directory is corrupt on my exchange server and " I get error ...

Problem to add a User/Group to a Win XP in a migration environment

Ramses Ramsuida - 9 Sep 2006 11:17 AM - 2 messages

I'm migrating a Domain Win NT 4.0 to Windows Server 2003. I need to use ADMT to migrate Computers and User Profiles. (Not in-place migration). When I try to add an account (W2K3_DOMAIN\domain admin) the Select User window show me ...

AzAuthorizationStore.Initialize on ADAM Url throws FileNotFoundException

Jared Warren - 8 Sep 2006 11:43 PM - 4 messages

I have an ADAM instance with a root of "CN=TestWithRoles,DC=royalroads,DC=ca" running on a server called metrocsdev, port 5000. I successfully connect to this remotely using AdsiEdit. This instance contains an AzMan store, which I have ...

Schema Update

B - 8 Sep 2006 10:24 PM - 5 messages

We have 20 W2K3 Domains world wide. I would like to update schema, but first stop only schema replication and just update it only one domain, then make sure if everything is OK, restart replication. Is this a good way to do it? ...

trying to connect to ADAM instance via JNDI

ravi311 - 8 Sep 2006 9:59 PM - 10 messages

Hi , I have created an ADAM instance and trying to connect to it through JNDI, but I am getting this error. Problem searching directory: javax.naming.AuthenticationException: [LDAP: error code 49 - 8009030C: LdapErr: DSID-0C090336, comment: ...

Creating Child Domains

WrestlingIT - 8 Sep 2006 9:57 PM - 4 messages

I have a single DC with one domain. I am trying to create a child domain. I have my MCSE book infront of me and it says to run DCpromo for the active directory installation wizard. When I do the only option it gives me is to ...

Evergreening 65 DC's... best way to do this

Skylyn - 8 Sep 2006 9:34 PM - 5 messages

Hi, I'm hoping that I can get some good ideas regarding what would be the best process of evergreening\replacing 65 DC's in our network. The new DC's that replace the old ones need to have the same name as ...

Login scripts intermittently do not run

Jason A Ash - 8 Sep 2006 5:49 PM - 3 messages

Hello, We have a small Active Directory network, with a single DC, and a simple login script. The issue we have is that occasionaly, the login script will simply not run. No errors on the client station, no problems communicating ...

Setting Empty Property Values in ADAM

Indigenous - 8 Sep 2006 5:26 PM - 5 messages

Hi When I use .NET Framework 1.1 (DirectoryServices) to set an AD Property Value, all is well even if the property doesn't yet have a value. However, if i do the same call against ADAM I get the exception "The ...

Proxy-workstation vs. user

BradCo - 8 Sep 2006 4:54 PM - 5 messages

We have two offices connected with a T1 and each office has its own DSL to keep internet traffic off the T1 and its own proxy server . We have employees that work in both offices (travel back and forth). ...

removing AD component permissions

crippled.hope - 8 Sep 2006 4:42 PM - 2 messages

Is it possible to remove the permissions to enable "password never expires" for all users except domain admins? I would like it if anyone outside the domain admins group who pulled up a user properties page would see this option as greyed out. ...

NTDSUtil in GUI mode...

Skylyn - 8 Sep 2006 4:23 PM - 11 messages

Hi, does anyone know if there is a GUI ntdsutil tool available? The command prompt is cool and retro and all, but it's nice once in a while to just have a drop down box option. Thanks! ...

ADUC operations slow

Mark Blum - 8 Sep 2006 4:13 PM - 4 messages

I have a Windows 2003 Domain with 2 Windows 2K DC's. When I add users, it takes 30-45 min for ADUC to register the user has a mailbox. When removing a PC from ADUC, it takes same amount of time. If I have to rename a PC it turns ...

HELP: New DC won't replicate

Tanzier - 8 Sep 2006 3:40 PM - 5 messages

Need some help on this one. I have a DC that I can't get to replicate properly - specifically it won't replicate DomainDNSZones or ForestDNSZones. Hardware upgrade for a DC. New machine must have the same name as the old one. ...

display hidden field in ADUC

Aaron Love - 8 Sep 2006 3:10 PM - 3 messages

Hello, We have started populating the employeeNumber field in Active Directory through a scripting process. We would now like to view that field in the user properties in Active Directory Users and Computers so we can make changes from the GUI, when necessary. What must we do to make that field visible? ...

change ip address

Marsel - 8 Sep 2006 2:46 PM - 2 messages

Iâ€™m trying to deny some users the ability to change the ip address for their workstations. But they can still go to my network places, click on view network connections and set a static ip. Is there a way to not allow the ...

adprep frustration

BlueIT - 8 Sep 2006 2:21 PM - 8 messages

Thanks in advance..... Frustration settling in as I run adprep to allow a 2003 DC on 2000 AD environment. Have attempted couple things and read several KB articles with no luck. The following is my story.... Have 2000 AD environment with two DC both with SP4 installed. One DC ...

ADAM and Windows Address Book

Rich Raffenetti - 8 Sep 2006 12:39 PM - 32 messages

I have implemented a domain-based ADAM and have the following problem accessing it from Windows Address Book in only certain circumstances. I am doing all of these tests with SSL (port 636). The SSL cert is from a ...

Automation of computer account movements

Ram - 8 Sep 2006 10:56 AM - 5 messages

Dear All I want to automate the movement of computer accounts from built-in computerâ€™s container to an OU meant for machines. I want this to happen, when machines are added to the domain by a particular group. Are there any ...

Elegant shutdown method

David Gray - 8 Sep 2006 10:33 AM - 8 messages

Hello all, Windows 2003 AD domain Win XP Pro clients Looking for an elegant method of shutting down all users PCs at midnight after windows updates and the anti-virus has run. A collegue of mine has come up with a batch file solution using the ...

Repadming /showrepl switch not availible

mfarah - 8 Sep 2006 10:29 AM - 4 messages

Hi, I have just started a contract at a new company and wanted to run repadmin /showrepl to get some info about replication, however the swtich does not appear to be avaible. The DC's are all Windows 2000 with SP4. ...

How to find a publish printer in Schema

Job - 8 Sep 2006 10:23 AM - 7 messages

Dear All, I wonder how to find, in the schema AD, where are located the publish printers ? Which are the names of AD objects that contain this information ? Because I would like to administer globally those printers without the need ...

Disk Quotas

Matt - 8 Sep 2006 10:12 AM - 5 messages

It has been an long time since I completed my MCSE and I have never used disk quotas (so knowledge/memory is a bit rusty)...... until now. My question is if you can apply them retrospectively. e.g. UserA has 100MB of files on the server ...

How to incorporate data from other instance of ADAM? Help,

Fernando Conde - 8 Sep 2006 7:09 AM - 2 messages

Hi I want to extract some data, not schema(Attributes anda classes), from one instance of ADAM and incorporate this data to a other instance of ADAM, The export works, but i dont find the exact command to import the data ...

GPO for DNS Servers

Chris Smith - 8 Sep 2006 4:35 AM - 3 messages

I created a GPO for DNS servers in a domain. The event log on a Windows XP SP2 computer shows the group policy is applying successfully (after a "gpupdate /force" and a reboot) but the IP addresses for DNS servers do not change in the NIC connection properties. ...

Different roaming profile path for different computers

Baturin - 8 Sep 2006 4:28 AM - 7 messages

Hi! The problem is to create, say two groups of computers (by mean of AD Organization Units) and set for them different shares to store roaming user profiles. I can setup roaming profiles by usual way (create share, set permissions and write profiles path seting in user properties). ...

Remove Lingeringobjects

Howard - 8 Sep 2006 3:18 AM - 10 messages

I have error event 1311, 1988, 2042 in one of the DC and it states the solution is to delete the lingeringobects by using repadmin /removelingeringobjects DC DC_GUID LDAP of DC /advisory_mode and it states to use repadmin /showreps servername ...

Same logonserver even though a few DC's

Kent - 8 Sep 2006 2:22 AM - 5 messages

All users get authenticated by one server %logonserver% instead of all available logon servers. The logon server that is working is NOT the FSMO holder, PDC emulator..... There is no group policy for logonserver or script. How does this work? ...

Windows 2003 Native Mode

Wade Bart - 8 Sep 2006 1:32 AM - 5 messages

Can Active Directory 2003 Native Mode be run with Windows NT 4.0 member servers? ...

HELP : Machine dissappeared from DNS (suspect sabotage)

Clubsprint - 8 Sep 2006 1:31 AM - 3 messages

G'day all Last night one of the member servers seems to have had it's Domain DNS entry deleted. Only the machines in the local site can find the server. I'm suspecting sabotage as we have an unhappy sysadmin at the site. ...

Urgent: Set a Trust between windows 2000 and windows 2003 domains

Filipe - 7 Sep 2006 11:33 PM - 3 messages

Hi, I have a Windows 2003 forest with all users and i have a windows 2000 forest with the resources (computers). Between them there is a ISA 2004 firewall. I want a one way trust, the domain in windows 2000 trusts the user ...

Add 2003 server R2 X64 to Mixed 2000 domain

RayD - 7 Sep 2006 10:34 PM - 6 messages

adding new server to the domain fails - active directory on the domain is different from this server - run adprep adprep /forestprep from r2 x64 disk fails on 2000 server - not a valid win32 app Can anyone offer advice ...

Internet Explorer\GPO - can't access certain sites.

bclay - 7 Sep 2006 10:18 PM - 2 messages

Cheers, Have an OU containing serveral TS servers. Loopback\GPO with a locked down desktop for our users. When going to some websites the GPO policy is blocking access. Things I've tried: - Checking the allowed list of applications in the GPO, added flash.exe, ...

LDAPS connnectivity

Oscar P. - 7 Sep 2006 9:25 PM - 9 messages

Is there ANY way to configure SSL certificates on domain controllers to allow for ldaps connections to more than one host name? We can initiate an SSL connection to the FQDN hostname of the DC no problem, but also want to connect using a load-balanced Virtual host name to ...

Restoring Delete OU ..... Immediate Help Needed.

glennw - 7 Sep 2006 7:26 PM - 5 messages

Hello All, Does anyone know how to restore an OU that was accidently deleted? This only had groups in it but there were 50 groups with creative mappings and rights. I'm in an outage situation right now. I have BE10 but apparently ...

Restoring a Entreprise ROOT CA, help

Fernando Conde - 7 Sep 2006 6:21 PM - 2 messages

Hi, the server with the Entreprise Root CA was broken and i want to restore this CA in other new server. In all documents talks about t make this restore with the CA console, but the only way to see this console in installing the CA and i dont want do ...

HELP ALL YOU AD GURU's!!!!!!!!!

Greg - 7 Sep 2006 5:32 PM - 10 messages

I'm looking for where in Active Directory you can check to see if OWA has been enabled for a given user. Thanks in advance, Greg ...

Show properties page of an given active directory object

A. Hofmeister - 7 Sep 2006 4:37 PM - 2 messages

Hallo Newsgroup, this is my problem: I am using an VB-Script to search the active directory object for an given email address. As far the script is working fine. But after selecting the active directory object, I want to show its properties page. ...

OID for mailstation or mailstop user attribute?

ksb - 7 Sep 2006 4:09 PM - 2 messages

does a microsoft OID for mailstation or mailstop user class attribute exist or must I obtain my own? Anyone know? Thanks ...

2003 migration + disable replication

BlueIT - 7 Sep 2006 4:00 PM - 3 messages

Have a 2000 AD environment with two DC. Will be attemting to do "adprep" to allow 2003 DC in environment. I have read some articles that it might be a good idea to disable outbound replication during the ...

Setting lastlogoff attribute

prankmonkey - 7 Sep 2006 4:00 PM - 5 messages

Is it possible to set the lastlogoff attribute say via a logoff script or via policy? Or is it just a defunct attribute that is never (or can never) be used? ...

Forest trust and Local Group

Larry - 7 Sep 2006 3:58 PM - 2 messages

After setting up a forest leve trust at the Root Domain I cannot see the trusted forest objects when I try to add them to a local group on a member server of a child domain. I can see and add them to a domain local group on ...

Machine Account Secure Channel Password Reset

Dwayne Shrum - 7 Sep 2006 3:44 PM - 5 messages

I know how to use nltest and netdom (and disjoin/rejoin) to reset machine account secure channel passwords. However, none of these methods are working for me with this particular situation. I have a Windows 2003 std server as only DC. I have a Windows 2003 std ...

Accidental Domain Creation - PLease help with removal

Mark - 7 Sep 2006 2:25 PM - 15 messages

Hello All, My collegue accidntly create a new domain in our network with a new installation of server 2003 instead of adding it to the domain. He has wiped this server to start again - but due to this - we cannot dcpromo or such ...

Trust relationships and password change/caching ?

E-Double - 7 Sep 2006 1:49 PM - 7 messages

In a Win2003sp1 AD with a one-way trust setup to a seperate, second domain, whenever a user in the local domain changes their password they can access everything on the local domain - but the second domain with the trust ...

2003 AD OU administration delegation

JimyJohn - 7 Sep 2006 1:44 PM - 6 messages

Hi, We are looking for a way delegate administration at the 2003 OU level to key staff members. We are hoping to be able to set these 'admins' up to do just about eveything but change passwords, delete objects, impersonate other users. ...

Time change impact on 2003 AD/DNS environment

Mikel Pirie - 7 Sep 2006 1:31 PM - 9 messages

Hi Smart Folks., We have a large test lab environment running a custom built set of applications for dealing with huge transaction volumes supporting the financial sector. Our clients, financial institutions, want to test the custom application. No problem. However they also want to simulate ...

Problem with Trust relationship

Chris Peikert - 7 Sep 2006 12:51 PM - 12 messages

We are having a wierd problem in setting up a trust relationship between forrest. Here is an outline of the system: Forrest A --- Server 1A Forrest B --- Server 2A Server 2B ...

Long delay sync between sites

John - 7 Sep 2006 12:34 PM - 11 messages

Currently we have 2 DCs in the main site, 2 remote offices have its own DC, all with different subnet. Running 2003 AD in interm mode with NT4 Emulator switch on. We're having problem with 1 DC in which if a computer account is deleted ...

Adding proxyAddresses attribute without using Exchange

Nathan - 7 Sep 2006 11:45 AM - 6 messages

Hi, We have a need to add extra email addresses for our user accounts but we don't use Exchange in our workplace. Using Lotus Notes. I see that the proxyAddresses attribute holds these extra email addresses. Can I add, and if I can how do I enter data/edit, this attribute to our AD ...

Help with the logon!!

Orlando Ramos - 7 Sep 2006 11:33 AM - 7 messages

Hy there everyone!! I have a problem, i have a few computers on a small network with win 2000 server and winxp machines that cant logon to the domain, and the reason according to the winXP is "its not possible to login because its ...

how to convert a adc to dc withought roll transfer

satyamsoft7 - 7 Sep 2006 10:10 AM - 2 messages

hi i am satyam how to convert a adc to dc withought roll transfer ...

Group Policy USERENV errors

bobs - 7 Sep 2006 1:46 AM - 2 messages

I am trying to diagnose some userenv errors on both our workstations, and servers. I have noticed that from our Windows 2003 machines, and our Windows XP machines I can select start\run, and type in \\mydomain.com, and it ...

DCDIAG Error and Solution Needed

SENTHILKUMARAN B - 7 Sep 2006 1:27 AM - 6 messages

Hi, I configured the first domain controller of a domain (ad.test.com) which is a peer domain to the forest domain (adroot.test.com) which is configured already and working fine. After the implementation, while verifying the installation of a DC (ad.test.com), dcdiag shows the following errors. ...

web authentication methods... ADFS vs Radius

dchinn - 6 Sep 2006 10:47 PM - 2 messages

Please excuse this if this is just a totally off base question. We are kicking around a way of authenticating a web-application user with the users domain credentials. The user resides in one forest, and the application in another, unrelated forest. ...

querying AD

Mike - 6 Sep 2006 10:05 PM - 3 messages

i have a vb script to query AD (we have 2 domains, want it to query both domains), and to display the settings of the terminal services tab for all users within both domains. the script i have put together is below. ...

Questions about CSVDE file format and data....

Mugen - 6 Sep 2006 9:39 PM - 2 messages

Hi, We are planning to import users/groups from Mac open directory to Windows 2k3 Active Directory. I am thinking to have the Mac administrator to export users/groups to a CSV file. My question is what CSV file format like data/fields/value/subjectclass etc ...

Lost first domain controller -- EFS private key/certificate

itrcb4 - 6 Sep 2006 8:54 PM - 3 messages

Hi Our first domain controller in AD is lost. Though I have a plan to clean-up the metadata, seize its FSMO role (fortunately only Schema Master), and make sure we have GC and DNS on other domain controllers, I have been told that ...

how to find all smtp addresses in AD?

R Green - 6 Sep 2006 8:49 PM - 4 messages

Using Exch 2k3, Enterprise, AD 2k3 I've been asked to provide all SMTP addresses that are being used by a particular domain. As I'm not an expert in Exchange nor AD, I thought I'd ask someone here? ...

custom attribute ad2k a problem upgrading to ad 3K?

ksb - 6 Sep 2006 8:24 PM - 3 messages

We are going to add a custom attribute to the user class in our w2k ad single domain forest. Will that present a problem when upgrading to AD w2003 which we plan to do in the very near future? Thanks ...

Home Drive mapping problem

Sebastien C. - 6 Sep 2006 7:17 PM - 2 messages

I used a VBS script to create around 1000 users every year (AD on a W2K server with W2K workstations). I then use another VBS script to update the accounts by setting a Home Drive: Connect H: to \\servername\folder\%USERNAME% ...

Problem:logon script does not run

Sasi - 6 Sep 2006 6:55 PM - 4 messages

I've set a logon script path for my user as \\testserver\netlogon\1.cmd . the problem is that it does not run.my username is 1 and pass is 1. the script is OK.when the user logs on,if he/she browse to netlogon and ...

ADMT ACCESS DENIED!!!!!

ASP - 6 Sep 2006 6:39 PM - 3 messages

Hi, I am migrating from 1 domain to another, I can migrate the user from the soruce to the target perfectly, but when i try to migrate the computer account i get the followin error: 2006-09-06 20:22:58 Starting Account Replicator. ...

ADMT ERROR

ASP - 6 Sep 2006 6:37 PM - 2 messages

Hi, I am migrating from 1 domain to another, I can migrate the user from the soruce to the target perfectly, but when i try to migrate the computer account i get the followin error: 2006-09-06 20:22:58 Starting Account Replicator. ...

IP Conflicts

Smogthedog - 6 Sep 2006 6:32 PM - 5 messages

Is there any utility available that will identify the MAC address of the computer that causes an IP conflict in a w2k3 server ad tree? I work in a young persons environment and IT things get 'brought' in. All my computers ...

Restriciting Printers via GPO

John - 6 Sep 2006 5:42 PM - 4 messages

Hi Everyone, I need to restrict the users' acces to printer functions (setting job priorities, queue management, etc.) within our domain. I basically need to give them rights to add/delete printers from their workstations, and then print. ...

Client Xp login

steve - 6 Sep 2006 4:53 PM - 3 messages

Hi, When a client login to a 2003 domain, does the DNS 1st query the domain name and DC? what is the behaviour when a client login to a domain. im asking becos if u dun specify the DNS they will not able to login... ...

Offline Files _ Sync Settings on XP desktops

BookerW - 6 Sep 2006 4:06 PM - 4 messages

Is there anywhere in Group Policy where you can set the sync settings that a user sees when they go to the setup box for synchronization. I.e, I see choices where they can set how long on idle before the comptuer syncs, and ...

Users only authenticating to one DC and not other.

Danny Chieng - 6 Sep 2006 4:00 PM - 4 messages

Dear All, We have implemented two Domain Controllers AD1 & AD2 in new domain. The users login are with login scripts to map network drives. The normal user login and drive mappings works perfectly fine with the two AD running. The issue is that users are authenticating to AD2 most of the ...

security translation with ADMTv3

jefsower - 6 Sep 2006 3:29 PM - 4 messages

Im stumped. I've googled and googled but haven't found a solution to this. The issue itself is common enough but none of the common solutions seem to be for me. Heres the situation: - Computer Migration Wizard is run from ADMTv3. It's set to translate all ...

Groups not processing policies

Mike - 6 Sep 2006 2:59 PM - 7 messages

I created some new groups over the past few weeks: New Group 1 and New Group 2. These groups are located in OU1. User accounts located in OU1 are members of either New Group 1 or New Group 2, and Domain Users. That's it. There is ...

ADMT - Security Translations -- How does it work

Akn - 6 Sep 2006 2:54 PM - 4 messages

Hello All, I'm testing NT4 to Win2003 migration using ADMT v2.0. And i've run into something and would like to understand how it works. I'm specifically intersted in the security translations bit. I migrate a user account, then migrate his desktop (with all the ...

User tally

Dan DeCoursey - 6 Sep 2006 2:46 PM - 3 messages

Hi, Is there a way to "count up" a total of all users in AD ? Thanks ...

Deleting computers older than XX in AD

EysteinHS - 6 Sep 2006 2:34 PM - 2 messages

Hi. I came across a web page that told me how to identify ad-computer accounts, it suggseted the command: "dsquery computer -inactive 8 -limit 0". To remove the same computers it suggested: "dsquery computer -inactive 8 -limit 0 | dsrm". ...

Roaming profile works after reboot but not after log off

NakulSK - 6 Sep 2006 1:54 PM - 4 messages

I have a user that has been using a roaming profile for a long time. All of a sudden one day she logs on and a new default blank profile comes up. She logged off and back on 3 times all to a blank profile. Also, while in this ...

deploy sofware using GP

GPSW - 6 Sep 2006 1:14 PM - 8 messages

Hi, It seems to me that deploying software using group policy needs windows installer package (.msi file). Some software, for example, the adobe reader can only be downloaded as a ..exe file. How can I deploy it in this situation? ...

security groups in distribution lists

FilMar - 6 Sep 2006 12:44 PM - 6 messages

I have some security groups that I also use as distribution lists (mail-enabled) When I put user accounts in them, no problem. But when I put other security groups (not mail-enabled) in them, those members don't get any mails. Is this normal behaviour? ...

Trust Relationship with computer and Primary Domain

bc1231 - 6 Sep 2006 12:27 PM - 6 messages

Recently we setup a 2003 domain and migrated our PC's over to it from NT4.0 domain. We continually have Trust Relationship problems with the PC's. It recurrs on PC's also. We manually reset them and join them to the new ...

GPO Settings (IE Proxy) not applying

TC-UK - 6 Sep 2006 12:23 PM - 4 messages

Background: Windows Server 2003 AD Windows XP SP2, redirected folders User GPO for IE proxy settings defined (1 GPO policy, 1 GPO preference) Issue: Settings defined in the Internet Explorer Maintenance section do not get applied. The GPO is being applied so there are no security issues and the GPO ...

Permissions assigned to an AD object

Alistair Taylor - 6 Sep 2006 10:56 AM - 6 messages

Can anyone tell me if there is a tool yet, to enable an admin to view all of the resources with permissions assigned to a particular AD object (i.e. what I want is all of the server directories which have had permissions assigned ...

Where is DFS Information stored in AD?

Heiko - 6 Sep 2006 10:05 AM - 5 messages

Hi everyone, where is the configuration for a domain based DFS stored in AD? With ADSIEDIT I found DC=Domain,CN=System,CN=DFS-Confuguration, but there are only root confugurations. Are there any entries for links, root targets or link ...

new to iis

lion_73 - 6 Sep 2006 6:44 AM - 6 messages

in fact i'm new to networking ....i have a network and i want to create a domain and user account..i looked for active directry i didn't find ...what are the step to create a domain and create an accounts to my user and why my active directry is not found? by the way i'm running windows XP...and using an IIS5..thanx alot -- lion_73 ------------------------------------------------------------------------ lion_73's Profile: [link] View this thread: [link][link] ...

Uninstalll Active Directory

Sam - 6 Sep 2006 1:37 AM - 2 messages

When I first intalled the Active Directory on the domain controller, the local users were upgrade to the 'Users' group automatically. Now I need to uninstall the AD, will these users be deleted or be degraded to local users again? ...

Denying DHCP Admin rights on a Windows 2000/2003 member server

W C Hull - 6 Sep 2006 1:15 AM - 7 messages

We have always had our DHCP services running on Domain Controllers for Security purposes. Now we have an office that is really too small for a separate DC so we are going to be running Microsoft DHCP and Microsoft DNS ...

Automatic logoff & close open programs

melickas - 5 Sep 2006 10:45 PM - 2 messages

We are using Windows 2003 server with XP Pro workstations. We have more than (1) user per computer on some of our systems. The computers currently go into hibernation after so many minutes. When a user leaves a system, they remain logged in, the monitor turns off after 10 ...

2003 migration + MSMQ (message queue)

BlueIT - 5 Sep 2006 8:04 PM - 3 messages

Any info appreciated.... In the process of updating 2000 AD schema to allow for 2003 DC. Company has propriety application built to use MSMQ as a transport layer. The DC that carries all 5 FSMO roles is also the MSMQ ...

Problem with replication Adam fro AD, Help

Fernando Conde - 5 Sep 2006 7:48 PM - 6 messages

My platform is a W 2003 Ent server with Adam R2 installed. We use administrator account to make the replication between AD and ADAM Few day ago we have change de administrator domaisn password and then th replication from AD to ADAM dont works, ...

Repadmin show (Deleted DSA). Replmon show **deleted server #1

ECL - 5 Sep 2006 7:46 PM - 5 messages

Hi All, I have just had to rebuild 2 DC's due to h/w faults. We done a metadata cleanup and removed all reference of the DC's. Then rebuild / install using same name and done DCPROMO back into domain - ...

Upgrade 2000 server to 2003 server

ocdsupport - 5 Sep 2006 7:26 PM - 2 messages

We have an organisation with one Windows 2000 server SP4 with Exchange Server 2000 SP3 installed. This server also acts as DC. We recently tried to upgrade to Server 2003 R2 and Exchange 2003. The upgrade to Exchange 2003 went successfully but on trying to upgrade to ...

Advice Import Mac Open Directory users/groups to Win 2003 AD

Mugen - 5 Sep 2006 7:17 PM - 2 messages

Hi, Does anyone knows a way to import Mac Open Directory users/groups to Win 2003 AD? Does Windows 2003 has any tool to accomplish that? If not, any third party tools able to do that? In the Mac Open Directory, it has about ...

ADFS

Mark - 5 Sep 2006 6:56 PM - 14 messages

After working for four days to try to get through the ADFS step by step procedure, I have to wonder if anyone actually got this to work. The procedure does not explain why you are creating the applications, organizational claims, etc. When you get an error, you have no idea what to ...

Migrating NT4 to Windows 2003

Luiz - 5 Sep 2006 6:39 PM - 7 messages

Hi, One help please, I need some paper that talk about NT 4 migration to Windows 2003. Anyone can help me? Thanks. Luiz ...

2k3 r2 dcpromo with multiple domain controllers

Bruce - 5 Sep 2006 5:27 PM - 2 messages

I have 3dc in my domain and plan to add a 4th with a new 2k3 r2 server, which existing dc do i perform the adprep on with the r2 disk 2?? The existing dcs are all 2k3 sp1 ...

How to create an additional domain

Fred Flintstone - 5 Sep 2006 4:27 PM - 8 messages

Hi! I have a full AD Network hosted as (lets say) abc.com. Everything works. Now I need to literally split this into two independant domains; abc.com and xyz.com. Each will have their own exchange ...

Roaming Profiles

John Brennan - 5 Sep 2006 3:37 PM - 2 messages

We have a lab where the students logon to our network and they are set to have their roaming profiles hosted on a server. When they log on a copy of the profile is copied to the local machine which is fine but when they log off the profile remains behind. We have made a policy change in AD to remove the local copy at log off but the profiles are still appearing. What are we missing. ...

Select Domain Admin usage

Sean - 5 Sep 2006 3:24 PM - 9 messages

Hello, I work for a school district where we are starting a tech class. We'd like some of the students to have access to install programs on desktops and also to add print queues to the print server. Is there a way to limit the access they can have? ...

2 domains, DNS issue

Kidem - 5 Sep 2006 3:20 PM - 13 messages

Hello, We are adding a test domain to our network , the to domains have not trust we want them separate all together, but our clients all point to DNS servers on the domain that is existing, so if i want to join a pc to ...

demoting DC windows 2003 server

morgan - 5 Sep 2006 2:47 PM - 7 messages

I have 3 independent domains in 3 different locations, it was setup this way. each site has 4 to 10 users. I have a domain created at the corp office and my though was to demote the three remote sites and use them as member servers and one as a domain ...

Upgrade Functional level error Please Help

roaming profiles - deletion?

Second domain controller handling logons

best way to change username

Unable to create home folders

Remote Desktop Users group missing

Computer Accounts Not Replicating

Win2K3 Active Directory hotsite

Warning NTDS ISAM Event ID 507 and Event id 508

Moving a domain from forest organisation ?

Changing a domain from a forest ?

lsass.exe running high CPU on Domain Controllers

Setting Home folder and behaviour afterwards

Users unable to join PC's to domain

Some advice please

AD for Computer Lab

2003 SBS can't "trust" win3k or NT domains

Windows 2003 relation trust with 2 DC

login script failing?

consolidating domains to one existing domain

DCPromo or something else?

IIS 6.0

Internet Zones, GPO's and Terminal Services

After disk rebuild Log on screen missing domains

Install network printers

Slow login

how to imbricate (security) groups with active directory?

Create a basic front-end to control delegation of groups/user membership?

Very slow logon to domain

Pull attributes from ADAM with DirSync

set up first child DC in a remote site

Active Directory could not resolve DNS host name

AD installation

Rights to local folder based on group policy

password issue

restricting internet access by time and closing internet connectio

DNS Event ID 4515