Windows Server Active Directory

Does anyone know the average packet size of a AD logon request?

Spin - 25 Nov 2006 6:37 PM - 2 messages

Does anyone know the average packet size of a AD logon request? ...

Repeat event 1411 NTDS Replication error please help.........

Zeno - 25 Nov 2006 3:11 PM - 10 messages

We've just done a dcpromo to remove some DCs and for some reason since then its been repeatedly logging the above event 1411: Event Type: Error Event Source: NTDS Replication Event Category: DS RPC Client ...

Placing an icon on desktop using group policy

Fazal - 25 Nov 2006 12:05 PM - 2 messages

Hi, I want to place an icon which would be a shortcut for an intranet site on all the user's desktop using group policy. I have searched the group policy but there is nothing which I could use to address my issue. ...

security template question

Joe - 25 Nov 2006 2:21 AM - 2 messages

I updated the security template I want to role out to member servers and file servers across my network. Is there a command line I can run, or do I have to open the mmc? What would the command line be? ...

ADAM Query

Gibraltar - 25 Nov 2006 12:43 AM - 7 messages

Hello, I created an ADAM instance with an app directory partition in site A. I created a replica of the instance in another site B. Replication is scheduled for every 15 min and it is happening fine. Now, I hv an application that ...

Find who added an account to domain admins group

Peter Read - 24 Nov 2006 11:28 PM - 2 messages

Ok, anyone got any ideas on the following; An account 'magically' appears in the domain admins group. Event logs are all set to overwrite as needed (sure, maybe a mistake) and no sign of the addition in what's online now. Not sure when the account was added to the ...

ADAM log trace

Jonildo Santos - 24 Nov 2006 9:34 PM - 2 messages

Hello, The ADAM has a log that I can trace the try of logon? When I use userproxy the groups also will have that be in proxy? Thanks! ...

Last user name

Frank - 24 Nov 2006 7:39 PM - 3 messages

I'm trying to kill the last user name displaying in the login box upon login. I've changed the setting in AD 2003 Computer Configuration under Windows Settings, Security Settings, Local Policies, and Enable the policy "Do not display last user name" and it still shows up. ...

OU for Autoupdates Off - [WP]

WILDPACKET - 24 Nov 2006 7:17 PM - 3 messages

Have the default computers container and have all the member servers in there by default. Now Windows Update is set to automatic. I want the windows update to disable on all the member servers which are sitting in the computer OU. ...

Site Question

Stan - 24 Nov 2006 6:33 PM - 8 messages

Microsoft Site & Subnet Definitions "In Active Directory, a site is a set of computers well-connected by a high-speed network, such as a local area network (LAN). All computers within the same site typically reside in the same building, or on the same campus ...

Timeline for the adprep /forest or /domain to run? Any impact?..

DaMoose - 24 Nov 2006 6:25 PM - 4 messages

Hi there I receive an error message when trying to add a new DC via dcpromo with Win2003 R2 to current domain with Win2003 R1 mixed mode. "The version of the Active directory schema of the source forest is not ...

Timeline and impact for upgrading from mixed mode to native mode ?

DaMoose - 24 Nov 2006 5:24 PM - 3 messages

Currently our only DC Win 2003 R2 is running in mixed mode. Anyone know how long the entire process takes in upgrading domain level to win2000 domain level? I read from 1 post that the only impact for this upgrade is just between NT ...

Roaming Profile not synchronising again

Toyin ogunmefun - 24 Nov 2006 4:14 PM - 3 messages

I have a Windows 2003 sbs and active directory running. I setup a roaming profile for my lan users about 40users in number. The roaming profile worked for some months and suddenly stopped working. I have check the disk space which is more than enough, also check the ...

Tool for Creating Users

grep - 24 Nov 2006 2:16 PM - 17 messages

With SBS 2003, there's a tool for creating user accounts that does a really nice job. It allows you to add single accounts, or multiples, creates and sets permissions for their user folders automatically, and will even set up ...

Tickets Kerberos

mourad.ladjici - 24 Nov 2006 1:30 PM - 8 messages

Hi, I am working in Active Directory Windows 2003, when I open a session with my computer (Windows XP with SP2), I don't have a tickets Kerberos, then I can't access at Share Folders. How can I renew a tickets Kerberos ? ...

Applying policy

nicklas - 24 Nov 2006 1:14 PM - 2 messages

Hi, I have a problem. I have an Active Directory in Windows 2003 server and I've applied a security policy to a container where my users are located. The users logon to terminal servers within the domain and their policy is applied ...

home folder redirection

panzer75 - 24 Nov 2006 12:28 PM - 10 messages

Hi, I've managed to redirect user home folders (MyDocuments) in GPO. They are redirected to, example, \\SERVER1\HOME. Now, I also made in Profile in AD changes to user home folder to connect to H: drive, example: \\SERVER1\HOME\testuser. ...

Domain Rename error

rmartinez - 24 Nov 2006 12:07 PM - 4 messages

The test environment is: -one DC, one member server with Exchange 2003 and another member server as a control station. I am testing renaming "a.com" domain to "a.b.com" domain I followed the article "Step-by-Step Guide to implementing Domain Rename". ...

Changing thesystem time

Harry Hornet - 24 Nov 2006 10:54 AM - 8 messages

I need to allow selected users to change the system time for a short period while they obtain evidence (screen shots etc) of their abiility to do so. I thought I could do this through GPO but I am geting nowhere. ...

AD 2003 - NT co-existence

Dinesh - 24 Nov 2006 5:48 AM - 6 messages

Hi I am planning to upgrade the NT domains to AD 2003.For positioning the domain structure, We have 2 NT domains on the same subnet. I need to keep the NT PDC for some backward compatibility for some legacy applications. ...

Copying Data

Cop - 23 Nov 2006 10:46 PM - 3 messages

I have migrated my NT 4 domain to Server 2003 AD. My problem now is to copy my data from the original NT 4 machine to the Server 2003 machines, while assigining permissions from AD, so i can remove trusts and the old domain. I ...

Logon to a Site vs Subnet

CQS - 23 Nov 2006 7:34 PM - 11 messages

Hi All, the subnet information is important to a machine in a process of logon or just the site name? May a machine logs on to domain controllers in a different subnet? What happen when there are many subnets in the same site ...

MSDSS Error...

KingBuzzo - 23 Nov 2006 7:17 PM - 4 messages

Hi Guys: I have successfully setup MSDSS to perform two-way syncs with our old NDS. However, if I try to reset the user's p/w in AD, sometimes I get a failure in the MSDSS log that reads the following: ...

tool or script to find out all IPs and/MACs where a user is logged

bryan - 23 Nov 2006 4:50 PM - 6 messages

hi all Windows 2003/2000 environment I keep having an account lockout issue and am trying to track down what maybe causing the problem. I have established the user has recently changed their PW so I would assume they are logged in somewhere else and this maybe causing the issue (using old ...

Converting ADC to PDC without using Backup?

Vikram Tayde - 23 Nov 2006 3:36 PM - 3 messages

I have a problem regarding Windows Server 2003 Active Directory. I have the following scenario: I have one Domain Controller (Primary) and one ADC (additional, running 2003 Enterprise Edition) I want to know how to convert the ADC into Primary in case the primary is ...

learn Windows 2003 server

Thomas_B - 23 Nov 2006 3:03 PM - 3 messages

Can anyone recommend many sources of information on the web to someone new to Windows 2003 server, domain setup and all about Active Directory. Thanks! Thomas B. ----== Posted via Newsfeeds.Com - Unlimited-Unrestricted-Secure Usenet News==---- [link] The #1 Newsgroup Service in the World! 120,000+ Newsgroups ...

Can't find labs_demo directory

Janko Schwalbe - 23 Nov 2006 2:55 PM - 3 messages

Hi to everybody! I have a problem: it is said everywhere that there must be a directory "labs_demo" with subdirectory "labs" in the ADAM path. But this path does't exist in my ADAM installation on Windows 2003 Enterprise Server. ...

Where do I define types of search on AD attributes?

gmiller64 - 23 Nov 2006 2:53 PM - 3 messages

Hello, I know where to index attributes, but where do I specify that a certain attribute can be searched for (eg) presence and equlaity, but not substring? Is it possible to define this via an AD snap-in in MMC? ...

Problems enumerating user groups from trusted domain

Kjell Arne - 23 Nov 2006 1:28 PM - 5 messages

THE SITUATION: We have 2 domains (A and B) with a two way non-transitive trust. Users have accounts in domain A and log on to a Citrix farm located i domain B. Domain A has 3 sites defined in AD (Site 1, 2 and 3). The sites are WAN ...

Wallpaper - GPO

Matt - 23 Nov 2006 12:01 PM - 2 messages

Hi, I am testing a policy that sets the wallpaper to be \\server\share\company_logo.bmp from a share and have tested it successfully. The option in the Display properties cannot be changed by the user, so, so far, so good. However, about 50% of our users still have access to the ...

Bridgehead Server

Peter F - 23 Nov 2006 11:37 AM - 7 messages

Hi All, Please could someone explain to me in "laymans terms" what a bridgehead server is and, what is it's function. Thanks very much for any information that you can provide. ...

internal domain and external domain

ckwong19802003@yahoo.com - 23 Nov 2006 6:20 AM - 7 messages

hello Hav anyone be doing forward internal domain record to the external?for example you have a internal domain name as domain.com and external domain as domain.com,when internal user browse throught the internal and check the host ...

Domain Password Policy Question

KC - 23 Nov 2006 4:32 AM - 2 messages

I am about to change the default domain policy, and more specifically the password policy for my domain. (AD '03) We currently have the require complex passwords enabled along with the rest of the necessary password related policies configured. We are moving away from complex passwords to a passphrase where the minimum ...

Floating Computer between domains

JoshG - 23 Nov 2006 1:05 AM - 13 messages

Hi All, In an earlier thread I asked about the ability to take a computer out of a domain for a long period of time and return it without any hastles. Now I'm trying to work out if I can have Two Domains... like this... ...

Nested Group problem

Will Sellers - 22 Nov 2006 11:48 PM - 4 messages

I'm running a windows 2003 standard server. I have the following groups teacher, teacher students Why won't AD let me nest teacher students in teacher? ie teacher students is a member of teacher ...

Removing users in AD

Fabio - 22 Nov 2006 10:53 PM - 5 messages

Is there automated ways or scripts that I can remove users in distrabution or security groups in Active Directory? ...

Domain Controller restore from Ghost image rather than Backup - potential issues ?

User - 22 Nov 2006 10:34 PM - 5 messages

We are currently considering restoring a small network domain controller from a ghost image which was taken 4 days previously. I know this is not the best way to restore a domain controller but would appreciate any comments regarding issues that may crop up. The network only has 15 servers ...

Event ID 1054 Source Userenv Sporadic Occurances

Michael Watson - 22 Nov 2006 10:16 PM - 5 messages

I have 3 Windows 2003 servers running as domain controllers. These are all configured as identically as possible. One of the three reports the above event sporadically. I have reviewed all the forums I can find. Obviously, the configuration is basically correct - it works correctly most of the time. ...

Problem with 2nd Domain Controller

Ed Walker - 22 Nov 2006 9:02 PM - 4 messages

Hello - I added an additional server and I wanted to configure it to be a global catalog server, and a 2nd dns server as a backup in the event our main server went down, users could still access exchange and shares on the other server. ...

How to create user accounts from a file

Ross - 22 Nov 2006 8:44 PM - 2 messages

Hi there, I have 10,000 users listed in a txt file, and I need to create Active Directory user accounts for users in this file. Is there a simple way to create the accounts based on this file without ...

Event ID 1925 Replication access denied

HarryH - 22 Nov 2006 8:06 PM - 3 messages

Hi everyone, This is the setup: Forest root domain in native 2000 mode with several domain controllers running 2000 or 2003. Child domain still running in mixed mode, also with a mixture of DCs. One of the child domain DCs is giving me headaches. I am getting replication ...

Slow logon

smith777 - 22 Nov 2006 8:02 PM - 7 messages

We're running Windows 2003 R2 and have 2 sites setup. I'm trying to setup logon scripts to map just 1 drive and i'm having an issue where after logging in, it will stay at the "applying computer settings..." for about a minute or ...

Deleting and Recreating Computer Accounts

Mark Booth - 22 Nov 2006 7:57 PM - 3 messages

I was building a new laptop for one that was beyond repair, I connected to the domain using a VPN and joined the new laptop to the domain, I wanted the new laptop to have the same computer name as the old ...

Rebuilding DC in domain (New Hardware Installed)

Craig Jacobs - 22 Nov 2006 7:03 PM - 3 messages

To anyone, I have a single domain with 2 Servers, both Domain controllers running W2K3 R2 Standard Server. Server #2, DC (w/ DNS) and DHCP Server #1 has a RAID5 configuration (Volume C & D) Drives. (That's BAD). ...

Errors after dcpromo first windows 2003 DC

Simon - 22 Nov 2006 5:59 PM - 4 messages

Hello all, We were running an entirely Windows 2000 Domain and promoted a new 2003 member server to a DC. Upon rebooting this server we couldn't login. Using Directory Restore Mode we were able to determine that ISPEC was causing the problem and disabled the ...

The implications of adding sites to an existing live infrastructure

adrianjjames - 22 Nov 2006 5:10 PM - 15 messages

I am looking for any implications, caveats, best practice, preferred order or general hints that anyone could give me for the following. I have two physical sites connected with a VPN link that can be intermittent (off and on :) ). Each site has it's own /16 subnet with ...

ADMT - force password migration?

jefsower - 22 Nov 2006 4:31 PM - 4 messages

Is there a way to force ADMT to update the destination password? Im attempting to follow Microsofts instructions of using the Exchange Migration Wizard to create new accounts and mailboxes in a new domain. Then Im using ADMT to import the user accounts and passwords. Microsoft says that ...

Is there a way to stop users from renaming exacutables through GP

Bryan - 22 Nov 2006 4:25 PM - 4 messages

I am trying to keep users from changing the name of executable files and so far the best I can come up with is a black list/ white list type of solution. What I really want is the ability to set a policy that ...

How to grant a domain user account to query Active directory Groups and its Users

Sathish - 22 Nov 2006 3:57 PM - 2 messages

we have a forest with three zones linked to it abc.com app.abc.com svr.abc.com usr.abc.com Can we create an account as domian user @ aap.abc.com and grant AD user / group querying priviledge? is it feasible to set a account to hv this rights by gpo ? ...

False AdPrep message

Greg Smith - 22 Nov 2006 3:45 PM - 2 messages

I have a two server AD network. Both servers are running Server 2003. I am adding a third server running Server 2003 R2. When I try to add active directory service for the existing domain to the new 2k3R2 server I get a message saying I must run AdPrep to prepare the ...

Changes to Password Policy did not update?

rlk - 22 Nov 2006 2:56 PM - 10 messages

Hi - we have a root and 2 child domains. We applied to one of the child domains a new password policy. The policy increased the expiration date from 42 days to 140 days and also changed the complexity and not able to repeat ...

Hide Domain

Kerry - 22 Nov 2006 2:10 PM - 3 messages

HI, I apologize in advance since this is probably the wrong spot to post this but I tried posting in another newsgroup and had no luck ... I'm hoping someone here will be able to help. Hello, We currently have an windows 2003 Active directory domain but still have our ...

Shutdown PCs - [WP]

WILDPACKET - 22 Nov 2006 1:29 PM - 14 messages

I want some sort of script which can put a scheduled job on all the pcs running winXPP in my domain. I want this scheduled job to run at 12:00 a.m. which will shutdown all the computers. ...

How do I Redeploy Managed install to only one Computer in an OU?

Sean - 22 Nov 2006 1:10 PM - 2 messages

Hi Did a managed install to a machine that had a local copy of the same software, caused some conflicts to I manually pared out the registry keys associated but in my zeal I also deleted the keys for Group Policy ...

Reinstallation of FSMO DC

Ben Dailey - 22 Nov 2006 12:59 PM - 2 messages

Hi, One of my client's domain controllers (Win 2003 R2) crashed the other day and I managed to restore it from backup but not completely. It hasn't been right since (e.g. I can't add new member machines) and I think I'll just ...

Delegate control questions

Tommy Forsman - 22 Nov 2006 11:44 AM - 5 messages

Hi Have created an OU for our branch office. Have delegated control to the local admin, so he can create users and groups, reset passwords, add computers to domain. Some problems... 1) Where and how can I see what rights I have delegated to him? ...

Drop a Domaincontroler from the Forest

microsoft@fitschilab.net - 22 Nov 2006 11:41 AM - 2 messages

Hi List, i have a problem with a Domaincontroler that is now down, the bdc is running now as the pdc, that is ok but the old pdc is also in the ads fores, how can i drop it? many thanks ...

User - Group - Shared Folder

panzer75 - 22 Nov 2006 11:31 AM - 11 messages

Hi, this is maybe simple, but i just cant make it work. Situation is following: I have user in AD in one OU. In AD I made group and made user member of that group. On file server I made shared folder and set perm. to this group. ...

Add member from another Domain

Moutarde - 22 Nov 2006 11:22 AM - 9 messages

Hi, I've 2 DC representing two domains "A" and "B". I have a trust relationship (external) beetween this 2 domains. I want adding a member (domain A) from a universal group (domain B). When i select "location" i cannot see domain A. ...

WMI Filter usuage in Group policy

taylor.li - 22 Nov 2006 10:46 AM - 5 messages

If GPO only is applied to the OU which their OS is XP or win2000 but not Win2K3, windows server 2000, how to do with WMI Filter function? Who can give me example? Appreciated for any suggestion! Taylor ...

Sysvol folder not shared

BrettW - 22 Nov 2006 4:28 AM - 5 messages

We have completed a migration from Windows 2000 to Windows 2003 on a new server and have got to the point where we were able to move the DC roles to the 2003 server and demote the old 2000 server to a member server. Users can ...

Netdom trust 2003 server to NT4

Trigger - 22 Nov 2006 12:26 AM - 3 messages

I have 3 servers and 2 domains. I am currently migrating from the NT4 to AD. NT4 = PDC on the current domain DCxxxx = (domain controller) OAxxxx = Promoted to Domain Controller from the DCxxxx What iam trying to do now is create a trust using netdom, between the NT4 ...

Possible to restict client logon byIP/Subnet?

Jame Howard - 22 Nov 2006 12:15 AM - 6 messages

I know that in the Netware world, you are able to restrict logon's by IP address and subnet. Is there or will there be a similar function in Active Directory beyond NETBIOS restrictions. This seems like a logical enhancement ...

R2 schema upgrade question

ewallig - 21 Nov 2006 11:16 PM - 6 messages

Hi all, This is probably a stupid question on my part but do you have to have a R2 DC to do a R2 AD schema upgrade? I have 2 DC's that are W2K3 SP1 and several file servers that are R2. I want to utilize the new Print Management Console ...

Extracting information via DSQUERY

JCO - 21 Nov 2006 9:38 PM - 5 messages

I have am attempting to use native AD query utility dsquery to extract user account information from AD. I am successful if extracting date with the following command: dsquery user " ou=remote users, dc=test, dc=test, dc=com" | dsget user -email ...

MOSS and ADFS

Eric - 21 Nov 2006 9:26 PM - 11 messages

I know this might be a big headache waiting to happend, but I am trying to get ADFS to work in a simple environment using MOSS as the ASP applications I wish to access. The setup is one Web Client and one FS . I have been ...

How to find information such as port number of one ADAM instance?

GaomingFu - 21 Nov 2006 9:16 PM - 4 messages

I installed a few instances of ADAM in my computer. Now I want to find information such as instance name and LDAP port number of each ADAM instance programmatically? Thanks ...

Delegating printer rights to Domain Controllers

jrm73 - 21 Nov 2006 9:08 PM - 7 messages

I am having trouble giving remote LAN Admins the ability ti install printers in their local WIN 2003 DC's. I've added the LAN Admin group they belong to Printer Operators. I've also used the Delegation of ...

favorites

SeanOc - 21 Nov 2006 7:59 PM - 7 messages

I need to add a link to everyone's IE favorites. Is this something that can be done through active directory?? ...

Site Link Bridge

Nigel - 21 Nov 2006 7:58 PM - 5 messages

Hi, Scenario, bridge all site links is disabled. Three sites A,B,C Site link A-B Site link B-C There is no network connectivity between A and C. A site link bridge is then created containing the two site links. ...

Rasing the Forest/Domain Level to Windows 2003 Native

Frank - 21 Nov 2006 7:51 PM - 9 messages

Hello, I have a Single Domain-Forest containing 15 Windows 2003 DC's. The current Forest/Domain Functional level is Windows 2000 Native. I want to raise the Forest/Domain Functional level to Windows 2003 Native. All Windows 2000 DCs have been physically replaced or DCPROMO'd down. ...

two domain controller of same name on the network

Ams - 21 Nov 2006 7:30 PM - 6 messages

I am in the network where I found there are two domain controller of same name, only the netbios name are different (abc.domainname.local and def.domainmae.local). One has exchange server loaded into it (not in use) and ...

Unable to add AD Schema to mmc

AlphaDX - 21 Nov 2006 7:19 PM - 6 messages

Windows 2003 Standard SP1 updated with Nov 2006 updates DC1 is the FSMO (all five) role holder From DC2 if I try to see the FSMO role holders from AD Comp & Users by right clicking on domain name for Operations Master, often its showing ERROR for ...

Tuning LDAP

Dent - 21 Nov 2006 5:25 PM - 7 messages

We have some questions surrounding a Web Applications. We have some Web applications using a single LDAP instance. The programmers are telling me I have not tuned the site properly. I have been given custom instructions from BMC Software on how to tune LDAP. I have done so. However I am looking for ...

How to start remote registry server and set to automatic

JCO - 21 Nov 2006 4:50 PM - 3 messages

I am attempting to create a batch file and deploy via group on starting workstations services and setting to automatic. Lets take the remote registry service for example. To start it would be a simple, net start remoteregistry However, how would I in the same command set it to automatic as well? ...

Long Login Time to Server

Perry - 21 Nov 2006 4:49 PM - 10 messages

I have one server out of 12 that no matter how we login it takes just about 90 seconds to get to the desktop. This server is a domain controller and holds all the roles. It happens when we term serv into it and it also ...

Event ID 5774 / DNS Registrations fail and AD does not replicate

HarryH - 21 Nov 2006 4:09 PM - 4 messages

Hello, I habe run into the following real puzzling issue: We have a 2000 native mode forest root domain and a 2000 mixed mode child domain. The main DNS server is running 2003 SP1 and has it's object in the ...

AD DNS 4515 Cleanup Question

Mark F - 21 Nov 2006 3:51 PM - 2 messages

We recently cleaned up our AD integrated DNS on a native 2003 domain. We used the tech article 867464 ([link]). Our _MSDCS zone is now stored at the ForestDNSZones level and the ourdomain.local ...

Eventid: 4015 Source: DNS

Henrik Arenblad - 21 Nov 2006 3:36 PM - 3 messages

Hi, I have a problem I need your expert help with. See the error message below. Product: Windows Operating System Event ID: 4015 ...

<AD Users and computers> translated to <Adsiedit properties>

KristianH - 21 Nov 2006 3:17 PM - 2 messages

Hi Im currently developing an application in C# that manipulates Active Directory in Windows 2003. This is not a problem as such, but now my client wants to be able to set the properties (enable/disable) of pop3 and imap4 ...

User Rights

Zachary Dundore - 21 Nov 2006 2:47 PM - 5 messages

How can I give a user, that isn't an administrator, sufficient privileges to move computers in active directory? ...

Domain & network design

Gilles - 21 Nov 2006 2:39 PM - 2 messages

NEWBIE :-) I would like to setup the following network: Internet Access Router1 Domain.Machine1 Domain.Machine2 .... Domain.Machine10 Router2 Domain.Server2003(DC) Domain.Exchange2003 Domain.Machine11 Domain.Machine12 ..... notes: - all machines are XP Pro - servers use 2003 Standard or Enterprise(if needed) ...

AD Snap-In to a non-trusted Domain

Brendon B - 21 Nov 2006 2:33 PM - 6 messages

Hi Everyone Can't seem to think of how to do this: Some users that log onto our domain need to do administration on an old domain with which we don't have a trust. "Run-as" does not seem to work as it is not a recognised user. ...

Lock Drives on workstation

panzer75 - 21 Nov 2006 1:45 PM - 3 messages

Hi, is it possible to lock drives (Floppy, CD and USB) on client PCs through Active Directory or Group Policy? Or I have to use third party application? Tnx! ...

User locales

Jon - 21 Nov 2006 1:11 PM - 2 messages

Is there a way to set a user or group to a certain locale so that when they log in they will automatically be in that local without having to go into regional settings? Or is this something where we need to write a logon script and assign that ...

Exporting group user list

miguel.arino - 21 Nov 2006 11:05 AM - 5 messages

Hello, I am new in the group, maybe my question is addressed in a FAQ... can you point me to the group's FAQ? I have a security group and I must give someone the full list of users. However, it's large ((about 100). So I tought "I do a query and export ...

permit computer objects to rename themselves.

cyn3rgy - 21 Nov 2006 10:34 AM - 4 messages

Hi All I have a script which runs as a Computer StartUp script (applied by GPO). The script checks the current machine name against our asset database and renames the computer (local and ad object). The script uses a fantastic utility called wsname.exe (available from ...

Detaching part of a forest ?

AlexT - 21 Nov 2006 6:55 AM - 4 messages

Folks Is there a way to detach an OU from a global AD forest in a "clean" way. Assuming I have a "superco" forest with OU company1 and company2 how would I extract company2 to hold on it's own ? ...

ldap DC less Query

Wayne - 21 Nov 2006 4:18 AM - 6 messages

The vendor has an application that needs to read AD LDAP to return users and group membership. I do not want the application to rely on only a single specific DC in the domain. Can I provide the connection path to LDAP without specifying the DC name? ...

Active Directory Computer Accounts

JoshG - 21 Nov 2006 3:24 AM - 5 messages

Hi all, This is a scenario that i'm trying to validate to make sure that it will work I have a Window 2003 Active Directory domain, i have a number of computers in this domain. After each computer joins the domain, suppose I then took that machine ...

How can we know which user has log in the domain?

George - 21 Nov 2006 2:02 AM - 6 messages

I have a DC and I would like to know which user has log into the domain and when. Is it possible? Thanks ...

User settings

blankmonkey - 21 Nov 2006 1:38 AM - 4 messages

I want to change the user settings for a non-admin user, without having to log in as that user. I am an adminstrator on the system. Speciffically, i want to turn off the screan saver on my Terminal server sessions for UserX, ...

Finding and Disabling Inactive AD User Accounts

jtux - 21 Nov 2006 1:00 AM - 7 messages

howdy list, Anybody has experience or script to " find and disable Inactive AD User Accounts for at least 30 or some period of days? help and suggestion will be appreciated. jtux, ...

Printer share change - Server 2003

tednov - 20 Nov 2006 10:50 PM - 10 messages

Greetings! I'm about to swap out a existing networked printer with another printer. My goal here was to remove the share name of the old printer and add that share name to the new printer. I was hoping this would minimalize ...

Windows cannot access the file gpt.ini error

Jane Doe - 20 Nov 2006 10:47 PM - 7 messages

Windows 2003 SP1 on all servers I see the error's on the DC's and servers: Windows cannot access the file gpt.ini for GPO cn={D671893C-A049-4286-B76F-BE0BC8A987AE},cn=policies,cn=system,DC=frontierhomes,DC=local. ...

Script-in SELF Permission?

gf - 20 Nov 2006 10:36 PM - 4 messages

Hey guys.. Hoping you can help out here. We migrated from NT/Ex 5.5 about a year ago. We are now in the process of shutting down our legacy NT domains. We have come across a problem while decommissioning the NT Domains: ...

Change in Description

WooYing - 20 Nov 2006 10:23 PM - 3 messages

Hey AD Experts I was wondering what would be the best way to add a change to everyone AD description field. Currently I have users who has ...

Track/Report logins

AJ - 20 Nov 2006 9:32 PM - 4 messages

Hello, Is there any recommended software to track/report on user logins? I need software that makes it easier to find out when a user actually logged into the domain. ...

Help with LDAP PagedSearch

ctvader - 20 Nov 2006 9:27 PM - 8 messages

I'm done some research and I cant find what I need. We run an ldap search from a unix box and we need to do a pagedsearch but I cant find the syntax I need on the web. Can someone help out with the below ...

SSL for LDAP

Sabo, Eric - 20 Nov 2006 7:52 PM - 14 messages

We need to install SSL on our domain controllers so a external server can make SSL LDAP connnections to them. Are there any technet articles on how to do this? This is Windows 2003 SP1. Also I saw SelfSSL.exe that would ...

Managing ID in Vista

delegate admin rights to an user in an OU

All DHCP Servers Info HELP!

deleting domain and adding a it to a new site

Encrypting files and folders on remote computers with EFS

Query for Office Version

ADPREP /forestprep And R2

Adding lots of users

IISRESET

time sync

Slow client login - VLANs are involved

dsmod or script for renaming AD users

Sizing the ADAM server

Home Floder

Move User, Groups, Workstations, ... in root-domain

replication time

software categories

Script a Bulk Modification of ALL AD users?

ADAM Server Sizing

Event ID 1030 and 1097 every 5 minuttes

How to restrict DC privileges for Site Admins?

add machine to domain without netdom command

AD Replication

NT domain migration to Win2k3 AD

re: browse child domain from ldap browser

browse child domain from ldap browser

Update from NT4 to Server 2003 domain

Active Directory in Windows Server 2003 R2

policy fo NTP

computer account disable

new but disabled computer accounts