Windows Server Active Directory

dns question...

AD man - 21 Oct 2006 11:48 PM - 4 messages

sorry guys, had to repost because still not clear on best solution. in a nutshell... will be killing an old server that is still used by many people and applications as a mail relay. my plan is this: kill old server, add old server's IP address as a second IP address to a new ...

Remove Parent-Child Trust

MH - 21 Oct 2006 9:18 PM - 4 messages

I have a Windows 2000 native mode domain. I want to permanently remove a child domain that is no longer in use. There is still a parent-child trust that I need to remove. The DC for the child domain is online (which is what ...

dcpromo failed because domain controller name not unique

bsaima - 21 Oct 2006 6:10 PM - 8 messages

Hi, I am trying to restore AD in test Lab. I got the backup of system state data from a DC In Live inviornment. In Test lab I installed server 2003 and run dcpromo and configure it as FSMO same like in live environnment ...

How to set up AD

Pascal - 21 Oct 2006 5:27 PM - 8 messages

I would like to have some help in setting up the AD. We want a super Admin at the top who can do anything. Under this super Admin we want 4 or 5 normal admins who can do everything but deleting or turn off the super admin or the normal admins, also the ...

DC Backup error with "volume shadow copy:0xffffffff."

Ahmad M. Zahoory - 21 Oct 2006 2:11 PM - 2 messages

Hi, In one of our Windows 2003 Domain Controller starts giving error whiel taking backup. Pl. let us know how to resolvd this. Backup Status Operation: Backup Active backup destination: File Media name: "Daily.bkf created 10/21/2006 at 3:58 PM" ...

Active Directory Health

stosti - 21 Oct 2006 1:16 PM - 4 messages

I have a test network with two domain controllers. Both have DNS and WINS and are GC servers. How do I verify everything is working correctly? There have been file replication errors, failed DC promo errors and DNS issues. ...

Unsussessful DC Demotion

stosti - 21 Oct 2006 11:00 AM - 5 messages

Does anyone know how to correct this error? Event Type: Warning Event Source: MSDTC Event Category: SVC Event ID: 53258 Date: 10/21/2006 ...

another "attribute conversion operation" error

deanhiller - 21 Oct 2006 3:35 AM - 2 messages

I am getting this error as I see all over the place.... LdapException: LdapException: (16) No Such Attribute LdapException: Server Message: 00000057: LdapErr: DSID-0C090B3D, comment: Error in attribute conversion operation, data 0, va28 but I can't find a way to debug the error. In IPlanet and other ldap stores, I look at log files that tell me which attribute is having problems. How do I do the same in ADAM?????? ...

simple DNS question

AD man - 21 Oct 2006 12:25 AM - 9 messages

my scenario is this: we have a server, we'll call it MAIL that runs the windows SMTP service and acts as a mail relay for roughly 100 applications on the network to send mail. the apps either have the name or the IP address ...

Looking for AD Reporting Tool

jb6000 - 20 Oct 2006 9:07 PM - 3 messages

Hello, I am looking for an Active Directory reporting tool that will give me reports on changes made to Active Directory such as new user accounts, password changes, rights changes, etc. Is there any out there that someone can recommend? ...

Replacing Old NT4 to 2003 want same hostname

Jeffrey J. Moser-Kuehl - 20 Oct 2006 7:26 PM - 3 messages

I have a current NT4 system, that was also a Domain Controller. It is only being used for backing up of the other systems and file serving. No users log into the old domain. My question is, I have a new server almost ready but when the time comes I ...

very strange problem with AD domain

AD man - 20 Oct 2006 7:24 PM - 10 messages

hi everyone. heres the issue... if you open ADUC, right click your domain, and choose properties, theres a field for a "Description". the other day i noticed that this field was set to someones name. i cleared it, and didnt think anything of it. today the name was back! i called the ...

"Allow logon through Terminal Services" user right missing

ajoaosilva - 20 Oct 2006 5:23 PM - 19 messages

Symptoms: - any administrator can logon to TS; - non-administrator users get â€œTo log on to this computer, you must be granted the allow log on the through Terminal Services right. By default, member of the Remote Desktop User Group have this right. If you are not a ...

Denied software installation in GPO

johnisccp - 20 Oct 2006 5:11 PM - 5 messages

My company has a software that require user to be a local admin to their PC. Is there a way to prevent the user with local admin rights to install software in GPO? I play with software restrictions policies but that did not ...

AD Command Line Tools

AJ - 20 Oct 2006 5:01 PM - 6 messages

There must be book out there on this does any one know? I can find bits and peaces here and there but not all the swtches or field names i.e. the Remote Installation Server in the Computer properties. I mean ...

Problem Adding printers - Need MVP help

AJ - 20 Oct 2006 4:58 PM - 3 messages

I manage a netowk with about 300 users divided in 3 states each office connected via T1. I recently updated offce 3 of 3 to WinXP Machines SP2. My problem is that on this last office is getting an error message that says "A policy is in effect ...

Replication and Preferred Bridgehead

spcqky - 20 Oct 2006 4:57 PM - 13 messages

Hi, With Windows 2003, does ISTG automatically create NTDS connections on non-bridgehead domain controller even though there are preferred bridgehead available in the AD site? What are the situations that this can happen? (I am seeing such a case but don't really know why it happens) ...

Slow response when opening files from Win2K3 Server

Chris - 20 Oct 2006 4:51 PM - 2 messages

I have recently installed a Win2K3 domain for a small company with ten XP Pro Sp2 clients. I have done this several times in the past without incident however with this installation, there is a 20-30 second delay when opening a ...

Using Ldifde to mail enable a user.

Graeme - 20 Oct 2006 4:29 PM - 3 messages

Hi all, For historical reasons, we have a number of users that are not mail enabled. Most have a corresponding contact object (i.e for each person there is a user object for logging onto the network and a separate ...

Logon As Service right lost after patches

reem01 - 20 Oct 2006 3:24 PM - 4 messages

Has anyone seen the logon as service right disappear after the most recent patches? We have seen it on a 2000 and 2003 server on the same account. Curious if anyone has seen this lately, and if they know if a recent patch is ...

Supportet/ Unsupported Objects import

booster - 20 Oct 2006 2:47 PM - 2 messages

Hi There i thougth i read a MS TechNet Article about the supported / unsupported Objects to Import to Active Directory. But i can't find them. Any Help welcome. Thank You. ...

Where did Power Users go?

AJ - 20 Oct 2006 2:41 PM - 8 messages

I'm trying to apply article 888046 (Allow power users the right to load and unload device drivers on a domain) When I go to add the power users group it doesn't resolve it ??? I looked in the built in acounts folder and it is not there. ??? ...

AD migration

Dan DeCoursey - 20 Oct 2006 2:39 PM - 3 messages

We arer eplacing or existing Win2000 domain controller with a new box running server 2003 am thinling about active directory and how to get all my "stuff" over to the new box......I have not done this operation before looking for advice ...

Error migrating users/computers using ADMT

Joe Grover - 20 Oct 2006 2:00 PM - 6 messages

I currently have a lab environment with the following setup: - One Windows 2000 Server as an Active Directory DC for the domain "SOURCE" - Two Windows 2003 Servers as Active Directory DCs for the domain "TARGET.local" (separate forest, netbios name TARGET) ...

Error message - "an invalid directory pathname was passed"

jeff - 20 Oct 2006 1:18 PM - 6 messages

when I go in to Group policy Management and click on Default Domain Policy I get a pop up error message stating in the blue bar Group policy Management in the info area "an invalid directory pathname was passed" ...

Replication issues

Fabio - 20 Oct 2006 12:38 PM - 4 messages

Hi all, can someone help me solve a replication issue. I am having? this is the event id error I am recieving on my end under directory services in event viewer. event id 1925 ...

The server service was unable to map error code 998

Charles - 20 Oct 2006 12:20 PM - 4 messages

The server service was unable to map error code 998 Does anyone know what that means. Its appeared since our AD upgrade. We are having problems with slow nework access for XP clients after a Windows 2000 to 2003 Active Directory upgrade. ...

Run only allowed windows applications

HarryH - 20 Oct 2006 12:19 PM - 4 messages

Hi, I am trying to use the "Run only allowed windows applications" policy. I have added the following to the list of allowed applications: C:\program files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe This will allow users to run Acrobat just fine. But if they try to open a ...

Disable Windows Live Messenger

rfalken - 20 Oct 2006 10:31 AM - 2 messages

Hello, Does anyone know if its possible to disable WLM without using the software restrictions in win2k3 ? I have tried the GPO/Windows Components/Windows Messenger and disabled both but without any luck. Kind Regards Rene ...

Cannot add new user in Win 2003 standard

TerryB - 20 Oct 2006 1:06 AM - 4 messages

I get the following error when trying to add a new user. Windows cannot set the password for "user" The specified network name is no longer available. Using Active Directory I was able to add one user, then after installing and removing Sharepoint ...

Local Admin account deleted Help !

JH - 20 Oct 2006 12:36 AM - 8 messages

Hello, I have a bad scenario where the local admin account was deleted. I can no longer choose the local machine to log on to, only logon with a Domain Admin. This server is one of three domain controllers. I have no problem running ...

ADAM: Unable to bind as ADAM user

Craig - 19 Oct 2006 11:44 PM - 3 messages

Hi, I'm having a fairly large amount of grief getting an ADAM instance up and running. The purpose of the ADAM is to be used as a staff directory, replicated from AD. We want to have photos in the directory, and we're putting them into the ADAM rather than the live AD. I've created the instance and sync'd the required OU's from AD - all that is working fine. ...

Security Groups issue...

Kshaeta - 19 Oct 2006 9:53 PM - 5 messages

*** Note, I posted this is the "security" group, but someone suggested I put it here to get an answer. *** One reason I ask, is because of this problem. I have two security groups, within my domain, and two servers in my domain. One server is a ...

Windows 2003 trust

Scott Schindler - 19 Oct 2006 9:14 PM - 4 messages

I want to create a forest trust betweent domain/forest A and domain/forest B. They are both root domains and both only contain Windows 2003 DCs. However they both already have a trust with domain C which is Windows NT 4.0. ...

Trouble adding printers Just upgraded to Win XP Machines

AJ - 19 Oct 2006 8:55 PM - 2 messages

I just upgraded several machines to win xp pro sp2. My users are having problems connecting to any printer that does not have a MS signed driver the error reads something like "A policy is in effect on this computer which ...

Help for win me and 98 client connect to win 2003 sbs avtive directory??

Danny - 19 Oct 2006 8:21 PM - 4 messages

Hello, Does anybody can help me to PC win98se and win me connect to SBS 2003 server in Active directory?? Thanks! Dan ...

Unremovable lingering object

infopath - 19 Oct 2006 6:48 PM - 9 messages

Our company has about 500 DCs. A couple of them haven't replicated for 1 month due to hardware and connectivity problems. We've bringed them up. One of them (DC-BAD) replicates inbound normally from DC-GOOD, but it cannot ...

Distribution Group issue

Fabio - 19 Oct 2006 6:32 PM - 5 messages

Hi everyone, When creating a distribution group in AD some people can and some cannot view it from there global address lists in outlook. Why is this happening? Can someone please help? Most Appreciative, ...

Any good tools or ideas for managing members of group

Jaycee - 19 Oct 2006 6:31 PM - 3 messages

I was wondering if there are any programs or tools out there that would allow a user to add, remove, and view members of a security group. (I don't want to have to mail enable them). I just want the person who has access to ...

Important question .ADM file for IE7 blocking

Marlon Brown - 19 Oct 2006 6:01 PM - 5 messages

Imagine I import the .adm file available to 'block' users from automatically downloading IE7. Then I enable that on my group policies. I understand while users are logged onto my corporate domain/connected onto my network, the group policies will apply to their machines. ...

Creating a Computer Object in ADAM

LM - 19 Oct 2006 5:32 PM - 13 messages

Folks, I'm quite new to ADAM and Active Directory. We want to create a Computer Object in ADAM for use by our application. I found postings here that discussed exporting the Computer Object from an Acive Directory instance using LDIFDE and importing it into ...

ADAM Replication Service Account

Dan Brusco - 19 Oct 2006 4:12 PM - 3 messages

I have an ADAM instance on Win 2003 SP1. I'm trying to setup a replica on a Win 2003 R2. In the Active Directory Setup Wizard, when I choose the account, I select "This account" and give a local account and password which ...

Group logon script

cj - 19 Oct 2006 3:58 PM - 5 messages

Our users currently run a logon script based on the OU that they are in. A new OU was recently setup for a new dept that is made up of current users from several other OUs. They were placed in a group under the new OU. This ...

AD query question

Mel - 19 Oct 2006 3:02 PM - 4 messages

Hi, When using any of the support tools or Resource Kit tools to query objects within AD (particularly LDAP stuff) are the strings case sensitive to the actual object being referrrenced? example: Using acldiag (support tool) acldiag CN=MACHINE_TEST,CN=Computers,DC=domain1,DC=test,DC=fourthcoffee,DC=com /schema ...

Workstations Authenticate to Random DC's

DarrenW - 19 Oct 2006 2:19 PM - 6 messages

We have a few MAC OS X (Panther 3.9 & Tiger 10.4.x) machines in the organisation. While setting up the users to authenticate through AD, and getting Entourage to work etc, we noticed that the machines always used a ...

Simple Custom ADM template

Mike - 19 Oct 2006 2:12 PM - 2 messages

I need to create a simple custom template based on the following registry entry but apparently I am inept: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Options DWORD: NoAutosigOnCustomForms Value: 1 Any takers? This is my first custom ADM and nothing I've done so far has ...

SYSVOL Mismatch

HarryH - 19 Oct 2006 1:43 PM - 8 messages

Hello, when I run gpotool /checkacl /v on our domain controllers I get a SYSVOL mismatch error for 2 of our policies between 2 of our DCs. When I check the relevant folder substructure I can see that one (empty) folder did not get ...

Account Lockouts

ctowndu33 - 19 Oct 2006 12:45 PM - 5 messages

In a W2K domain with an account lockout of 0 (admin must unlock it), is there anyway to exclude certain individual accounts from being locked out? I know this is default for the domain admin, but can you set it for individual ...

Change Naming Attribute (RDN) from CN to UID

Craig Gilmour - 19 Oct 2006 11:46 AM - 14 messages

All, for various reasons I want to be able to change the naming attribute of a user from the standard CN to another attribute such as UID (or samAccountName for that matter). This is because CN will hold a friendly name ...

Account locked - Active Directory

Bones - 19 Oct 2006 11:06 AM - 6 messages

The user accounts is set to lock after 3 unsuccessful logins, but seems to lock if you get your password incorrect once while logging into Outlook. All ok if you get it wrong once or twice when logging into Windows, seems to be a problem with outlook connection. ...

Users unable to reset password

Sudeep - 19 Oct 2006 10:22 AM - 2 messages

We have Windows 2003 based single domain Active directory. We have configured in Group Policy- Computer Policy--Password Policy--Max Password Age = 30 days. However after 35-40 days users are not able to change their password and have to request the Administrator to reset the password. ...

FRS Issues

barrymercer - 19 Oct 2006 8:58 AM - 2 messages

Hi, Hope this is a quick one, just want some confirmation before I hit the DEL key in adsiedit... Company I'm now at were having replication trouble for a while, so they decided to remove most of the DCs in order to simplify things. One of ...

Replication problem between 2 DC(W2K server and W2K3 server)

Howard - 19 Oct 2006 3:02 AM - 4 messages

Dear All, I have root dc called (example.com) install windows2003 server and few dc in HK. then have (dc1.cn.example .com) install windows2000 server in CN(other sites) later, have (dc2.cn.example.com) install window2003 server in CN ...

Global Catalog Server Not Found

Scott Murdoch - 19 Oct 2006 2:18 AM - 3 messages

One domain, 2 dc's(W2003), dcdiag gives error that GC server could not be located and KDC could not be located. Also errors in FRS log on both dcs that they cannot comunicate to sync sysvol and netlogon shares. Users cannot ...

Not able to establish trust with another window 2003 domain

Eng - 19 Oct 2006 1:11 AM - 24 messages

Hi All, I have a problem establish a trust with one of my domain. I have an existing windows 2003 domain call Source and I am planning for a migration. I setup a test Target domain,windows 2003 as well, call Target, to test the migration. ...

ADSI Scripting question

Phyxious - 19 Oct 2006 12:20 AM - 4 messages

Im a bit new to scripting but have a general idea on how to do the basic stuff. I just have a simple question, about OU's. If I had a structure something like: MainOU ChildOD ChildChildOU if i do something like Set objOU = GetObject _ ...

Exchange Plugin for Active Directory?

henry - 18 Oct 2006 10:57 PM - 3 messages

Hi, I'm in unfamiliar waters but hope you can help. I'm looking for tips or instructions on how to enable the Custom Attributes when managing AD user Accounts. Specifically getting access to Attribute 14. Thanks! ...

Changing Passwords/Synching Passwords for Remote Users

Kevin Spinnato - 18 Oct 2006 10:14 PM - 2 messages

We have a 2003 Active Directory environment with desktop and laptop users. Our password policy is that we require password changes every 30 days and remember the last 12. The OS on our laptops is XP and we are using ...

Slow logon on XP PCs after reboot

Bobson - 18 Oct 2006 9:10 PM - 2 messages

Hi all, Thank you for all your help in advance. Here is my question... why the domain logon is so slow for one site in AD for those XP PCs which are just rebooted? It takes about 85secs. Instead, if ...

Upgrade OEM windows 2003 SP1 to Windows 2003 R2

Peter - 18 Oct 2006 9:02 PM - 2 messages

Hi all, Can anyone share how you upgrade OEM windows 2003 SP1 to R2 (member server)? Thank you. ...

additional account info

DEI - 18 Oct 2006 8:28 PM - 3 messages

I see this tab on user properties in AD on my domain controller. How do I add this tab to my other domain controller and my local AD snapin? thanks! ...

1058 and 1030 error never be away

B - 18 Oct 2006 8:26 PM - 2 messages

One of the DC keep showing the error message - 1058 (Windows cannot access the ile gpt.ini for GPO CN=....). The file must be present at the location .....\\sysvol\....policies\{6c710c14-.........}\gpt.ini. The system cannot find the path specified. Group Policy processing aborted. When looked at ...

adprep /forestprep fails from W2K3 R2 CD 2

Ravi - 18 Oct 2006 6:38 PM - 14 messages

Hello, We have a Small Business Server 2000 (DC and holds all FSMO roles) and a W2K3 peer DC. (Adprep already run when that DC was installed.) I want to promote a new W2K3 R2 server to DC. First I made the common mistake of using ...

DSADD User -hmdir Not Working

GerryR. - 18 Oct 2006 5:47 PM - 7 messages

Hi, I am trying to add users using DSADD User. Everything seems to work except for the -hmdir switch. After running DSADD USER, the user account gets created and the home folder information is listed in AD, but the user folder ...

FSMO Role Seizures for DR Testing?

David - 18 Oct 2006 5:36 PM - 22 messages

Good afternoon all, I currently have a question regarding FSMO role transfer/seizures for the purposes of a disaster recovery exercise. Currently, our AD Forest consists of 3 domains (Designated A, B, and C). Each domain also ...

Trust between Domains Question

Scott - 18 Oct 2006 5:30 PM - 2 messages

I have 2 locations. Each location has its own Active Directory domain. I would like users from either domain to be able to access files from either domain. I have never done this with 2003 Server/Active Directory and it has ...

Password Expiration but GPO not in effect.

AlpsAuto - 18 Oct 2006 5:23 PM - 3 messages

W2K3 SP1, OU's have been setup to reflect the organisation. Password policy created and linked to each OU on a different day for rollout. However some user's passwords are being expired before the roll-out of the Password Policy ...

Remove Read-Only Access to AD-Authenticated Users

Steve - 18 Oct 2006 5:05 PM - 5 messages

Has anyone set the Authenticated Users to 'deny access' for their entire domain and had any issues. We do not want regular users installed the Windows 2003 Support tools on their Windows XP system..and looking at our Active Directory/Sites and Services/Domains and Trusts. I set a test user to 'deny ...

Need clarification of KB article 314649

Neil - 18 Oct 2006 4:45 PM - 8 messages

I am currently researching the process to update a Windows 2000 Server schema environment to Windows Server 2003 schema. Because I have an Exchange 2000 server on the network, I was looking at KB article #314649. It has some ...

Userenv 1030 / lsasrv 40961 errors

andy_c - 18 Oct 2006 4:08 PM - 2 messages

some (definatly not all) XP SP2 clients are logging userenv 1030 and lsasrv 40961 errors in our 2003 SP1 AD domain. All clients are subject to the same policies, which they all succesfully enforce. On the affected PC's the 1030 errors are mixed with seccli 1704 messages ...

Login Scripts and Group Policy

scale - 18 Oct 2006 4:06 PM - 2 messages

I have a group policy that launches loginscript A.......but my users have a ..bat login script that they also need to run from the Profile Tab in AD users and comptuers....in addtion to setting home directory etc. Will these 2 both run? I assume so. Will they conflict and shut the other ...

Internet Access group

Asif Shah - 18 Oct 2006 3:52 PM - 5 messages

Hello, At my old job we had a group (security group) called WWW in Active Directory which would allow users to have internet access. Without that group added to the user's profile/account the user was not able to access the internet. I ...

ADAMSync

Michael L. - 18 Oct 2006 3:51 PM - 3 messages

Is there any way to redirect one attribute to a different attribute within ADAMSync? For instance, if I wanted to stuff sAMAccountName into userPrincipalName via ADAMSync is is possible or would I have to use MIIS? ...

Automatic workstation object removal

BillyBob - 18 Oct 2006 3:37 PM - 4 messages

Is there a method in Active Directory of removing old workstation objects automatically. If anyone has a solution this would be very helpful for me. WE would like this done once these objects have not been active for about a month ...

Security log get overwritten, log size less than max litmit

NikkiP - 18 Oct 2006 3:00 PM - 3 messages

I'm trying to figure out why my security log gets overwritten. We have default domain controller policy set to 1GB and overwrite as need. The current log size is 400MB. The oldest event I can find in the security log ...

NTP time syncronization

Kati - 18 Oct 2006 2:39 PM - 6 messages

Hello I have to sync the whole active directory infrastructure with a ntp source on internet. noone server can access on internet, because all of them are behind an isa server. I don't want to install firewall client on a pdc emulator and grant it ...

Object Security

R.P - 18 Oct 2006 1:58 PM - 4 messages

Hi.. we are runing windows 2003 server with service pack 1 and we have Active directory service running on these servers we have observed that the domain users will be able to obtain the Active directory related information by using commands like csvde.exe or by ...

Is there an easy way to delete old computer name from ADUC?

John - 18 Oct 2006 1:57 PM - 5 messages

Hi all, We replaced all workstations with new computers. I can see all old computers name are still in ADUC. Is there an easy way to delete old computer name from ADUC? (win2K3 R2 envir.) Thank you. ...

Creating a Lab Environment Using Virtual Machine

tom - 18 Oct 2006 12:43 PM - 4 messages

Good morning. We are trying to setup a lab version of our active directory using Virtual PC. We want to make a copy of our first domain controller to test upgrading it from 2000 to 2003. We have a single domain ...

Where can I find adperf.exe ?

François - 18 Oct 2006 11:24 AM - 3 messages

I need to monitor LSASS.exe performances on a Windows 2000 server. Server Performance Advisor do not support 2000. Thanks. François. ...

Active Directory Site And Services Problem between 2 DC

ngcw - 18 Oct 2006 9:15 AM - 3 messages

I have 2 DC, one located at HQ Building and the other is at remote branch office. Both DC are connected by a leased line. How to make sure that the active directory site and services setting at branch office is able to replicate with the one at HQ building?Please guide ...

Allow installation rights to users

Yousuf Khan - 18 Oct 2006 8:48 AM - 2 messages

i wanted to allow installation rights to users of OU in active directory how to assign this rights ...

The target principal name is incorrect

lelinh - 18 Oct 2006 7:43 AM - 2 messages

Dear all, I would like to get support from you with my Active Directory trouble. My system have 2 DC: called: dc1.xxx.xx.x (root DC) & dc2.xxx.xx.x About 1 month ago, when I opened Active Directory, the following message appeared: ...

Editing group policy on x64 server

Nick Payne - 18 Oct 2006 1:27 AM - 2 messages

How do I do this? The download page for GPMC says that it is not compatible with x64, and when I try to edit group policy for an OU from AD Users and Computers on the server, it tells me that gpedit.msc cannot be found. When I ...

Backup of Active Directory Integrated DNS zone

Ahmad M. Zahoory - 18 Oct 2006 12:31 AM - 4 messages

Hi, How to take backup of Active Directory Integrated DNS zone. ...

Remote Installation

rzaleski - 17 Oct 2006 11:50 PM - 2 messages

I created a group policy to deploy Microsoft Outlook 2003 to 100 clients. I am testing on a group of people and the policy's report (through Group Policy Management) says that 2 clients were installed. Is there anyway I can find out what two users had Outlook installed? ...

SC.exe tool

CK - 17 Oct 2006 10:01 PM - 4 messages

has any one ever used the Sc.exe tool to grant sufficient permissions to authenticated user ([link])? If so were there any bad experiences? How invasive is this procedure? Can someone dummy this ...

Why domain logon is so slow for XP clients which are just rebooted

Bobson - 17 Oct 2006 9:04 PM - 4 messages

Hi all, Thank you for all your help in advance. Here is my question... why the domain logon is so slow for one site in AD for those XP PCs which are just rebooted? It takes about 85secs. Instead, if ...

eventlog id 1168

Martin - 17 Oct 2006 8:10 PM - 5 messages

When our windows 2003 SBS server (pdc) boots up we get an error :- ###### Event Type: Error Event Source: NTDS General Event Category: Internal Processing Event ID: 1168 Date: 16/10/2006 Time: 15:12:07 User: NT AUTHORITY\ANONYMOUS LOGON ...

Delegation to create mail-enabled users

GJB - 17 Oct 2006 8:08 PM - 3 messages

Hi, I manage a central Exchange org with around 500 remote locations, which are not part of the Exchange AD Forest. The users log onto their own forest/domain and then either connect via OWA or Outlook and authenticate with their exchange usernames/passwords when ...

adprep

TIm - 17 Oct 2006 7:51 PM - 2 messages

I have two DCs that were once running on 2000 server and upgraded to 2003 server. I am in the process of upgrading the hardware. when I attempt a DCPROMO on my new 2003 R2 server I receive an error saying that I need to run ...

AD ADSI question

Will - 17 Oct 2006 7:44 PM - 10 messages

I access our AD through the following line of code... Set User = GetObject("WinNT://domainname/" & id & ",user") Then to access their name I do User.Fullname. What I want to know is there a way I can loop through this User object ...

event log security settings missing in Group Policy

strongline - 17 Oct 2006 6:59 PM - 3 messages

I am reading [link] but could not find any of the following settings: Event log: Application log SDDL, Event log: System log SDDL under \Windows Setting\Security Settings\Local Policies\Security Options it's win2k3 sp1 box ...

Whick key I need for R2?

John - 17 Oct 2006 6:24 PM - 5 messages

Hi all, We have volume license key for windows 2003 R2. But, some servers are shipped with OS windows 2003 Sp1 from manufacturing company. I tried to use the VLK on these servers. but, I got "invalid keys". Do you know which key ...

sysvol - missing policies and scripts folder

Sleb - 17 Oct 2006 4:58 PM - 3 messages

Hi, One of my customer has 2 2000 DC's. I found out that in the sysvol\domain folder, everything is gone except the folder DO_NOT_REMOVE_NtFrs_PreInstall_Directory I have backups of system states but the problem occured before the oldest tape they have. Everything seems fine except in event viewer it says that it ...

Intraforest Migration Rollback.

Don - 17 Oct 2006 4:56 PM - 2 messages

Thanks for the replies in advance people. Here is my question: I am testing intraforest migration and I know that this migration is a move and not a copy. One thing I noticed is that the computer account still show ...

Windows 2003 Server 64 bit

TSAM - 17 Oct 2006 3:49 PM - 5 messages

Hello All, Could I add a 64 bit additional domain controller to a 32 bit domain controller? Will Exchange be able to perform it oepartions like DSAccess etc with this 64 bit DC, if I seize the roles to be the PDC. ...

Help, need a VBScript

Clayton Sutton - 17 Oct 2006 3:32 PM - 16 messages

Hey everyone, We are running a Windows 2003 domain and Win2k and Win2k3 workstations. I need a vbscript to add a domain acct. to the LOCAL Admin acct. to ALL of our workstations. Can anyone help by pointing me in the right direction where I ...

Group Policy

gardener - 17 Oct 2006 3:13 PM - 2 messages

Is there any way in AD group policy that we can block the internet? In our setting (public school) we need to block the internet from students who have lost that priviledge. Thanks ...

What is Federation Service Uniform Resource Locator (URL) used for

Thyme - 17 Oct 2006 2:02 PM - 2 messages

In a claims aware application, in the web.config file, I must have a entry <fs> https://adfsresource.trey.net/adfs/fs/federationserverservice.asmx</fs>. What is it used for? I'm a little bit curious about how the ADFS Web Agent ...

Multiple ADAM Problem

Object Type GUID List

Microsoft Exchange System Objects Container

AD - change user logon name in active directory

compromised user's certificate

Slow logon time

shutdown some special PCs or all PCs except servers in domain

Disable USB Drives

HELP: computer object in AD sudenlly disappears!

More than 200 AD Security Groups

error event id 11

rendom /prepare failed

User account automatically locks itself after unlocking

Windows 98 Drive Map?

Restricing Users to a Single active logon

Lastlogin Time Stamp problem

A/D Integrity

Permissions / GPO

ADAM installed

delegation

DC Site to Site Replication Port

duplicate entries for reverse DNS zone

Group Types Question

User Configuration not applying to users in trusted Forest

Logon Script Question

New Server and Logon Scripts

Slow Login times for Users, using XP, Windows Server 2k/2003

Sync disabled AD users to ADAM via IIFP

Slow clients after 2000 to 2003 Ad upgrade

Slow clients after 2000 to 2003 AD upgrade

Insert All Users to a single Group without use Everyone

Best Way Migrate OU structure and GPOs between interforrest domains- Does CreateEnvironmentFromXML.w

Demote Win2k DC's hosting DFS...

How can I get the Localdomain for account using directoryservices

I search all groups of a member...

Bring up New DC without Demo of old one

Remote Control Add-on for Active Directory Users & Computers

Builtin Queue Operators Group Question

Logon Failure using new account in active directory

Group Policy Editor not allowing GP changes

UNC Path Problem

Active directory monitoring and documentation

MMC Active Directory Users and Computers hangs

profiles

Permissions

W2k client on 2003 AD random login on remote DC instead of local DC

Windows 2003 Settings won't save

Permissions to Allow users to rename but not delete..

Windows 2003 SP1 Firewall Control through Group Policy

site link transitivity

Replication between parent child domains