Windows Server Active Directory

Restore Active Directory w/ Additional DC

Bob - 23 Sep 2006 11:17 PM - 6 messages

Hi, I have two DC's both Windows 2003 R2 Standard. I'm trying to restore AD on DC1 and am doing this by restoring the entire system state. After the restore, I find that DC2 is putting AD back to the problem state, ...

Server Won't Log-Off Administrator

KWME - 23 Sep 2006 11:14 PM - 3 messages

Strangest thing! My Terminal Server won't allow me to log-off when I log-on as administrator. It also prevents me from using the shut-down button and prevents me from shutting down from the command line. What is going on? ...

Roming profiles - moving buildings

Andrew Hodgson - 23 Sep 2006 9:15 PM - 3 messages

Hi, I have some OUs in AD containing users. Some of these users (in the OUs) will be moving buildings, and I wish to have the profiles re-directed to the other building's file server, instead of the main ...

Remove Site and the DC within - Move DC to main site and demote

Jenifern - 23 Sep 2006 3:18 PM - 3 messages

I need to remove a DC from a small Site. I have been reading about demotion and moving a DC from 1 Site to another but I have some problem with determining the best way to do this and in what order these things should be ...

disk space and 2003 server upgrade

SibiSisti - 23 Sep 2006 2:04 AM - 3 messages

Hi, I am going to update my schema for windows 2003 r2 and one of my domain controllers only has 470MB on its partition with the OS even after I have moved sysvol (and DFS staging) to another partition. I can't really ...

Local Accounts to Domain Account-Profiles

Brent - 23 Sep 2006 1:21 AM - 4 messages

We are moving from using local accounts on Windows 2000/XP to an AD environment. What is the best way to move the users local profile to the domain account? We have tried USMT with some success. It does not seem to ...

Can someone detail how to return available attributes from an LDAP

sasquatch - 22 Sep 2006 10:37 PM - 4 messages

I need to find the LDAP key (attribute, property) that will return the cost center name value for employees. Thanks for any help!! ...

Creating an account limited to adding computers to domain.

Jeremy Revitch - 22 Sep 2006 7:54 PM - 10 messages

We are using Sysprep to deploy new computers and want to include credentials so that they are also joined to the domain as part of the Mini-setup. In order to so we want to create an account that can only create computers in ...

Tell which server you are authenticating to???

Mark - 22 Sep 2006 6:53 PM - 3 messages

Hi, We have a domain that includes 3 domain controllers. 2 Win2003, and 1 Win2000. I was wondering if there is a way, when you are on a client PC, to tell which server you are authenticating to? ...

nt4emulator

atsdan - 22 Sep 2006 5:27 PM - 2 messages

I have spent the last one year on a migration project from windows NT4 to 2003. Due to budgetary reasons and time constraints i couldn't upgrade or replace all the NT4 domain controllers at once. Therefore i used the ...

Account security permissions removed?????

Contractorrob - 22 Sep 2006 3:37 PM - 2 messages

Due to the recent patches that changed the way blackberry accounts were to be set up, in ADUC w/ advanced settings, we have been adding the blackberry service account in the user's security tab and then giving it "send as" ...

cant connect to ADAM instance with System.DirectoryServices

scottw512 - 22 Sep 2006 2:58 PM - 3 messages

Is this supported with integrated windows authentication? The object constructs ok, but when I try to access a property, I get a stack trace in get_AdsObject. The code looks like this... msde = new DirectoryEntry("ldap://bwdwpdepl01:389/CN=Pwiz,DC=Brentwood,DC=VCN"); ...

Query active directory

Bruce Charnitsky - 22 Sep 2006 2:34 PM - 8 messages

I want to query active directory and get a report of all my users and their e-mail adresses and if they have multiple adresses i want thoes also. How can i do this. ...

dcdiag

Theojkat - 22 Sep 2006 2:31 PM - 4 messages

About 2 weeks ago I upgrade a win 2003 server to new hardware. This system "NT1" was a DC. Set the new server up with same name and ip address. All look good until I found an error in the app viewer on exchange. after a ...

Change Global group to Universal

Don - 22 Sep 2006 2:24 PM - 5 messages

I am looking for a way to change all groups in a domain to Universal. I know there is a restriction with group nesting, like if you want to change a Global group to Universal and that Global group is nested with another Global ...

Delegation of Control only to add a contact with an e-mail alias

Bruce Charnitsky - 22 Sep 2006 1:31 PM - 4 messages

I am trying to Delegae control to an OU to allow a user to ONLY add contacts with an exchange alias that redirects to external adresses. My problem is that i have it so the person can create the contact he can not create the ...

Moving forest root server

JDT - 22 Sep 2006 12:05 PM - 4 messages

Hi All, Due to the consolidation of our data center, we need to migrate our forest root server to another physical location. This move implies that we have to move the server physically (downtime +/- 6hours) and we need to change the IP ...

Domain Controller Issue after SYstem Board Replacement

Bear - 22 Sep 2006 11:36 AM - 3 messages

Greetings, After installing a new system board in one of my domain controllers, I can no longer access it from any of my other domain controllers, as I get a permission denied message saying, "Login Failure: The target account name is ...

IP Intra-Site Transport Costings

IainJH - 22 Sep 2006 10:43 AM - 4 messages

Hi, For the setup of the Intra-Site Transport Costing, is there supposed to be a set formula or algorithm that I should follow, and if there is, how does it work? Or is it more of an arbitrary number system where lowest number will always ...

Problem with Custom MMC

Darren King - 22 Sep 2006 10:32 AM - 2 messages

Dear All, I am having an issue with a custom MMC I have created to allow a head of department to unlock users within his department without calling the helpdesk. Initially there was a problem due to a Software Restriction ...

Migrating Built-in groups to a different name, possible ?

Patrik_L - 22 Sep 2006 8:24 AM - 4 messages

Hi This is what I want to achieve. From Domain A, I want to migrate the SIDHistory of the Domain Admins group to a new group in Domain B, i.e not to Domain B's Domain Admins group. I am trying to do it via the sidhist.vbs script but I get an error saying: ...

2003 domain - Group Policy problem

Frank Jacobs - 22 Sep 2006 7:29 AM - 3 messages

Recently we replaced a Windows 2000 SBS server in the domain. We changed domain name, installed new Windows 2003 SP1 server with exchange 2003 SP2. Then we added member servers (static ip) and clients (dhcp) to the new 2003-domain. ...

logon to parent domain slow

BBbb - 22 Sep 2006 7:28 AM - 3 messages

Hi, Users in a child domain trying to logon to the terminal server in parent domain using child domain credential but found logon process very slow. is this common/normal or is there any solution to improve it. Thanks in advance, ...

Domain Rename - best method

Andy Wolsten - 22 Sep 2006 4:42 AM - 3 messages

Hi, I am investigating a domain rename for our fairly small bus fast growing organisation from something.stupid to realname.com We currently have a win 2003 DC server running Exchange 2003 (as it is an old SBS 2003 transitioned ...

Delegation issue

tornado579 - 22 Sep 2006 2:48 AM - 5 messages

Hi group, I am looking to delegate few of the activities like resetting passwords and unlocking the accounts etc to the helpdek folks. I guess this can be done with delegation wizard. But at the same time i want to ensure that they dont have the rights to ...

HELP!!! Demoted DC and Log-On Problems

KWME - 22 Sep 2006 1:25 AM - 3 messages

This summer I had some problems with my domain controller and was quite concerned that it would die on me. I'm running a terminal server on the same network and it is a fairly new machine with some excess capacity, so I ...

Grant an extended right - Strange issue

sridhar.mocherla - 22 Sep 2006 12:22 AM - 4 messages

Hi I am faced with a strange issue...any help would be greatly appreciated. Issue faced is described as below: Task is to grant a particular user account (ABCDomain\XYZ Account) with Allowed to authenticate(A2A) rights on my machine (am Administrator on ...

Adding workstations to domain

Bad Beagle - 21 Sep 2006 10:23 PM - 5 messages

Can someone please tell me the specific rights that are required to add computer accounts to a domain? I would like to enable my dl-helpdesk group to add computer accounts to the domain but no other users on the network. ...

General group Policy questions re: designing a managed environment

BookerW - 21 Sep 2006 9:36 PM - 2 messages

I was reading this Microsoft book called: Microsoft Windows Server 2003 - Designing a managed Environment I had a few questions as I flip through the book. On page 41 it states that you can set Group Policy to prevent users from ...

adprep for 2003 server

SibiSisti - 21 Sep 2006 9:33 PM - 7 messages

Hi, I have a Windows 2000 netowrk. I want to install my first windows 2003 server then promote it to a DC. I have the CD's for 2003 server R2 and the original version as well. To upgrade my network to 2003 can I just use the ...

Two fsmo servers

RP in the Midwest - 21 Sep 2006 9:31 PM - 5 messages

Our primary domain controller (Windows 2003 std) failed due to hardware issues and while it was down we attempted to promote the backup DC (W2K std) to the fsmo. This didn't work correctly and while trying to make it work our ...

Time Server

Alejandro - 21 Sep 2006 8:41 PM - 2 messages

I am looking for information about what software can I use on my server to syncronize all my servers and my network computers. ThanX ...

Impact of renaming OU's???

Krusty - 21 Sep 2006 8:06 PM - 2 messages

We have a domain which is curently being populated with objects during a migration program. As the domain was not setup by myself some of the naming is not really the ideal for our organisation. The main issue if the OU's ...

ldap query

Marc - 21 Sep 2006 8:00 PM - 2 messages

Is there a way to create a LDAP query in Users and computers to show me the mailbox size? ...

Active Directory Application Mode

scottw512 - 21 Sep 2006 7:39 PM - 2 messages

I'm a developer and I need to do some research with Active Directory Application Mode to see if it fits our needs. I don't see any downloads for it in my MSDN subscription area. Where can I get an installation so I can ...

How many domain controllers to have?

Daniel - 21 Sep 2006 5:21 PM - 2 messages

I understand this all depends on how our network is setup but is there a guidelines or best practices which I can refer to? It will be also nice if someone can direct me to Micrsoft's case studies. ...

Deny Server Access but Allow Printer and Internet

Adam - 21 Sep 2006 4:56 PM - 3 messages

I am looking for the best method to create basically a guest account on the domain (2003). I would like to have a group or OU configured to deny access to all my file sever / Shares ect and only allow Interent access and network printing. ...

Advice on wiping and reinstalling on a PDC

VM-IT - 21 Sep 2006 4:11 PM - 2 messages

I've inherited a Win2K network. Until recently, there was but a single domain controller. It appears to have served numerous functions across the years. (File server. Print server. Exchange. Remote server. DHCP. DNS. ...

DFS

JX - 21 Sep 2006 4:09 PM - 4 messages

Hi All, I have serveral w2k dfs servers and replicas. my question is how can i migrate the dfs structure over to w2k3 infrastructure. thanks jason ...

msExchOmaAdminWirelessEnable values

sneaky - 21 Sep 2006 3:18 PM - 4 messages

Hello, is there an description for the possible values for the msExchOmaAdminWirelessEnable attribute? Thanks ...

Re: Group Policies / Domain Policies

Michael A Cooper - 21 Sep 2006 3:05 PM - 2 messages

Hey Everyone, I know this is probably a stupid question but I am having a problem here with some issues that the last Administrator left behind. I am not as good with Windows as I would like to be, but, here is my Question: ...

controlling what computers a user can log on to

djc - 21 Sep 2006 1:05 PM - 6 messages

in a users properties in ADUC, there is the 'log on to' button where you can control what computer a user can log on to: what types of log on does this apply to? all? just local? all interactive? does it also include remote connections via SMB resource shares? ...

How to make AD in 2 seperate forrest communicate

Chris Peikert - 21 Sep 2006 1:03 PM - 5 messages

I have 2 forrest. We have the DNS communicating between the 2 forrest and are trying to create the two way trust between them for administration purposes. B will trust A but we can not get A to trust B. When we click on ...

GPO Install of Flashplayer!?

Andrew - 21 Sep 2006 12:49 PM - 2 messages

Ok I've downloaded both the flashplayer active x, msi install and the flashplayer plugin msi; both version 9. I setup a GPO policy to install the Flashplayer active x msi; on my test machine I did a gpupdate and reboot. When the system boots it states it's ...

Deleted User

FredT - 21 Sep 2006 12:39 PM - 5 messages

I have several administrators who can create and delete users in my 2003 native system. Late yesterday one of them deleted a upper level managers account. I need to find out who deleted the account. Thanks. Fred ...

Delegating control

aj - 21 Sep 2006 11:41 AM - 5 messages

Please help :) I want to set delegation for one user who must enter email adresses in active directory account, but only that. Email adressess are in "General" tab of account properties and even I set delegation with "Delegate Control wizard", then set that this user can Read ...

Delegating permissions

D Clark - 21 Sep 2006 11:39 AM - 4 messages

Hi there. Our main AD guy left us a few months ago and the rest of us left only have patchy knowledge of AD (Enough to get us by!) We have some IT Support guys who need to be able to join PC's to our single ...

multiple domains

dennis - 21 Sep 2006 11:10 AM - 2 messages

I am using VirtualPC to test the parent child domain relationship using Windows 2003. Then, I raise the domain functional level of the parent and child to 2003. But when a try to raise the forest functional level, it reports the child domain controller is not at the 2003 functional ...

Domain Naming strategy

Manuel - 21 Sep 2006 9:37 AM - 2 messages

Hello all, I will be building a companywide active directory. There are about 80 companies to be added to the domain and Im trying to make the right decision about the naming structure. First I thought about having domain.net / companya.domain.net, ...

Fail to add DC to domain

David Soderlund - 21 Sep 2006 8:17 AM - 2 messages

The Source server is a W2K3 server with a AD domain, raised to the highest level. The server I want to add is a W2K3 server SR2. The error that I get over and over is: The version of the Active Directory Schema of the Source forest is not ...

Removing a domain backup server from AD

Atlas - 21 Sep 2006 7:44 AM - 2 messages

The Domain backup server is dead and it will not be restored. Wondering if there's some garbage left in the primary domain controller's AD, if it should be deleted and how..... Thanks ...

DHCP to domain members only

Rich L - 21 Sep 2006 3:10 AM - 4 messages

Is there a way - or group policy - or anything I can do to lock down the DHCP server so that it only gives IP's out to those computers whose computer accounts are registered in the Active Direcory? ...

DHCP lease to Domain members only

Rich L - 21 Sep 2006 3:04 AM - 2 messages

Is there a way - or group policy - or anything I can do to lock down the DHCP server so that it only gives IP's out to those computers whose computer accounts are registered in the Active Direcory? ...

Single user issue; best troubleshooting

Dennis the Nerf Herder - 21 Sep 2006 2:58 AM - 6 messages

Can anyone recommend the best steps for isolating the trouble when a single user account repeatedly prompts for authentication? I have devoted considerable time and effort to isolating the cause of a case like this, but have not YET removed the user from Active Directory ...

Export AD Data

Haggis - 21 Sep 2006 2:58 AM - 4 messages

I need to be able to export usernames to a a csv/txt file from AD on specific users that have information in a certain field. i.e: if a user has the fax field with a phone number in it, their username along with others will be ...

Setting multiple home folders at once

Net Admin - 21 Sep 2006 1:00 AM - 3 messages

On my DC some newbie accidentally changed permissions to the home folders for all of my users from the parent folder and checked "Replace permissions here on all child objects....." Now all user's home folders only have this newbie's name, domain admins, and ...

Domain Rename - NetBIOS name

Wade Bart - 20 Sep 2006 11:04 PM - 3 messages

When I rename a domain's NetBIOS name the workstations are able to login to the domain fine, but they're still seeing the old NetBIOS domain name. I'd like the workstations to automatically pick up the new name without having to ...

Is there any tool to enumerate all servers in a domain, including hidden servers?

Mike Matheny - 20 Sep 2006 10:04 PM - 9 messages

We have most of our servers hidden for security reasons. Is there any way to enumerate all servers, including hidden ones? ...

OldCMP - last logon timestamp and domain controllers

Seagull Ng - 20 Sep 2006 9:22 PM - 7 messages

I'm using oldcmp to get a report of inactive users (-llts -users). How can I be sure that the report based of llts is accurate if I have multiple domain controllers? I was told that when one logon to a domain, only ...

Admin permissions

WWII - 20 Sep 2006 8:45 PM - 3 messages

How can I set up a new folder on my PC so that someone in the Administrators group and Domain Admins group cannot access it? Thanks. W Weldin ...

Disabled Domain Computer Accounts

Tim Nichols - 20 Sep 2006 8:09 PM - 8 messages

We are currently trying to remove old computer accounts from our Active Directory domain. We used a third party utility to find all of the computer accounts on the domain that did not have their password changed in 90 days ...

Best Practice Question - how to replicate DC info in a lab

Mikepiliotis - 20 Sep 2006 7:39 PM - 4 messages

Hi all - I have a question regarding how to replicate my existing AD environment into a lab setting. We current have a production AD 2003 domain and we are wanting to recreate our existing lab (which has been somewhat run down) to match ...

GPO says one thing IE does different

Smogthedog - 20 Sep 2006 7:05 PM - 3 messages

I have a network of 6 servers in one domain, about 1000 users on 250ish xp computers. The gpo says internet home page [link] but workstations say 'About:blank'. The gpo is enforced and linked to users ( ...

Restrict Software Installs

gatorcb - 20 Sep 2006 6:58 PM - 2 messages

We are in AD environment (2003) and our pc's are running Windows XP SP2. We also are using SMS 2003 SP2. Our users are local users of their boxes (not admins). We still have problems where users can download stuff off the web ...

Renaming Domain - workstations error

Wade Bart - 20 Sep 2006 6:46 PM - 2 messages

I've upgraded a Windows NT 4.0 domain to 2003 native mode. Did a domain name change, and now when I try to login on a workstation I get the following error "The trust relationship between this workstation and the primary domain ...

Burn to Death...

John Finger - 20 Sep 2006 5:47 PM - 7 messages

...

2003 AD and Grace Logins

Rick - 20 Sep 2006 5:36 PM - 3 messages

Is there a way to define grace logins in Windows 2003 AD. I am looking for a way to alert users that their password will be expiring in X number of days. Any help would be appreciated. ...

Need A refresher On Pushing Updates

dtesdall - 20 Sep 2006 5:08 PM - 5 messages

I have a windows 2000 server domain (all windows 2000 servers) i have a few 2003 servers none have been pormoted yet. I need to push some updates via active directory, i learn how to do this a few years back. ...

Windows Server 2003 Domain Controller and SP1 install

Nino_1 - 20 Sep 2006 5:01 PM - 2 messages

Hi, Does anyone have any experiences good/bad after installing SP1 on a Domain Controller? I've heard there is no real concern when installing on a DC that has no other purpose than acting as a DC, but I wanted to throw this question ...

Error jeterrversionstoreoutofmemory when compacting adamntds.dit

François - 20 Sep 2006 4:55 PM - 5 messages

I get this error at about 30% of compacting the adamfile. How can I get rid of this problem ? The system partition containing the adamntds.dit file has about 3.5 gb free .. The data partition containing the destination folder is over 100 Gb free. ...

Multiple NT domain to forest upgrade question

TomSmith - 20 Sep 2006 4:35 PM - 4 messages

We currently have 5 domains in 5 different geographic locations and we plan on becoming 5 separate forests + 1 exchange forest due to the fact that we don't want to end up with the transitive domain trusts. In all the domains we are running Exchange 5.5 and share the global ...

Object tab in User Account Properties

goundhog - 20 Sep 2006 3:14 PM - 3 messages

How do I get the object tab to display in the AD user account properties ? ...

Access denied on users home folders

Øystein Sund - 20 Sep 2006 2:53 PM - 2 messages

Hi! I have searched google for a solution to this problem, but haven't found anything that worked. We have one windows server 2003 domain controller and one Windows server 2003 member server that have Exchange installed and are being used as the ...

Trying to map drive with OU group policy

Ferbalex - 20 Sep 2006 2:02 PM - 5 messages

I created an OU called Market - created a new group in it called MKT and then added the Marketing Distribution group to that. Created a vbs file that maps the drive and which works if you run it on the local ...

Service running with an account from another domain

Joe_SMS - 20 Sep 2006 1:38 PM - 9 messages

whats the scoop with this ? possible ? We have one way trusts....we trust them. Theres a service that the developers think they need to use an account from one of the trusted domains as a service account..... ....when trying to configure it.... it reports no more endpoints from ...

AD user account

RC - 20 Sep 2006 12:51 PM - 7 messages

is there a way for me to see when, where(IP address), who deleted a user account in AD? ...

missing msExchMailboxGUID

Marco - 20 Sep 2006 12:06 PM - 2 messages

Hello Newsgroup, in the eventlog i have a entry from the source MSExchangeIS an the event id 9554. Unable to update Mailbox SD in the DS. Mailbox Guid: fdcbf7ce-9d05-4bac-aa37-9831c97729da. Error Code 0x8004010f i have read the ms Article ID : 322308 and Article ID : 555433 . ...

domain with different sites

dbansradj@googlemail.com - 20 Sep 2006 11:47 AM - 3 messages

How can is search in a domain with different sites which user is on which site. I want to search per site which user is a member. Is it possible to do that with a vbs script. ...

Problem with gpo.

Cyber-Guy - 20 Sep 2006 9:07 AM - 2 messages

Greetings, I've configured my firewall settings on a domain using gpo. But on another domain similar server was installed and configured at the same time as the other both without service packs. I cant find the "Windows Firewall" option in the gpo configuration. ...

New Site in Network

david - 20 Sep 2006 8:58 AM - 2 messages

Hello, We have a new organisation which has joined our group. For now they will operate independent from the group. However, I have to install and configure a new server (with new users, groups, security, etc...) in the remote site (which does not have continuous ...

Unable to disable SID Filter

Patrik_L - 20 Sep 2006 8:58 AM - 6 messages

Hello. I am about to migrate users from one 2003 AD to another 2003 AD using ADMT 3. I want to use SIDhistory and the migrated users have both the new SID and the old one. So far all is fine. ...

Domain Rename

Wade Bart - 20 Sep 2006 4:19 AM - 3 messages

If I rename a Windows 2003 Active Directory domain, do I need to rejoin all workstations to the new domain name? Or will the domain "SID" stay the same and the workstations will pick this up? ...

Proxy Setting GPO for Firefox

Net Admin - 19 Sep 2006 11:55 PM - 5 messages

My GPO that sets the user's proxy settings(autoconfiguration URL), in IE of course does not work on users that run Firefox. Has anyone come up with a solution to this? If it were up to me, all of my users would use IE but it's ...

AD Login

open24hrs - 19 Sep 2006 10:16 PM - 2 messages

We are using a web based application (plumtree software) hosted in the root domain that the users from our domain, (including our users phyically in the root domain), logon to with their own AD credentials. When the vpn site to site goes down between our sites though, none of ...

recommendation for OU structure

Joshua Bolton - 19 Sep 2006 7:28 PM - 2 messages

We have 8 wan connected sites with just thin clients running xpe connect to server 2003. Our main facility has pcs with some thin clients. We are using Citrix. We need a policy to restrict those using thin clients since we don't want ...

cannot map network share outside of domain

Dave Hojo - 19 Sep 2006 6:26 PM - 6 messages

I have a group of users that, when trying to connect to a network share from outside the domain, cannot connect with "map network drive" On computer in foreignDomain: Map Network Drive: \\myservername\share set username = MYDOMAIN\uname set pw: password ...

ADMT from one server to a new one

Phil Buzzette - 19 Sep 2006 5:36 PM - 3 messages

Our server is dying and we need to get our new server up and running. If our current server name is SERVER1 as a DC named DOMAIN1, will the new server have to be setup with the name SERVER1 as well and then configured to be the ...

How to join my XBOX to the Vista Active Directory domain

Alex - 19 Sep 2006 4:18 PM - 4 messages

Hi All, How to join my XBOX to the Vista Active Directory domain? Thank you in advance for your replies, Alex ...

Windows-UNIX Network

Coder - 19 Sep 2006 4:09 PM - 8 messages

Hi, 1. Is AD only part of Windows Server (i.e. no XP PRO add-on)? 2. I am leaning toward using Windows SFU with UNIX NFS as opposed to Samba for file sharing. 3. Are there any other CIFS solutions for UNIX besides Samba available? ...

adprep and forestprep for 2003 R2 HELP!!

JL Adamson - 19 Sep 2006 3:57 PM - 3 messages

I have an existing 2003 server domain and I am trying to add a brand new 2003 R2 server as a domain controller. However when I run dcpromo on the new machine it says I need to run adprep forestprep and domainprep. ...

turning off Firewall on XP clients

Gadget Geek - 19 Sep 2006 3:19 PM - 5 messages

I can not turnoff the windows firewall. I believe this is stopping me from installing Webroots Spysweeper Enterprise. The clients will not see the server except through network neighborhood. The option for turning off the firewall is greyed out. I have tried logging ...

VerifyEnterpriseReferences and DNS Fails with DCDIAG

Michael - 19 Sep 2006 2:59 PM - 4 messages

After running a comprehensive DCDIAG, I recieve the following two errors. I think it may be because I renamed the server at some point in the beginning of the installation from the default Dell name to one that our organization preferred. ...

DC/GC Lookup from workstion

Steve - 19 Sep 2006 2:48 PM - 3 messages

I need to be able to figure out which DC/GC a workstation is authencating to. What command-line or gui tool can help me do that. Thanks The set command only tell me the domain, not which actually DC/GC it logged ...

Event ID 4029

Dipti - 19 Sep 2006 2:38 PM - 2 messages

We are using double take software for file replication. Our file server OS is windows 2000 running on NASSVR. We are in windows 2003 domain. I am seeing the warning on NASSVR: Description: Registration of service instance with Active Directory ...

Am I running 2003 AD native or not

yazzar - 19 Sep 2006 1:13 PM - 3 messages

Hi, complete rookie here, the rest of our IT staff (two) are on well earned break, and I have been asked what version of AD are we running and is it native???. I know we have it on a Windows Server 2003, but I dont know if it ...

Sites and Services

Manuel - 19 Sep 2006 11:22 AM - 3 messages

Hello all, I am woking to implement AD directory for the company I work for. I want to have one DC and create sites to connect to the HQ. My question is: 1- Do you recommend that every company is set as a site and every site ...

Intelligent Active Directory

Tayfun Keresteci - 19 Sep 2006 9:36 AM - 9 messages

Hi, I'm trying to move active direcotory objects automatically based on some credentials. For example; There ise an Organization Unit which name is XYZ that contains computer objects that their names started with XYZ. My target is when a computer joins to the domain or it's computer changed, ...

Restricted Groups Poliocy Question

Brendon B - 19 Sep 2006 9:02 AM - 5 messages

Hi everyone We are looking at putting a domain global restricted groups policy. We don't want it remove the currently assigned local administrators on workstations. Our domain is too big to find out which machines have what administrators. Is there a way to make the policy only add the new groups and not effect the ...

limit number of concurrent logins per OU

Tony Bragagnolo - 19 Sep 2006 7:46 AM - 3 messages

hello. I'm trying to accomplish this...I'd like to set and check the maximum number of concurrent logins for users in a specified OU. say I've got an OU with 23 users but I must allow only 5 concurrent logged ...

machine logon

ZIDAC - 19 Sep 2006 7:41 AM - 2 messages

Hi, i have a 2003 domain whit XPpro clients and 98. is very easy to see the server that the client XP is logon (with the %logonserver%), but i dont know see in 98 Â¿How i know the server using by logon in 98 clients? ...

How dows Domain Rename imapact to Proction Servers?

no logon server avaliable to service logon request

Move computer to new GPO but same MSI's

Local Profile Maintenance

GC Advice..

Error - Failed to intialize object picker for the source domain.

Finding an objects size in AD?

Cannot process logon request, no logon servers

Error DCPromoing 2003 R2 Server adding to existing domain

Replication issues

Trust between 2 2003 forests

Using ADAM (Active Directory Application Mode) to athentecate at w

Block/Prevent Non Windows System on network

set Logon Script path to null

Group Policy error using RSOP

Multiple Domains in a single subnet

Computers group is empty - does not display domain computers

AD - permissions assigned to groups

AD Sites & Services / IP Subnets

Windows 2000 GPO to Control WinXP SP2 Firewall Settings

Deploying office with GPO

Allow logon through terminal services checkbox greyed out

Maximum ammount of BDCs in a single domain

Urgent : Server Docs disappeared from my DNS !!!

Group Policies

ADMT Migration of local profiles - only 50% successfull

Event viewer from remote machine

License issue

Isolate DC from authenticate users

can't send email to deleted external contacts

Cross Forest Authentication