Windows Server Active Directory

cannot login locally to 2k servers after live comm server install

Eric Peterson - 11 Nov 2006 11:54 PM - 4 messages

I installed Live Communications Sever 2k5 on a Windows 2k3 Server(DC). Now on all my 2k member servers, I cannot login to the system with the Administrator account on the domain. The servers are under an OU in my AD ...

Removing root domain but not child

shoktai@gmail.com - 11 Nov 2006 10:59 AM - 4 messages

Hi all, We have a AD structure with a root domain company.local and a child domain corp.company.local We want to reduce the domain to one single domain corp.company.local and get ride of the root domain. ...

Domain Missing

Vijesh Rajan - 11 Nov 2006 5:09 AM - 2 messages

Hi, In our Network we have a mix and match of Windows XP and Windows 2000 Prof system which are joined to Domain Controller (Windows 2003 SP1). recently we are facing a strange problem like some client PC gives an ...

recommended DNS settings for servers

Darren@community.nospam - 11 Nov 2006 3:22 AM - 2 messages

All my servers are configured with static IP addresses as a result should the following be checked under the TCP IP properties of each server . I am assuming "yes " ,, since my servers do not use DHCP therefore the client meaning the server should register both the A -RR and PTR in DNS , is this ...

recommended DNS settings for servers

Darren@community.nospam - 11 Nov 2006 3:22 AM - 4 messages

All my servers are configured with static IP addresses as a result should the following be checked under the TCP IP properties of each server . I am assuming "yes " ,, since my servers do not use DHCP therefore the client meaning the server should register both the A -RR and PTR in DNS , is this ...

Remove server frmo AD

Mike G - 11 Nov 2006 2:07 AM - 7 messages

Hi, We had a server crash but the backup files are corrupted. I reinstalled Win Svr 2k3 with a different servername. AD still thinks the old server is still in tact. How do I manually remove the old server from AD? ...

Adding AD role to a windows 2003 std. R2 member server

Travlaw - 10 Nov 2006 9:24 PM - 4 messages

Hi, I have a GC/DC running on windows 2003 SBS. I have a windows 2003 std R2 as a member of the local domain. I want to add a AD role to the R2 but i am getting the following errors during installation. ...

IIS and OWA

RC - 10 Nov 2006 8:57 PM - 4 messages

I have exchange 2003 installed on my server. IIS has the default folder with all the OWA info in it. I want to create another website on the same server in IIS but both cant use the same port (outlooks web access ...

WIINS Port 42

CK - 10 Nov 2006 6:08 PM - 14 messages

How important is WINS port 42 to a DC? I have a new Point to Point line installed on one of my remote sites and my DC went to hell. After days of investigation (and promises from my WAN guys who assured me no ports were ...

Domain Naming

TomSmith - 10 Nov 2006 4:03 PM - 4 messages

We are planning on using an empty root domain such as "domain.tld" Do the child domains have to be "something.domain.tld" or can they be different? We have a location in Europe and in the US and we wanted to be able to ...

Re: LDAP Analyzer - suggestions?

The Flying Dutchman - 10 Nov 2006 2:59 PM - 3 messages

Dear Colleagues, Thanks for taking the time to read this. I am looking for a utility that will allow me to specifically read calls to an LDAP directory (in this particular case, its simply AD) made by a certain application. ...

Getting User Expiration date with dsquery

Rachiano - 10 Nov 2006 11:46 AM - 3 messages

Hi, I like to get de expiration date of user accounts with the dsquery method using the accountexpires attribute. I output the results to a text file, but for the expiration date I only get numbers. e.g. 9223372036854775807 Is there a way to convert those numbers to a date format? (dd-mm-yyyy). ...

Problem applying custom Group Policy

George Gîta - 10 Nov 2006 9:21 AM - 8 messages

Hello everyone, I have a problem applying a custom goup policy. This policy has an administrative template (removable_storage.adm), downloaded from microsoft wich blocks removable storage. I loaded in AD and nothing happens to the computers in this OU. I also tried to use this in a group policy on a local computer, but still ...

permission question

AD - 10 Nov 2006 2:00 AM - 3 messages

hello try to fiqure out how in AD you could tell who has rights to a particular drive, folder, file etc example create a group and add users to that group in AD. then assign that group to a particular folder on a different file server. ...

Restoring AD

lmelm - 9 Nov 2006 10:57 PM - 5 messages

Hi I have a question, I have a Windows Server 2003 domain Controller, is there a problem if I make a System State Security copy of this domain and then I reinstall the system but changing my disk size partitions? I mean ...

upgrade from windows 2000 DC to Windows R2 DC

Krishna - 9 Nov 2006 10:48 PM - 4 messages

Can I upgrade win 2000 DC's in a win 2000 forest and domain to windows 2003 R2 ? I know I can take path of adprep to windows 2003 sp1 and another adprep to win 2003 R2. Krishna ...

Using ADFind to query OU

needlittlehelpwithSMS - 9 Nov 2006 10:10 PM - 3 messages

Hi all, I want to use adfind to query an OU. I want to find out, if that OU is a member of the protected group in windows 2003. Does anyone know the syntax for that? Please let me know. Thanks!! ...

Required rights to add a workstations to a domain...

Claude Lachapelle - 9 Nov 2006 9:07 PM - 3 messages

Hi! I'm currently in a process of securing a domain, and one task, is to ensure that only members of a specific domain local group could add workstations to that domain. So, I edited the Default Domain Controller Policy, added the specific group ...

Small BranchOffice Best Practise

Frank Meland - 9 Nov 2006 8:57 PM - 5 messages

Hi. I have now googled for a while now, without find a simple solution for a simple infrastructure. We have a singel W2k3 domain with 3 servers. 1 exchange, 1 TS and 1 for AD and DNS and so on. We are currently establish a Branch office i US and will ...

Win98 machine asking for a password when using a share on a Win2003 AD server

Yobbo - 9 Nov 2006 8:42 PM - 4 messages

Hi All We have had a techie install a new Win2003 server into our school, setup active directory, domains, etc and then they got completely dumb-founded when they found that 70% of the machines in the school are still on Win98SE. ...

Using ADAM as a web app authorization directory

Chris H - 9 Nov 2006 7:36 PM - 2 messages

I think I know the answer after reading some previous posts in this group, but wanted to make sure as I don't see it stated in black and white. Currently we use Site Server (way beyond its life) database to authenticate ...

Sites and services won't replicate with one server

KD - 9 Nov 2006 7:13 PM - 2 messages

Hi, I have a network with several servers in several sites and I'm in the process of replacing some servers. To do so, I usually put a transition server that will manage the Active Directory while I retrograde my current ...

PeopleSoft - Integration

Mark D - 9 Nov 2006 6:02 PM - 5 messages

Does anyone use PeopleSoft as an Human Resources system and have it integrated to an Active Directory? ...

Forcing Intersite Group Policy Replication AD 2003

Liam C - 9 Nov 2006 5:50 PM - 8 messages

Hi All, Took me a while, but I've been able to figure out how to force a group policy replication to remote branch office DC's using the ntfrsutl utility. The problem is that this works if I do it from one of our 2 servers at ...

AD and Subdirectory Rights? Office .tmp files?

Doc - 9 Nov 2006 5:36 PM - 4 messages

Hello, Have a smallish Srv2003 Windows Domain, all users have XP and are using Office 2003. Problem: Within a restricted folder (rights are to selected users and domain admins - giving these few ALL RIGHTS) I have created six Word2003 documents. There is NO INHERITED rights on any of these Word documents. ...

Intersite Replication seems to have problems - Event-ID: 1265

dtontsch - 9 Nov 2006 4:59 PM - 11 messages

since a while I get these warnings on one of my DC's Event-ID:1265 The attempt to establish a replication link with parameters Partition: DC=at,DC=xxxxx,DC=com Source DSA DN: CN=NTDS Settings,CN=HWDE-MUC-DC-1,CN=Servers,CN=Munich,CN=Sites,CN=Configuration,DC=xxxxx,DC=com ...

Confusing prob with Auto-generated replication connections

jrm73 - 9 Nov 2006 4:55 PM - 5 messages

I am in the middle of an AD migration and have minor issue with my replication topology. We currently have 17 sites and 2 of them are datacenter hubs. We are equally distributing the remote sites to replicate with one of the 2 hub sites. So each remote sites site link ...

File Server REsource Manager on the file path

Sally - 9 Nov 2006 4:52 PM - 4 messages

Hi all, We decided to block saving all image files on the file server. The file server is windows 2003 R2. So, I installed file server resource manager. We have around one thousand folders on the file server. Then I created file ...

Directory service is busy

Alexyy - 9 Nov 2006 4:41 PM - 2 messages

This is with regard to trust relationship in windows 2003 standard edition.I am trying to do trust realtionship FOREST LEVEL for which i have to raise the OS, while trying to raise the OS from native mode to windows 2003 mode, iam ...

How Enterprise Admins group works in multiple trees in same forest

Shawn Conaway - 9 Nov 2006 4:26 PM - 3 messages

Hello, I currently have two domains (company.biz and new.company) in separate trees in the same forest. company.biz is the forest root and does not have any significant objects or users in the domain. I need to create two new domains in the forest. I am choosing between a ...

Find Empty Distribution Lists

markj - 9 Nov 2006 4:06 PM - 6 messages

Hello, How can I find all Distribution Lists (or Mail enabled groups) that have no members and export the results to a file? Thanks. ...

Windows 200 Server Operations Masters

jatarolli - 9 Nov 2006 1:57 PM - 3 messages

I have a small AD domain. the Domain Controller that served as the Operations Manager has crashed with no recovery available. Is there a way to transfer the roles witout that server being online? ...

Forest Migration

Amgad Hegazy - 9 Nov 2006 12:45 PM - 2 messages

I Have two forest: first one using Windows 2000 Advanced Server (Forest A) and second forest windows 2003 Enterprice(Forest B). we start to migrate Forest A using ADMT v2 to forest B through user migration I note it take many time in step (Running Extensions fo ...

Interview Questions

Guvnor - 9 Nov 2006 11:00 AM - 8 messages

Hey Guys, I need some help. I have been working as an IT contractor for past 10 years in wintel enviroment. For the past 3 years i have been working in a complex environment providing 3rd line support and above within a ...

Moving Windows 2003 Server to a new Hardware of different Specification

JJ - 9 Nov 2006 10:20 AM - 5 messages

Hi, I have a windows 2003 Server that is the Domain Controller, It is working ok but I want to replace the Server with another server. How do I go about it, so that the new server plays the role of the old ...

Moving Windows 2003 Server to a new Hardware of different Specification

JJ - 9 Nov 2006 10:19 AM - 2 messages

Hi, I have a windows 2003 Server that is the Domain Controller, It is working ok but I want to replace the Server with another server. How do I go about it, so that the new server plays the role of the old ...

Extracting group membership

Reuben Rinquest - 9 Nov 2006 9:04 AM - 2 messages

Hi There, Is there a way to extract the group membership of Distribution groups hosted in the AD? I have about 80 groups and need find out who the members are. Please let me know if you have any suggestions. ...

Delegate control to Help Desk

JaCro - 9 Nov 2006 6:42 AM - 5 messages

Hi, I need to delegate control to our help desk stuff to reset passwords, unlock accounts, add or remove groups to users, etc. Also I need to give them possibility to move objects between OUs. Which permissions I need to set so ...

Adding Attributes to Active Directory

Mark D - 9 Nov 2006 4:15 AM - 4 messages

I am a Technology Architect so my knowledge is broad but not necessarily specialized. My questions are related to Active Directory and best practices. I am interested in others opinions of some specific business requirements that our internal AD expert is reluctant to do. ...

.zap file doesn't install the app

Dennis - 9 Nov 2006 2:29 AM - 6 messages

I used the steps in Microsoft KB231747 to create the zap file and package the ..exe. The .exe installs the program when I copy and paste the path into a batch file, but does not install from the GPO. The path has no spaces and I ...

Windows Shutdown - lasass.exe terminated unexpectedly code 1073741819

Rustom - 9 Nov 2006 12:04 AM - 2 messages

I have a domain controller rebooting every 10 min with the specific error message. Windows Shutdown - lasass.exe terminated unexpectedly code 1073741819. I am running Windows Server 2003 R2 - fully patched and running antivirus ...

Misconfigured AD

Kelly - 8 Nov 2006 10:31 PM - 10 messages

I know I have AD problems but I have not been able to nail them down. I have a Parent domain with 2 child domains and an exchange server that resides in the Parent domain. One child is fine. The other has issues. These issues pop ...

Permissions across 2 Forrest

Chris Peikert - 8 Nov 2006 10:10 PM - 30 messages

We have 2 forrest each with a single domain. We want the administrator from both forrest be able to cross forrest for admin purposes plus be able to assign permissions across the forrest. When you go to a folder on Forrest A and go to Security it gives you the ...

Identifying which domains are in the forest

Shawn Conaway - 8 Nov 2006 9:55 PM - 2 messages

Hello. I have inherited administration of a previously existing domain when I switched jobs. I'm now trying to identify all the moving parts and pieces in the company domains and forest(s). I have a W2K functional forest with at ...

Move to a new server

Liege - 8 Nov 2006 9:28 PM - 6 messages

I have one W2K AD server on my network, which also runs DNS, DHCP and WINS. I need to move everything onto a new server and retire the old one. Does anyone know of an article that will give me a step by step procedure on how to do it. ...

Ldifde import

drpepper - 8 Nov 2006 9:23 PM - 8 messages

can someone tell me any reason why i can't import with this syntex ? i'm trying to modify group for managed by to another user account dn: "CN=All Staff,OU=BigApple,DC=ATLANTIS,DC=COM" changetype: modify replace: managedBy ...

What requires you to have Domain Admins rights?

J. Hutchins - 8 Nov 2006 9:23 PM - 2 messages

Can someone tell me or point me to a listing of what specific roles/tasks/functions in an Active Directory 2003 environment requires you to be a member of the group "Domain Admins" that cannot be delegated? Thanks. ...

Event ID: 13508 - no \NETLOGON or \SYSVOL

Fritz - 8 Nov 2006 8:50 PM - 2 messages

Hi, I acquired a domain with problems. Basically only one domain controller is authenticating users. There is a backup DC on the network but it won't share \\SERVER\NETLOGON or \\SERVER\SYSVOL. I thought perhaps only the ...

Corrupt CN

David C - 8 Nov 2006 8:37 PM - 8 messages

I'm having issues with R2's NIS server and it appears I've found a corrupt entry. objectGUID should be a guid type, not text. Is there any easy way to change this? dn: CN=petris,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=petris,DC=com ...

Error when launching ADUC

COT-AD - 8 Nov 2006 8:26 PM - 6 messages

I have an admin that receives the following error when trying to run Active Directory Users and Computers: naming information cannot be located because: class not registered. We have uninstalled and reinstalled the admin tools but he receives the same ...

cannot add child domain user to root domain

dtontsch - 8 Nov 2006 8:01 PM - 3 messages

My AD looks like following: domain.com child1.domain.com child2.domain.com child2 is a w2k3 domain and was set up today, while child1 is a w2k domain and domain.com is a w2k and w2k3 domain. I want to run Exchange2003 on child2.domain.com and in oder to prepare this ...

Full Directory Name in Active Directory (Server 2003)

Bryan - 8 Nov 2006 7:59 PM - 3 messages

I just need to know how to find a user's full directory name (DN) in Active Directory on Server 2003. Thank you! ...

dsmod groups

drpepper - 8 Nov 2006 7:32 PM - 2 messages

can someone check this syntex is correct ? i not able to run it and not sure where is wrong.. OR some anyone have an easy ways to modify managedby in DL group ? dsquery group "CN=All Staff,OU=Big Apple,DC=ATLANTIS,DC=COM" |dsmod -attr ...

Migration Steps?

Jeff7566 - 8 Nov 2006 7:16 PM - 8 messages

Does anyone know of any good books, websites or anything else that has a good step by step how to migrate a Win 2k domain to a Win 2k3 R2 domain? ...

ldifde , cvsde or dsmod

drpepper - 8 Nov 2006 7:13 PM - 2 messages

i have a DL group that i would like to modify managedby field, can someone tell me how to use dsmod to modify that field or ldifde ? i tried ldifde import from csv file and i not sure i got my colums ...

Unrestrict group of PC's

obtpsna - 8 Nov 2006 7:04 PM - 2 messages

I have about 30 CAD PC's that I need unrestricted use on. They are XP Pro SP2 in a single forest AD domain. They are in their own OU. The user needs unrestricted access for these machines only ...

DSQuery to show ManagedBy?

al - 8 Nov 2006 6:11 PM - 2 messages

I want to show ALL the groups that "Group A" is listed in the managed by field for our entire domain using DSquery. I thought this was possible but all I can get is the group that is listed in the managed ...

Child domain versus a new domain tree in an existing forest

Shawn Conaway - 8 Nov 2006 5:55 PM - 4 messages

Does anyone know the functional differences between creating a child domain and creating a new domain in an existing forest? I know that with a child domain, the DNS domain will be nexted under its parent. Since the trusts in ...

Event ID 24 Pwdsync error

Brillmike - 8 Nov 2006 5:45 PM - 2 messages

We added a domain policy last night to enforce password changes. Some users are having trouble logging on to, for example, OWA but are able to logon to the domain. We have two Domain Controllers (all 2003) replicating. The domain ...

OU Design best practice

Eric Lovelace - 8 Nov 2006 5:36 PM - 4 messages

I know this topic has been beat to death but I still would like some clarification on best practicies. If I have say 4 departments Sales HR Finance IT Would it be better to have the ou structure such as ...

How To Migrate Security Group Objects between domains using LDIFDE

hampshirebrit - 8 Nov 2006 5:10 PM - 3 messages

Hi I need to migrate security group objects from a production domain to a test domain using LDIFDE. I've managed to move users and OU objects with no problems, but importing the modified .ldf file for the groups is failing. ...

Moving from Win 2000 to Win 2003

Julie - 8 Nov 2006 4:56 PM - 2 messages

Hello, We currently have two Win 2000 AD servers (DC1 & DC2). Both DC's are Global Catalog & DNS servers. We have to replace DC1 w/ new hardware. We would like to build the new server (DC3) w/ Win 2003 with the same name and ...

Delegation permissions is inconsistent

Steve - 8 Nov 2006 4:52 PM - 7 messages

I Ran delegation of control on some OU's for a few non administrator people in my department to be able to "reset passwords" in active directory. The weird thing is that it is "spotty" in the fact the some user accounts ...

Allowing select AD users to login to a computer

nick - 8 Nov 2006 4:14 PM - 3 messages

i work in a school district, and we just implemented a Windows network. We have our users and computers in OUs with GPOs set for students and staff. One of our secretaries doesn't want anyone else to be able to login to her ...

Interview question Help.....

Guvnor - 8 Nov 2006 4:02 PM - 5 messages

Hey Guys, I need some help. I have been working as an IT contractor for past 10 years in wintel enviroment. For the past 3 years i have been working in a complex environment providing 3rd line support and above within a ...

Importing Data into Active Directory?

Jef A - 8 Nov 2006 3:54 PM - 3 messages

I am trying to add some data to users that already exhist in active directory. I have used the csvde.exe program and notice that i can add new objects however it does not let me modify exhisting attributes. I Basically ...

Enumerating user objects in AD

pampalini - 8 Nov 2006 3:05 PM - 6 messages

Is there a script or a tool which can tell me how many users is in a few given containers ? thx ...

Domain Controller fault tolerance

P. Chico - 8 Nov 2006 2:52 PM - 9 messages

I have some issues with my domain controllers, but i can't find any topics about it. The situation is as follows: - 2 domain controllers (DC1 and DC2) - DC 1 has al the FSMO roles - Both have a global catalog ...

ADAM - ERROR_DS_GENERIC (431) while adding a user to a group

nicolas - 8 Nov 2006 2:36 PM - 4 messages

Greetings, I installed ADAM on Windows XP. After having created an Adam group and user, I modified the config in order to accept user password modification with ADSI Edit and have reset the password. But when I tried to add the new user to a ...

Restrict Multiple Login on Domain

dusty - 8 Nov 2006 2:33 PM - 4 messages

Is there anyway I can restrict a user to logging on to one machine at a time using GP on a win2k3 domain? I've read about limit logon and cconnect, but I was looking to use GP alone. ...

AD Restore disaster please help.........

Zeno - 8 Nov 2006 1:44 PM - 2 messages

Hi There......... I'd like to get some help and advice please............... Our AD environment consists of a Win2k3 R2 Forest, with Root domain companyname.com and a child domain au.companyname.com, with 2 DC's on the root and two in the child. ...

Account Info Tab keeps disappearing!!

Alan - 8 Nov 2006 1:29 PM - 3 messages

I have copied the acctinfo.dll into the system32 folder and registered the file at least 10 times! The first time after registering I am able to see the additional account info tab in ADUC. As soon as I logoff the tab ...

GPO's - one or many ?

Patrik_L - 8 Nov 2006 1:16 PM - 2 messages

Hi Are there any disadvantages in using many independent GPO's rather than putting them all into one (or a few) ? I am thinking that out of an administrative point of view, it is nice to keep them separate, naming the individually etc. ...

Kindly Advice - NT to Windows 2003 domain Upgrade

S - 8 Nov 2006 11:26 AM - 2 messages

Dear experts, We are proposing to Migrate from Windows NT to 2003 Active Directory. Below is a brief decription on the current Setup. The client has operations in 2 locations which are networked through a High Bandwidth Lease Line... The campuses are primarily on Novell NDS ...

LDAPS

ODG - 8 Nov 2006 10:48 AM - 6 messages

I have been trying to setup LDAPS on my domain controllers to allow an AD password reset option from a Juniper SSL box to access AD. I have followed the following article [link] ...

Tombstone & Replication

Cyber-Guy - 8 Nov 2006 9:23 AM - 6 messages

Greetings, I've had a server that went down based on a hardware failure it past the 60 day tombstone mark and now I'm getting a lot of errors about replication even on the DNS log I get that the DNS server was unable to open the active ...

Laptop policy

Ozgur Ozdemircili - 8 Nov 2006 7:53 AM - 3 messages

Hello, Im implementing a big AD installation which will be working in different locations. The pc`s are added to the domain without any problem but what about the laptops? What kind of policy do you use with them? For example now Im changing their first dns to the local and second to ...

Can I updated to IE 7 from IE 6 via WSUS?

taylor.li - 8 Nov 2006 7:49 AM - 6 messages

I have set WSUS service in W2K3 server, Can I install or update IE to 7.0 via WSUS? WSUS was synchronizted to Microsoft web site, but couldn't find IE 7.0 in the list. Which is the best way for IE update to 7.0 ? Any idea is appreciated! ...

DNS Configuration question

Clubsprint - 8 Nov 2006 6:45 AM - 2 messages

I have the following setup. 6 regional sites all with Win2K3 AD DC servers that run DHCP DNS WINS etc. Head Office has two DC's. I'm wondering the HO-PDC has the Firewall (which is our external facing ...

Manipulating the KKC choice.

Luca - 8 Nov 2006 6:16 AM - 8 messages

I have one domain name with multiple sites, all our remote sites replicate from our head office site. The head office site has two DCs. Both these DCs are GCs and DNS servers. Lets call them A and B. ...

DHCP "Server Options" Configuration question

Clubsprint - 8 Nov 2006 4:49 AM - 3 messages

G'day all On the DHCP server snap-in you have a number of configuration options. I have one scope configured at each office site and have configured the "Scope Options" for Router, DNS Servers, DNS Domain Name, WINS/NBT Servers and ...

Issues when users are in 300 AD Groups +

Simon B - 8 Nov 2006 2:43 AM - 5 messages

I am having issues with users who are in 300 + Groups with authetication on some appliactions. Questions 1. Does anyone know if there is a Maximum number of groups a user can belong to theoritically and also practically.;-) 2. Is there anyone out there with users in this many group not having issues ? ...

changing of username in AD

inenewbl - 8 Nov 2006 1:19 AM - 3 messages

Hi all. Recently i tried to change the name of 1 account in my AD. I change the displayname as well as userlogon name(for pre2000 too). I did this as this account will be taken over by another user and did not want to go ...

Permissions issue

Mike Rausch - 7 Nov 2006 10:29 PM - 3 messages

I am having some trouble setting particular permissions on Server 2003, fully service packed. I have the following folder structure: (Top Folder) Folder1- contains no files (Subfolder of Folder1) Folder 2- contains files A, B, and C ...

deleting user does not remove from security tabs

Sher - 7 Nov 2006 9:27 PM - 3 messages

Hi all, I am using AD on 2003 and 2000 servers on one domain. when I delete a user from the AD, I find that it does not always delete that user from the security tab on shared folders that they have rights to. I see alot of ...

24 hour reset problem

Ed - 7 Nov 2006 9:04 PM - 2 messages

My facility has set a minimum password age of 24 hours. My program can set the force password change at next logon. But the user cannot change the password. When the force password change is manually in Active Directory, ...

Moving GPO to new server

Dave S - 7 Nov 2006 9:03 PM - 6 messages

Greetings, I'm replacing my primary Win2k DC with a new Win2003 DC. The 2003 DC is already a DC on the network. I'm wondering where is the domain GPO held? Is it in the active directory database and will it automatically transfer to the ...

ADAM .ldf flies to create Schema (I just keep getting errors)

Dean - 7 Nov 2006 6:41 PM - 5 messages

I am trying to create schema classes and attributes using a .ldf file but I continue to get errors such as: C:\WINDOWS\ADAM>ldifde -i -f jabby.ldf -s localhost:50000 -k -v -j . -c "cn=Configuration,DC=X" #configurationNamingContext -b myaccount mydomain * ...

About adam error

input - 7 Nov 2006 6:33 PM - 2 messages

Hi , i have a custom aplication that bind a do a serach on my ADAM SP1, sometimes the application show this error : Status: Error 49 . 8009030C: LdapErr: DSID-0C090336 What means ? What happened ? Thanks in advance. ...

ADAM and Application Security

zigrat88 - 7 Nov 2006 6:32 PM - 4 messages

All - Just trying to see if anyone has any advice using ADAM for an in-house application's security. The application already exists and the security schema is built into the app and the SQL Server DB. One of our ...

Permissions

C Calamis - 7 Nov 2006 6:31 PM - 3 messages

Ok, brain freeze, does anyone know of some good documentation on assigning permissions to AD groups, and objects Regards C Calamis ...

Just trying to get verification

Nik - 7 Nov 2006 6:18 PM - 4 messages

Hi All, Our branch office was previously serviced by its own by its own Win2k3 Forest & Domain. Recently we integrated our network with our parent company and I recoginse that response time seems to be a bit slow. Can anyone tell ...

Security groups ACL lists

Richard - 7 Nov 2006 6:16 PM - 2 messages

Hi, I have used Ms xcacls vbs script and System Tools "Dumpsec" application to check what types of permissions users and security groups have to specific folders and files (NTFS ACL lists) on for example a windows 2003 file server. ...

View All Terminal Server Sessions for Specific Users

adweber - 7 Nov 2006 6:00 PM - 2 messages

Hello, I am wondering if there is a way to view all of the terminal server sessions for a specific user. For example, if user "John Doe" connects to 30 servers in my data center, and then logs off 20 of them, but just ...

Enumeration of AD

MTopher - 7 Nov 2006 4:47 PM - 5 messages

We are currently in the process of having our domain integrated with our parent company's domain. One of my tasks is to record the AD information for our users, groups, etc. Being fairly new to AD, I am looking for a way to ...

Active Directory user

dpnews - 7 Nov 2006 4:26 PM - 4 messages

What is the difference between a user i create through the Active directory node in advanced management and a user I create through the users node in Standard Management. If I create an Active directory user they appear in both lists but if I ...

Need to transfer Certificate Authority from one DC to another

Quo Vadis - 7 Nov 2006 3:11 PM - 3 messages

We have a flakey DC (primary) which the OS needs to be rebuilt. There's another DC (backup) which will become the primary while original DC is taken down. In addition to the 5 FSMO roles being transfered to the secondary DC, ...

Creation of "limited admin" account

C Calamis - 7 Nov 2006 3:10 PM - 7 messages

Greetings: We have 5 users in the IT group, all of which have domain admin rights. I have been asked to create a set of accounts that will allow the user to only do their tasks, without allowing "keys to the kindom" access. ...

Subject: Schema additions and changes in windows 2003 upgrade

Krishna - 7 Nov 2006 3:10 PM - 5 messages

Can anybody point me to a microsoft document which lists all the new schema additions and schema changes done to the current schema when upgrading from windows 2000 to windows 2003. I dont need the process of migration or ACE changes. Also I dont have the ...

KDC eventid 20

Rick - 7 Nov 2006 2:41 PM - 2 messages

I noticed some strange events in the system log of our DC: ------------------------------------------------------------------------------------------------Event Type: Warning Event Source: KDC Event Category: None Event ID: 20 Date: 5-11-2006 ...

User logon name matches computer name

New DC/GC not showing up in DSAccess

VLV not working with ADAM 1.1

Changing FSMO Schema Owner

DFS

User Profile

computer IP address

Domain Password Policy

Multiple Time Zones in Windows Server 2003 AD

how Account Lockout & Reset Account counter Policy works

warning cannot call DSBind error_outofmemory

VBS Script error in Logon Script with AD change

apply GP to specific user and computer

FRS Probs

Windows R2 upgrade and Adprep

Firewall - [WildPacket]

touble to create a new user in windows server 2003

Curious Problem: dcpromo - internet.site

GPO for WinXP to Default 'log on to' Selection

Overlap subnets in AD sites and Services

Redundancy for DC's and DNS-ADI

Adding subdomain accounts to group

Configuring Group Policy based on time

deploying a batch file in GP..

Event ID 108

Deploying new device drivers

AD site not replicating

manage computer not working

DHCP/AD remote tool

How to join a domain to another exising forest?

Bultin groups

AD replication thru firewall

How can I offer Remote Assistance from the ADUC MMC

backup restore Default domain policy

Modify object in active directory

From Workgroup to Domain

ADAM user authentication

External Trust functionality...

Find.."User member of.."..failed..

Test Domain

Inter-Site Topology Generator Invalid

Trouble with admin access after creating trust.

Reneame domain and connect to org's

Delegation issue

Account is disabled message when doing network backup