Windows Server Active Directory

Joining 2 Domains Over The Internet?

Every1Tech - 16 Sep 2006 7:55 PM - 5 messages

I am maintaining 2 domains on a single building. 1st to 3rd Floor - Company1.local (DC) 4th to 6th Floor - Company2.local (DC) Both DC's are totally not related to each other. Since we are planning to maintain a single IT Depeartment for both DC's but still maintaining the ...

Trust Relatonship

Alexyy - 16 Sep 2006 5:55 PM - 10 messages

Hi, This with reagrd to TRUST REALTIONSHIP in windows 2003.,Iam having windows 2003 server ( standard edition) . Iam having multiple domin cntroller. which should athuenticate to main server through trustreation ship. Iam able to configure trust through REALM & EXTERNAL trust realtionship,but my ...

reset password

cameron - 16 Sep 2006 3:00 PM - 6 messages

hello all How can I give the same password in everyone in same OU ....???? Thank you ...

Site Links and connections

sitelink - 16 Sep 2006 4:20 AM - 9 messages

Hi Experts, suppose there are physical connections between siteA and siteB, and siteB and siteC. Each site has one DC named DCA, DCB, and DCC. Now, what is the correct configuration in site links and connections? Let's say, on DCA, create sitelink between siteA and siteB and create connections ...

Global catalog svr not found - dc's not repl via frs

Jim Foster LSG - 16 Sep 2006 1:02 AM - 4 messages

One domain, 2 dc's(W2003), dcdiag gives error that GC server could not be located and KDC could not be located. Also errors in FRS log on both dcs that they cannot comunicate to sync sysvol and netlogon shares. Users cannot ...

2 DC won't ever complete

stebe - 15 Sep 2006 11:35 PM - 4 messages

I needed a second DC so promoted a member server. It appears that it has never completed. If I do a net share from cmd, it doesn't show SYSVOL and the system log shows below. Milan is the first DC, is a DNS server and the ...

DFS Problems with secondary DC unavailable

junkmail - 15 Sep 2006 9:38 PM - 5 messages

Just got off a call with Microsoft support. We have a problem where DFS is extremely slow for someone to browse to a mapped drive using DFS (No replication) the first time they try to browse. Figure about 15-20 seconds to open the drive. Then it's fine. ...

External forest trusts and child domains

ctvader - 15 Sep 2006 8:26 PM - 4 messages

I have a question about forest trusts and child domains (we're having a discussion at work): I have a domain, domain.a, with a child domain, child.domain.a. I have another domain in another forest, domain.b. If domain.a and domain.b ...

ADFS Tokens Fail on Invalid Active Directory SIDs

Susieber - 15 Sep 2006 5:21 PM - 3 messages

I'm wondering if anyone has seen this. I have ADFS working on our VMs in one lab. Next step was to get it working in another lab using individual machines. (ADFS is configured using SelfSSL and Claimapp in a Federated Web ...

Folder redirection nuance...

cbullock - 15 Sep 2006 4:59 PM - 3 messages

Hi. I've got a weird issue with folder redirection, and hoping to get some input. I configured folder redirection on an ou in our domain. I created a new policy just for folder redirection settings. One user ...

Active Directory Mixed or Interim mode question

TomSmith - 15 Sep 2006 4:52 PM - 4 messages

Does mixed mode include NT standalone servers or just bdc's? ...

Mapping Home Folders Through Active Directory

Canes4Life - 15 Sep 2006 3:35 PM - 2 messages

I am struggling with an issue when mapping user's Home Folders through Active Directory. This problem does not happen to all users. And it's sporadic to those users that are affected. It maps users to the directory that contains ...

VBScript Solution for gathering SIDs from Active Directory

Nathan - 15 Sep 2006 3:34 PM - 5 messages

A while ago, I came across two vbscript functions written by an unknown author for extracting information from the objectSID attribute in Active Directory and converting it from the byte array into a Hex string, and then from the Hex string to the format we all know so well... SDDL ...

Active Directory Management\Migration Tools

Wayne - 15 Sep 2006 3:33 PM - 2 messages

Does anyone know who the big 3 or so player are in the Migration and Management areas for Active Directory ? I only know about Quest Software. Who are their competitors ? ...

Proxy Address GPO for Notebooks

Net Admin - 15 Sep 2006 3:22 PM - 5 messages

My environment: Server 2003 AD Domain and XP Pro workstations/laptops We have a GPO that sets a proxy address for our web filter. When laptop users take their laptops home the policy still applies and they cannot connect to any sites. Is there a way around this? ...

Transitive two-way trust question

TomSmith - 15 Sep 2006 3:10 PM - 2 messages

Active Directory automatically creates transitive, two-way trust relationships between all domains in a forest. Can these trusts be disabled? Thanks ...

IE 7 Update Blocker

Rob - 15 Sep 2006 3:09 PM - 2 messages

I am working on adding the GP Admin Template for the IE7 Automatic Update Blocker, but once I import that template into My GP and traverse the directory, there is nothing in the Windows Update Folder for that Policy....does anyone know why? ...

How to move user and computer objects from one Forest to another?

villagod - 15 Sep 2006 2:58 PM - 3 messages

We have been task to image our production systems, Sharepoint Portal and MS SQL Server, and restore it in our development environment which is in a different network and Forest. Is there a way to do this with a utility or ...

Win2K DC to Win2K3

DD - 15 Sep 2006 1:45 PM - 2 messages

Hi, Have a Win2K DC which is currently live environment, there r around 150 users with groups. need to create around 85 users & few groups out of the 150 users & groups in live server. which is the fastest way to do or copy. ...

migrating AD from 2k to 2003

wrecking_machine - 15 Sep 2006 11:24 AM - 3 messages

Just a quick one - and I might be being stupid here but (rather surprisingly!) I've not been able to find anything on the net about this question. We're planning on migrating from a Win2K domain controller to a Win2003 DC ...

AD user listing

Will Sellers - 15 Sep 2006 11:10 AM - 5 messages

Does anyone have a nice script that will print the AD user accounts? Or is there a utility to do this? I need this to create documentation for a school system. ...

DCPROMO problem

S - 15 Sep 2006 4:24 AM - 5 messages

Hi I have Win2K AD I have 2 DC 1 of them has all roles and the 2 are GC. I needed to demote one of them to be a member server I diselect the gc restarted the computer and then run DCPROMO, I got error that I cannot ...

Group policy not processing properly

AT - 15 Sep 2006 1:41 AM - 10 messages

Hi all, I have a very large Windows 2003 /XP network spread accross the country. I have several domain controllers placed around the country however most of the remote locations travel accross the links for authentication and other domain requests. ...

New Domain

Moin - 15 Sep 2006 1:39 AM - 5 messages

Hi all. I'm a newbie to Win 2k3 server. Setting my first one up in a test environment and decided to run dcpromo from the run command and setup a new domain controller. After setting it all up and rebooting i'm prompted to ...

Upgrading Win2000 AD to Win2003 AD

Matty - 14 Sep 2006 11:38 PM - 4 messages

We are in the process of upgrading some of our servers to Windows 2003. If we upgrade the domain to 2003 then will the Win2000 Domain Controllers have to be upgraded to 2003 or will they work as DCs without upgrading? ...

active directory users and computers console question

CJZ - 14 Sep 2006 11:18 PM - 5 messages

When I search for a computer in the Active Directory Users and Computers console I have the following issue. I can find the computer in the search but I'm not able to tell from the search results what OU the computer is in. ...

AD and File Server errors

Joshua Graham - 14 Sep 2006 11:05 PM - 2 messages

I put a new file server in place last week and all of a sudden I have users that get The network name is no longer available and this: Event Type: Warning Event Source: Mup Event Category: None Event ID: 50 ...

Network Printers in AD

Tom++; - 14 Sep 2006 11:05 PM - 8 messages

Am I missing something here? Microsoft has done a wonderful job with AD of making printers that are connected to computers searchable. What about a network printer that has a built-in print server and has an IP Address? Can ...

ADSI Scripting

Jeff - 14 Sep 2006 8:35 PM - 10 messages

I use ADSI to create users but we are now looking to make modifications to them as well. All the variables work and are in place but I am getting errors while trying to use ADS_PROPERTY_UPDATE. The fields I am looking to ...

Auditing changes in AD objects?

Jerry Mickman - 14 Sep 2006 7:43 PM - 3 messages

Hi All, I'm not new to directory services, but I'm from the Novell world, and I've only been working with AD in depth for a few months. I've been playing around a little bit with DSGET, but it doesn't quite look ...

need help creating an LDAP Query from a netbios name

thatsastounding - 14 Sep 2006 7:33 PM - 3 messages

Here is my issue. I have a netbios name: SERVER1. It's FQDN is DOMAIN1.COM. How do I find an LDAP query for a group within this domain by knowing only the NETBIOS name? I am using C#. Any help would be appreciated. ...

DNS Config Question...

*powday* - 14 Sep 2006 7:32 PM - 2 messages

We have two existing Bind Servers that are authoritative for example.com. We delegated a DNS zone for AD off of these servers called ad.example.com. AD is installed and we setup DNS on our DCs for no recursion and to use the BIND ...

Computer Accounts do not appear converted completely after NT 4 upgrade to 2000 AD

Stephen E. Weber - 14 Sep 2006 6:50 PM - 4 messages

I updated our NT4 network to 2000 Active Directory, all converted ok, but I notice most of the workstations did not appear to have updated the DNS server although all their settings were correct. I exmined the computer name, the computers which did not update the DNS server, still had the old ...

Active Directory Infrastruture Mapping Program

Qwerty9119 - 14 Sep 2006 6:14 PM - 4 messages

Hey all: Is there a program, microsoft or not, that would be able to map out the entire active directory structure of a domain? Something like a network mapper, except for AD. I'm looking for something that will pull & map domain, ...

Minimum Password Age

Jon Bakersfield - 14 Sep 2006 5:36 PM - 5 messages

In an effort to curb password recycling in our org I have found some troubling issues with the use of the minimum password age policy along with password history in a real environment. Current Policy - Enforce Pass History: 5 passwords, Max Pass Age: 60 days, *Min Pass Age: ...

Info on cross forest permissions?

Fred Flintstone - 14 Sep 2006 5:35 PM - 2 messages

Where can I get some intelligible information on cross forest permissions? I have 2 forests with a working 2 way trust, but machines in one forest are inaccessible to the other. Likely this is just permissions but I can't find anything that makes sense on MS's ...

Client Certificate Authentication with ADAM

Jeffrey Harris - 14 Sep 2006 4:52 PM - 4 messages

Is it possible to bind to ADAM using client-server certificate authentication, instead of a simple bind over SSL? Are there any special settings that need to be configured for ADAM to enable this, above and beyond the normal procedures to configure ADAM for LDAP over SSL? ...

Adding user account in w2k3 AD

jvdm - 14 Sep 2006 4:17 PM - 5 messages

Hi, When I add a new user using the 'Users and Computers' MMC on an XP machine with an account that has domain admin rights I can't chose any mailbox store in the 'Create mailbox' window. We have 4 stores but when I open the drop ...

LDAP query for the entire domain

Nuevo - 14 Sep 2006 4:15 PM - 7 messages

Can someone help me with creating an LDAP query string that would search the entire directory for a particular attribute on a user object. For example I want to find all uses that share the same pager number. Thanks. ...

which adprep utility to use?

Stephen E. Weber - 14 Sep 2006 4:14 PM - 3 messages

I have a windows 2000 domain and need to add a windows 2003 R2 server and promote to dc and eventually transfer the roles over to this computer, the 2003 server is a member of the domain, I understand that I have to run ...

ADMT v3 Documentation

jwd - 14 Sep 2006 4:06 PM - 2 messages

Hi, Does anyone know of any good documentation on ADMT v3? I have found a few articles but nothing that goes into great detail. Many Thanks Joe ...

Strange Profile/Policy issue

Schoolguy - 14 Sep 2006 4:02 PM - 3 messages

Hello all, I work in a school district. We have a Windows Server 2003 Active Directory domain. We have over a hundred Dell Latitude D600 laptops running Windows XP SP1a, and over a hundred Dell D620 laptops running Windows XP SP2 that the ...

ADSI Edit

AJ - 14 Sep 2006 2:56 PM - 7 messages

Does anyone know what happened to ADSI Edit in W2k3? ONce I loaded the Support tools fromt he W2k3 CD all I get is "Command Prompt, Release Notes and Support Tools Help". I know i'm missing something here? Thanks. ...

Delegating AD Rights (Enable/Disable Accounts)

Sam Gaw - 14 Sep 2006 2:10 PM - 4 messages

I'm in the middle of trying to work out how to delegate control over user accounts in AD to non-admin staff so that they will be able to enable & disable guest accounts within a specific OU. Originally I had looked at just building up a custom MMC and only delegating ...

Domain policy

TomSmith - 14 Sep 2006 2:05 PM - 3 messages

I have created a test environment with a bdc, pdc, NT workstation, xp professional, dns and exchange 5.5. I upgraded the pdc to 2003 AD. All the workstations can still log on and access mail even if I turn the ...

Child domain in Microsoft windows network

Micke - 14 Sep 2006 2:02 PM - 2 messages

Hello! I have one domain with two childs. If I look in microsoft windows network I can se the parent and one of the child. What have I missed, why can I only see one of them? #Windows 2003 server ...

WSUS

Anil - 14 Sep 2006 1:50 PM - 5 messages

does WSUS has to be installed in Domain Controller or it can install in any member of domain and deploy the WSUS ? ...

File Replication Error

Jose - 14 Sep 2006 1:46 PM - 2 messages

Help, I am getting the following error on one of the domain controllers. We currently have 2 partitions and the C drive is low. It has about 800MB. Event Type: Error Event Source: NtFrs ...

join domain without admin right

ckwong19802003@yahoo.com - 14 Sep 2006 1:27 PM - 6 messages

hi I get the following error access deny if i dont grant the user ad domain, i know they is a way where we grant a certain permission on the ou at the ou i have set the security as below ...

External CA / LDAPS

Geoff - 14 Sep 2006 1:12 PM - 6 messages

Can someone point me to a good document for configuring a External CA (ie: VeriSign, etc...) to provide LDAP over SSL (LDAPS) with AD (2003 native forest and domain) Thanks ! ...

ADAM performances.

François - 14 Sep 2006 12:45 PM - 7 messages

Sometime, we experience the DSAMAIN process using 100% cpu time for over 10 minutes. (Total CPU time is over 3 hours for a 24 hours period). The DIT size is around 750 Mb., The PC memory is 1 Gb. The CPU is a Xeon ...

Moving servers between sites

Eshprof - 14 Sep 2006 12:20 PM - 5 messages

Quick question... We have several sites in our AD environment. Recently we made some adjustments to the subnets assigned to them and I was wondering if a server would "sense" that and move into the site with it's subnet range or if it ...

Directory Service Error

Sridhar - 14 Sep 2006 6:49 AM - 3 messages

I am getting these errors every 30 minutes in Directory Service Event log. Source: NTDS SDPROP Event Id: 2008 Category: Internal Processing Type: Error Description: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security ...

2003 ad issues... exchange issues... intersting post....

Robert Bollinger - 14 Sep 2006 6:38 AM - 3 messages

Hello All - I was setting up a new server for a client with only 40 users and then of course all was going well.. ad was installed and everything: then i installed NAV COrporate 10.1d and after a restart i got this error... ...

clarification on Windows Update prompting the user? (GPO: No auto-restart for schedule Automatic Upd

sanskrit - 14 Sep 2006 1:00 AM - 2 messages

Do I understand this correctly? If the following three GPO settings are set: * enabled: "No auto-restart for schedule Automatic Updates installations" * enabled: "Reprompt for Restart with scheduled installations" set to 300 minutes * enabled: "Configure Automatic Updates" set to 4am daily ...

Is it possible to totally crash AD?

plsntn_rules - 13 Sep 2006 10:36 PM - 7 messages

I need to do a risk and threat analysis of AD for an audit we are doing. My question is is it possible to totally bring down an AD 2000 network? Is there any article, links etc that would explain how this could be done? ...

Child Domain

bvanderpool - 13 Sep 2006 8:05 PM - 7 messages

I am setting up a new location that will be connected to the main office over a WAN link, I created a child domain for the new location and am having trouble with permissions between domains. I'm curious if I delete the child ...

Cross Domain Replication

Abel L. - 13 Sep 2006 7:59 PM - 4 messages

I was wondering if any could help me out with site replicate between two domain, abc and xyz for example. Are there any procedure or documentation on line to help established these connection and global catalogs replications between the domain. ...

ADMT

Patti - 13 Sep 2006 7:10 PM - 2 messages

can someone help me, i am trying setup the AMDT tool this is the error that i am getting. could not verify auditing and tcpip client support and TCPip client support on domains will not be to migrate sids, access is denied ...

Manage AD via web

Fred Branham - 13 Sep 2006 6:32 PM - 5 messages

Is there a way to allow or is there a program to complete limited AD management via the web? (reset/change passwords/etc). Management over the web needs to be required. ...

Backup user account

menloizu - 13 Sep 2006 6:00 PM - 4 messages

I want to disable my administrator account but that is the account being used for backups right now. What permissions do I need to grant to a user account for it to be able to perform backups? I want to give ...

Repsto And MS-DS-NC-Repl-Outbound-Neighbors

Sri - 13 Sep 2006 5:25 PM - 2 messages

Greetings, I have a question related to Repsto on a NC in AD. Our's is a Single forest AD 2k3 Env with around 15 Dc's spanned across multiple sites, Replication health across the forest is healthy (meaning changes done on any ...

Advanced ACL Editor

Will Sellers - 13 Sep 2006 4:15 PM - 4 messages

Is the advanced ACL editor part of windows server 2003, If not where can I get it? ...

Cannot see group members listed (hidden I think)

gselser - 13 Sep 2006 3:01 PM - 2 messages

Hi, I have a standard windows 2003 active directory. I went to open a group today and found that all the members in are blank. It is like there is no one part of this, but when I go to the individuals who are part of ...

How Can I to add a attribute in Active Directory

Diego Ruiz - 13 Sep 2006 3:00 PM - 3 messages

Hi, who can help me? I need to know how to add a attribute in Active Directory Example: User Birthday (something like that) Attributes that do not in Active Directory by Default Thanks so much ...

DCDIag error from Child Domain ..

HbooGz - 13 Sep 2006 2:47 PM - 3 messages

Hey all - I've completed the complete upgrade to Windows 2003 R2 on all 4 of my domain controllers. =) I have two in the forest root domain. And i have one in a child domain. And another in a DR site. ...

Setting Password via LDAP/LDIF

Geoff - 13 Sep 2006 2:40 PM - 6 messages

Can someone help me understand how to set/update a password on a user object from LDAP/LDIF? Caveat is that it has to be platform independent, ie; able to do it from the cmdline on a Unix server, via ldapmodify.... ...

Upgrade child domain to 2003 domain

eric - 13 Sep 2006 2:01 PM - 3 messages

Hi all, We have a root domain with couple child domains in our environment. It run on 2000 domain. Recently we are think of upgrade on of the server hardware at a child domain. We are plan to upgrade the child domain as 2003 domain. There is a ...

Group policy apply to single user

Andre Santos - 13 Sep 2006 1:46 PM - 4 messages

Hi there, I want to block some aplications from running, and maybe also preventing the user to install apps. But I have a OU with each department, and I didnt want to move a single user to a new OU so I can apply the GP. ...

Moving CA to another server

Kresimir - 13 Sep 2006 1:10 PM - 4 messages

Hello, I have a Enterprise Root CA on Windows 2000 based Domain Controller. It is not the only DC in the domain. I need to move CA to a dedicated Windows 2003 based server. I have read articles KB298138 and 555012, as well as KB241027. ...

Script help

Gadget Geek - 13 Sep 2006 12:28 PM - 4 messages

I am a relative newbie to SBS 2003 Server and I am taking over for soneone who set it up. They created loggin batch file that looks like this: \\SERVER\Clients\Setup\setup.exe /s SERVER I am not sure what the setup.exe file does or how that file is controlled. ...

To get the users in a group of a Windows sharepoint

nirupama - 13 Sep 2006 11:56 AM - 2 messages

Hello, Can i know how to get Users in a GRoup of a site. As i need this very urgently. Please Reply ASAP. Thank You, ...

giving a user on the domain a new pc

lyndamccrum - 13 Sep 2006 11:54 AM - 2 messages

Hi, I have a user on the domain with a pc, now I have to setup a laptop for them, when I addded the laptop to the network and logged in as this user, everything was fine, until I logged off. ...

AD users and computers MMC to run from Windows XP

Andrew Austwick - 13 Sep 2006 11:24 AM - 2 messages

Hi I have delegated control of an OU, and want to create an MMC for the delegated user to be able to manage the OU from his Windows XP computer. I created an MMC on the domain controller that just showed the OU the user ...

Single domain two IP subnets

Chetan - 13 Sep 2006 10:34 AM - 4 messages

Hi All, I have a single Domain DC and DNS is on same server Server name = DC.domain.com = 192.168.1.5 The users are divided in to four IP subnets: Subnet A - 192.168.1.1-62 ...

JNDI and trusted domains

Michael Yap - 13 Sep 2006 9:15 AM - 5 messages

I'm in a middle of a project that requires that I retrieve AD Users from 2 different ADs. Now these 2 different ADs belong to 2 domains with domain trust established. Binding to single ADs and retrieving those information isn't too much of an issue. The trouble however is ...

Replications permissions account for ADAM replica set??

Fernando Conde - 13 Sep 2006 7:40 AM - 2 messages

hi, I am trying to install a replica set of a ADAM instante in my DC, when the wizard shows the window to select an account with administrative credentials for the configuration set i select an accout that is member of the Domain ...

Windows 2000 Domain Controller does not take over

RDK - 13 Sep 2006 6:14 AM - 3 messages

.....We are running a small business enviroment with a couple web servers, Exchange 2000, a file server and two stand alone "active directory"/domain controllers. All are Windows 2000 Server and fully patched. Everything seems to be working, except that if the first "active directory" ...

fsmo roles and nltest inconsistency

Pierre - 13 Sep 2006 4:44 AM - 5 messages

Hello, After a win2000sp3 to win2003 migration, here is the situation I have. win 2003 have been joined to existing win 2000. domain. forest and domain prep have been run on server A (server 2000). dcpromo has been run and fsmo ...

Clear test Domain from Entire Network, Microsoft Windows Network h

Mr555 - 13 Sep 2006 12:57 AM - 4 messages

Hello everyone. I installed a test domain and promoted to be a AD using a differnt IP address to our internal network IP address. This test domain was installed on my PC using Virtual PC software. everytime I nevigate to My network Place > ...

Unable to access \\domain\SYSVOL but able to access \\server\SYSVO

Jared Witt - 12 Sep 2006 11:31 PM - 2 messages

I have a group policy/sysvol problem that I would really appreciate help on. \\domain and \\domain.local both access one of the DCs registered in DNS. All shares, other than SYSVOL and NETLOGON are available. We use domain ...

How to include all OU's in LDAP?

Cwhitmore - 12 Sep 2006 8:32 PM - 3 messages

I'm using a product that requires LDAP settings for Windows Authentication. For the name base I'm using "OU=Test,DC=domain,DC=org;" as an example for each OU, but we've maxed out the 255 character limit with the number of OU's ...

Folder Redirection Errors

Zachary Dundore - 12 Sep 2006 7:11 PM - 6 messages

I am attempting to set up folder redirection for all of my users. I am running a 2 dc setup using Windows Server 2003 and Windows XP Pro clients. As of right now i am testing folder redirection on a very small OU just to ...

How to give someone permission to add PC to Domain?

Clayton Sutton - 12 Sep 2006 7:06 PM - 4 messages

Hey everyone, We are running a Windows 2003 domain. I have a user that needs premission to rename a group of PCs on our network. I wanted to set their "User Rights" so they could add or remove a workstation from the domain but I ...

Windows Server 2003 Enterprise or Standard?!

cbtg2006 - 12 Sep 2006 6:23 PM - 3 messages

Hi Guys, I'm planning to deploy a new AD Forest; 1 root domain and 4 sub-domains. What I want to check is that Server 2003 Std. is suitable as the OS for the 'Forest Root' domain controllers, and that it is also suitable as ...

editing user attribute with script

Joe Brown - 12 Sep 2006 6:20 PM - 3 messages

Iâ€™d like to write a script to do the following: 1. Prompt for the user object by userID preferably. 2. Prompt for input to edit the extensionAttribute1 field in AD(this is our plugin for MIIS to write from ...

RootDSE Missing

shermabt - 12 Sep 2006 6:18 PM - 8 messages

I'm trying to run some AD operations in VB .Net using RootDSE and they fail. Also, any queries in IE using LDAP://RootDSE also retrieve no information. When I run ADSIEdit on my domain controllers, no RootDSE ...

Group Policy

RC - 12 Sep 2006 5:38 PM - 6 messages

I want to be able to block all instant messengers on the network (AOL, Yahoo, ICQ, MSN) etc. at one of the sites we are using isa2004. I know it is possible to use this to block these programs/services but is it ...

Share point suggestions

Will Sellers - 12 Sep 2006 5:31 PM - 5 messages

We have a server 2003 school environment, where teachers have 1 or more classes and students can belong to 1 or more of those classes. I need some guidance on how to set up a share where students can access ...

Data Security

AJ - 12 Sep 2006 4:39 PM - 3 messages

Is there a way through AD (or other 3rd party) to prevent or deactivate USB ports on client computers. I basically want to prevent users from copying file from the network on to mobile phones, iPods, flash drives or external hard drives. ...

User account name same as computer account name

TomSmith - 12 Sep 2006 3:22 PM - 2 messages

I am under the impression that it might be a good idea to create OU's for each deptartment within an organization. Is best practice to then put the users and computers in the departmental OU of the department they belong to? ...

Group Policy Print Operators

Kev - 12 Sep 2006 2:48 PM - 4 messages

I have an OU with only laptops in it. I need to be able to allow our laptop users to be able to add Printers when they are at home or out in the field. If I add domain users to the restricted groups print operators, will this ...

Domains Connected by a VPN

bvanderpool - 12 Sep 2006 2:05 PM - 2 messages

I have two sites that are going to be connected by a VPN with a cable connection on one side and dual T1's on the other. Users in each location will need to access files in the other location. I wanted to see if anyone ...

User with OWA access only

jwilmer - 12 Sep 2006 1:22 PM - 2 messages

We have the need to give a user a logon account and an exchange mailbox but we only want the user to gain access to this mailbox via OWA. We want to lock it down so that the user can't login to any workstation at any of our ...

User login by common name

Jaime Rios - 12 Sep 2006 12:55 PM - 5 messages

Hi, Is there a way for users to be able to authenticate network resources not only by account name but also by common name? We have a network that recently transitioned from OpenDirectory to ActiveDirectory. One of the biggest complaints we are getting is that users can no longer use their name to sign ...

AD Tools and Security Groups

Ferg - 12 Sep 2006 9:57 AM - 3 messages

Hello, I want to clean up AD and basically remove all security groups that are not in use. Is there any way to find out what groups are in use and what groups are not in use? Any help would be appreciated. ...

Users are unable to join workstations to AD (Quota Exceeded)

puliyadim - 12 Sep 2006 9:28 AM - 2 messages

Hi, We performed an in-place upgrade from Win NT4.0 to AD (WIN2K3 R2). All our support staffs those who were able to join workstations to NT domain are not able to perform the same after AD upgrade. I have checked the following. ...

How to access resource of a different domain

younger - 12 Sep 2006 9:03 AM - 3 messages

Hi, I run a windows 2003 server R2 running as AD controller, file server and printer server. I have two problems with the access permission. 1. Frequently I have visitors from other companies. In many cases, their laptop is a member of their own domain and they login as a domain user of ...

Printer Creation

Derrick Denley - 12 Sep 2006 8:56 AM - 3 messages

I have a problem with printer creation on 2003 AD with Windows XP SP2 clients. We were previously using the runndll32, printUI command to map to printers on a printer server at the computer level of a startup script, and now with ...

NTDS huge file

apoernama - 12 Sep 2006 8:14 AM - 5 messages

I have Windows 2003 Additional Domain Controller of corporate domain which is child domain of worldwide domain. I found that NTDS file is very huge around 4 GB. Is it normal?? How can I get NTDS file in good shape and smaller file, because my C drive ...

Install Certificate

Retrieve DNS

Deny Domain Admins the right to create users

Add new domain controller to domain

Permissions on a file server- how to reconcile sharing and securit

Logging OU movement

Group policy and document redirection

UPN Suffix & Bad Password Logons

Quick Launch

AD Design

AD Schema extension and ACLing

Secondary DNS server replacement

ADFS Not Compatible with FIPS?

Cannot validate trust - 2 forests

RDN of domain name must be of type domain component??!!

Changing a users last name

GPO rights to adminpak.msi

WAN Latency affect on logon traffic

New Password Policy

Additional domain controller problem

Windows 2003 R2 - CD1 & CD2 Clarification Needed

Windows 2003

Is Web Edition joinable in AD?

Active Directory

time synchronization

About ADAM Problem...

Upgrade or rebuild

Errors in Event Log after changing Windows 2003 Server Administrator password

How modify data on ADAM Instance???

Event Log App Warning Scecli

Add Windows 2003 server to Windows 2000 mixed mode server

Replication error - DNS lookup

Collect Inventoy in W2K3 AD