Home All Groups Group Topic Archive Search About

Windows Server Active Directory

microsoft.public.windows.server.active_directory
Score Windows Vista Bitlocker Active Directory Schema
Ragnar - 9 Dec 2006 10:48 PM - 6 messages
Hi Where can I find the Active Directory Schema script/procedure required to enable Bitlocker recovery to Active Directory? Isn't it available for download yet? Thanks. Regards, Ragnar ...
Score Group Policy
Toni Chaffin - 9 Dec 2006 10:01 PM - 3 messages
I have a DC that contains a number of OU's. One of these OU's contains a 2K3 Server that I wish to apply a Group Policy to, however I only wish this policy to  apply to all domain/authenticated (normal)users and not to members ...
Score DFS Root Security
Robert - 9 Dec 2006 8:51 PM - 3 messages
I just setup DFS (1-2000 server source to 1-2003 and 1 2000 destination in a hub topology) and everything works fine when I go to \\server\drive$\sharename unc but when using the root like \\domain\root or ...
Score tombstone life and R2
goldfinger - 9 Dec 2006 8:34 PM - 3 messages
First I installed Windows Server 2003 R2  and later made it to the first domain controller in the forest. Later I noticed that the tombstone lifetime was 60 days and not 180 days. because I tried to recover DC's in my test lab. ...
Score ADAM not honoring account lockout policy on Workgroup 2K3
jpierson - 9 Dec 2006 4:28 PM - 7 messages
I must be overlooking something real stupid.  All the docs state that ADAM will use the policies of the host machine, but try as I may, I can't get ADAM to lockout an account due to bad passwords. I ...
Score DNS scarverging and aging
Darren@community.nospam - 9 Dec 2006 3:17 PM - 2 messages
I have a couple questions about Windows 2003 DDNS AD zones. a) Am I correct by saying ....(Fortunately) The no-refresh settings does not prevent a machine from registering a new IP within the no-refresh period. Will it only prevent updates of existing records when IP is unchanged  ? ...
Score Can't find Domain Local Groups in Active Directory
AaronB19 - 9 Dec 2006 2:13 PM - 2 messages
I created Domain Local Groups in a container in Active Directory from a member server but when I go to assign permissions I cant see my DL Groups from member server. I can see them in Active Dir. on My Domain Controller so ...
Score Two DCs - Schema replication result with repadmin - Last Attempt @ (never) was successful
User - 9 Dec 2006 11:34 AM - 8 messages
Hi.  We currently have a single domain with one DC (Windows 200 Srv Std) and are currently in the process of upgrading to 2003 R2 Ent.  We have added a second DC with 2003 R2 Ent and there have been no unexpected errors in the ...
Score Setting up Network Neighborhood
Will Sellers - 9 Dec 2006 4:03 AM - 2 messages
We have multiple shared folders that we want users to have access to. Is there a way to make these shared folders automatically appear in the network neighborhood so that users do not have to go through the neighborhood setup? ...
Score Scheduled tasks?
Dan - 9 Dec 2006 1:28 AM - 3 messages
Do scheduled tasks go "stale"?  I have a set of tasks on a server that weren't running; when I tried to manually run them they just sat there with no action.  The error code on the far right of the screen was "could not ...
Score GPO for screensavers
Dan - 9 Dec 2006 12:44 AM - 2 messages
Hi,   I have a question about screensaver enforcement and GPO's.  I know I can force a screensaver timeout and to have the user have to enter a password to log back on to the system; but when I use those two features the user has the ...
Score Could this be possible?
Dan - 9 Dec 2006 12:11 AM - 2 messages
Hey everyone,   So I'm not sure this is possible but it seems to be what happened... a few nights ago I updated a logon script and replaced the one in the sysvol share (under domain/policies/guid/user/scripts/logon).  Up to that point in ...
Score Using ADAM for authenticating non-AD users
jremmc - 8 Dec 2006 9:30 PM - 3 messages
We are a small company. We now find a need to give some customers some access to some data in one of our 3rd party apps that maintain its own list of users but can use an ldap directory instead. (The app can authenticate ...
Score Lose connection with server every night
mjboone - 8 Dec 2006 8:53 PM - 4 messages
I have a SBS with 6 machines hooked up to it.  If we dont shut down the computers each night, by morning we have lost connection with the server and printers.  This is becoming a problem. The server is still online in the ...
Score How To Determine from Which Computer a User Logged Onto Domain
Jing Ming - 8 Dec 2006 8:11 PM - 4 messages
I know that security log has this information, Event 528, 540 could show either hostname and the username together, but is there any easy way to retrieve this information real time? LogParser need to import the security log and that is just more complicated than searching in the security log. ...
Score Network shares not getting the correct permissions
Joe McHae - 8 Dec 2006 7:43 PM - 6 messages
I have a 2003 domain. For the last week I have been having a problem with network shares.  I create a shared directory and put some word, excel, etc files in that directory.  i then grant full control to certain users who are ...
Score Do not want Multiple Logon Scripts to run with GPO's
gaven.ellis - 8 Dec 2006 6:41 PM - 3 messages
I have what I think is something fairly Simple. A GPO set to run script A at the domain root level, I want all users in the domain except one OU to run this script. This OU should run script B.  Now I have a GPO ...
Score Applying Audit to container of type LostAndFound
Ib_Tornøe - 8 Dec 2006 6:20 PM - 4 messages
Is it possible to apply Audit settings on a container of type LoastAndFound. Trying to do this causes a message box saying "The server is unwilling to do.". The error message only shows up if trying to apply the Audit setting ...
Score Group Policy Templates Customization
Curtis Rich - 8 Dec 2006 6:07 PM - 3 messages
Hello, I have folder redirection in place, and what I would like to do is redirect all user's "Favorites" and their Lotus Notes data folder.  I'm not sure if it is possible to create a custom template for the objects.  If anyone has any ...
Score Identity Integration Feature PAck
stefano - 8 Dec 2006 5:19 PM - 2 messages
Does anyone know if it's possible to use IIFP to synchronize AD users and groups with an Oracle LDAP server ? A customer asked to implement a sychronization mechanism to populate exchange 2003 GAL with partner or clients accounts maintaned in an external ...
Score Removal of a DC causes various problems including DNS
Jim Helfer - 8 Dec 2006 4:38 PM - 7 messages
I have two windwos 2003 sp1  servers. Each one was a Global Catalog server, a Domain Controller and a DNS server.   We bought a software package that refused to install on a server that was a DC. (Deltek Vision, as it happens).  So I removed the globabl ...
Score **DELETED SERVER #1-87
Tim Chin - 8 Dec 2006 3:35 PM - 5 messages
When I go to replication monitor and choose 'Show retired replication partners' & 'Show transitive replication partners and extended data', I see a bunch of **DELETED SERVER #XX partners.  Obviously, these are old domain controllers.  However, there are no objects in Sites & Services, in the ...
Score Remove a Computer from Domain and Kill Group Policy
jslagter - 8 Dec 2006 3:28 PM - 2 messages
I have one computer that was giving me domain trouble, so I moved it back to a workgroup for now.  I also deleted the Computer name from AD, but for some reason I can't access system restore because  it was ...
Score short on hardware - what can run with AD?
David - 8 Dec 2006 3:10 PM - 3 messages
small company with only a few servers and under 40 users. In general what network services are ok to run on a 2003 domain controller? I realize ideally there should be nothing but AD on it (mainly for security reasons if I understand correctly) but there are some things that really ...
Score Computer belongs to one domain, user to another?
Ted - 8 Dec 2006 12:27 PM - 2 messages
Hi, if a computer is member of an AD domain (call it A), and a user account resides in another domain (B), 1 can the user log in to this computer provided there is a trust from A to B? ...
Score Mac ignoring windows permissions
Ashu - 8 Dec 2006 1:47 AM - 2 messages
I have a client that just put a mac on his network.  For some reason when he logs in he is able to have access to all the network folders despite the account not having permissions to view them.  ...
Score ADAM/LDAP management tools
Jims - 7 Dec 2006 9:06 PM - 7 messages
Is anyone aware of a tool or application for making bulk ldap modifications? We currently use ADSI Edit and Softerra Admin 3.1 but these are not ideal for making bulk modifications (unless you know something I don't).  We need ...
Score Connecting to a Domain
Steve Bragg - 7 Dec 2006 8:34 PM - 3 messages
Hi all I have a Windows domain on an SBS 2003 Server. The server has drives ready shared etc. and permissions defined with users setup and their rights levels defined. Server has not long been built and has replaced an old NT4.0 machine. ...
Score new AD member wont allow no-admin logins
sammy - 7 Dec 2006 7:24 PM - 4 messages
We've recently reinstalled WXP-SP2 on a machine and rejoined our domain. Accounts with admin priv can login to this machine (domain login, not local login) but all others get either user not allowed to login to this computer ...
Score Logging number of failed logon attempts
Paul Seaden - 7 Dec 2006 5:17 PM - 4 messages
Hello, My company has recently reviewed its password policy and wants to reduce the number of failed logon attempts before account lockout from 5 to 3. As part of a feasibility study into this, I would like to audit the number ...
Score Remove Add or Remove Programs GPO Question
Cliff - 7 Dec 2006 5:04 PM - 3 messages
I am trying to enable the "User Configuration\Administrative Templates\Control Panel\Add or Remove Programs\Remove Add or Remove Programs" GPO but with the following stipulations: Authenticated Users - Apply Domain Admins - Deny Desktop computers - Apply Laptop computers -Deny I have created an OU with the desktop computer accounts and an OU with the ...
Score Local User Right on Win2k3 box
JimR - 7 Dec 2006 4:50 PM - 5 messages
I am trying to add a user to the "act as part of operatiing system" right. I open "admin tools", "local security", "localpolicies", "user rights asignment" and go into "act as part of the operating system" however "add user or group" and "remove" are both ghosted and cannot be changed. ...
Score Automatic installation of device
tamimh - 7 Dec 2006 2:38 PM - 7 messages
Hi I am administering a small domain of students. Each class has its own OU with the users inside (student1-30). I would like to add devices like the printer in each class to each class OU so that the printer will automatically install to each user that logs on. ...
Score Multiple Domains on one Physical server
Van - 7 Dec 2006 2:30 PM - 3 messages
Can someone please tell me if it is possible to create 2 separate domains on one physical AD server?  TIA ...
Score AD User Account lifecycle Management app - Possible Solutions?
SanjayNarang - 7 Dec 2006 11:06 AM - 6 messages
I’m bit new to AD and hence wanted to consult you guys before starting a new application to know what are the best options available: We need to develop a simple user account lifecycle management application for Active Directory based deployment. The plan is to develop a web based ...
Score Group Policy - Preventing User Changing Date/Time
Mal - 7 Dec 2006 10:03 AM - 5 messages
One of our users on several occasions has changed the date on her machine accidentally. She double-clicks on the Time in the system tray launching timedate.cpl to check what day of the week a certain date falls on and clicked OK ...
Score Installing a DC 2003 on 2000 Forest (ADPrep problems)
Nuno Teixeira - 7 Dec 2006 9:56 AM - 14 messages
Greetings to all, I have a problem, I'm starting to upgrade DC to 2003 by phases on new servers, and when I was preparing the forest with ADprep I ran into some trouble: The "adprep /forestprep" command ran fine; ...
Score Reverting from a schema change crash
Ib Schrader - 7 Dec 2006 9:51 AM - 13 messages
Hi I've tried locating documents or articles that describe how you recover from a schema change gone bad. I know this is a very serious situation, but I was hoping there at least was some way of getting back. ...
Score How to add the value of "domainDNS" into the value for PossSuperio
srihari - 7 Dec 2006 9:46 AM - 2 messages
Hi I am new to AD and ADAM. When i am trying to synchronize the data from AD to ADAM, I got an error. I went to this forum and found that this is because of  my OrganizationalUnit is not uder the a possSuperior of builtinDomain. ...
Score changing distinguish name
Myrt in MT - 7 Dec 2006 2:55 AM - 2 messages
I just started working for a small hospital as an asst system admin. Recently my boss asked me to "cleanup" the active directory in our Win2003 domain. The problem is that some of the entries in the User container list users ...
Score 2000 Upgrade
Wild Packet - 7 Dec 2006 1:10 AM - 4 messages
Hey guys, I am looking to upgrade my DCs from Windows 2000 to Windows 2003. I been reading the upgrade KB 325379 and there is a recommendation to disable SMB signing. I am a mixed client environment using Mac OS X. While I ...
Score Move Exchange mailboxes from one Domain to another.
nmowatt - 7 Dec 2006 12:05 AM - 3 messages
Okay, this is the scenario... I got called in to fix a big mess.  I am not the one that set this up! (Just wanted to clear that up. ;)) Windows 2003 network.. 2 Domains Domain one: Active Directory DNS ...
Score Remove DC role from 2003 server
Jim Helfer - 7 Dec 2006 12:04 AM - 8 messages
I would like to remove the "Domain Controller" roll from a Windows 2003 sp1 computer.  I'm not sure how to go about it. Thank you ...
Score ADAM : Beginner and need help
John Fly - 6 Dec 2006 7:18 PM - 4 messages
Hello, I've been playing with ADAM for about 3-4 days now, I'm trying to see if we can use it for user management for a number of software applications.  I am mostly needing to store (Users, Groups, ...
Score Changing DNS zone from primary/secondary model to AD integrated
Rob Fraser - 6 Dec 2006 6:52 PM - 4 messages
Hello all, I would be grateful for any advice you could provide.  I have been asked to change the DNS zone at my company from primary / secondary zones to Acitve directory integrated. The AD is is Windows 2000. It has a parent and a child ...
Score Problem Creating Domain
ericgo - 6 Dec 2006 6:17 PM - 6 messages
Hi, I have a server with a fresh install of SBS 2003 R2. All the latest patches and upgrades installed.  The idea is to use it just as an Exchange email server for the company. (mycomp) The company already has ...
Score Can I run a program as another user?
jm - 6 Dec 2006 6:16 PM - 8 messages
Can I run a program as another user?  I have a program that needs to be run from my login.bat file, but the regular domain users doesn't allow it.  Thank you for any help ...
Score NT4.0 and AD 2003 together...
foler - 6 Dec 2006 6:15 PM - 5 messages
Hello... We have simple old NT4.0 LAN with one subnet, 250 host's, several "domains" without dhcp, exchange server and 250 public ip adresses. I will be administrator for my department. I want to create AD for my department ...
Score Process to ensure 1 DC in Child Domain is accessable after IP chan
DaMoose - 6 Dec 2006 5:30 PM - 4 messages
My environment is like this: 1 DC W2k3 parentdomain.com 1 DC W2k3 child.parentdomain.com I want to change the IP address of the DC in Child Domain to a new network and ensure it will still replicate and accessible to the DC in the Parent ...
Score group membership visibility
strongline - 6 Dec 2006 4:56 PM - 7 messages
Hi All, When I opened a user's properties, I could not see all its membership - all foreign domain groups(they were Universal SG) were not listed - theoretically this is totally understable IF I was connecting to a non-GC or if the query was done on port 389. ...
Score Utility to populate "run only allowed windows applications"
FrostFreeq - 6 Dec 2006 4:49 PM - 2 messages
I've been  asked to activate the above policy with a list of 400+ executables and i don't fancy typing each one in. Is there a utility to migrate or copy the list into group policy? Thanks ...
Score NetBIOS name on Logon
Jeff - 6 Dec 2006 4:29 PM - 4 messages
Hello, Earlier this year our firm migrated from an NT 4.0 domain to Windows 2003 active directory with some win 2k servers mixed in.  Because of licensing / budget, we started with one win 2003 global catalog server/dns server and a ...
Score Binding to ADAM with a Windows Account
Phran - 6 Dec 2006 3:41 PM - 4 messages
Hi, I have an account dev1\administrator. I can use the account with adsidedit.exe to bind to an ADAM. However, when I use the account in code I get an "Unknown username or bad password error". My code is: ...
Score User logged on?
d4zza - 6 Dec 2006 11:24 AM - 5 messages
Is there a way I can check if a user is logged on real-time? ...
Score Rollback Solution / Password Reset
Mike Davidson Ireland - 6 Dec 2006 10:56 AM - 8 messages
Hi, this is my first post. I have a problem in a server 2003 domain environment where workstations are loosing connection to the Domain. The timing seems irregular but all get "The domain controller is unavailable" messages. We are using roll back cards / reset cards in all workstations, and ...
Score Client log-on slow to 2k3 from XP SP2
Maki - 6 Dec 2006 9:52 AM - 4 messages
I'm sure alot of people have come accross this before. It used to take me about 5 minutes to log on from a domain connected machine hosting XP SP2 to a DC that has 2003 Servers running. I then pointed the DNS from client to DC ...
Score Prevent access to DC to users
Maki - 6 Dec 2006 9:46 AM - 5 messages
I've got a network with 10 client computers and 10 users. When these users (who are domain users) log on to the domain (DC is 2003 and all the computers are XP SP2) however, if they type in the ip address of the DC in the internet ...
Score Group Policy and performance during logon procces from client
Odysseus - 6 Dec 2006 9:15 AM - 6 messages
Hello, We have install a group policy on an OU. This policy, among other functions, forces specific active desktop background to users. User logon on computers (windows XP SP2) belonging to this OU takes from 30' to 2min. When we disable "active desktop background" user logon very fast. ...
Score USERENV error - Group Policy
Nadia - 6 Dec 2006 9:01 AM - 17 messages
I'm getting the following error on two of my domain member servers (both win2k3sp1): Event Type:    Error Event Source:    Userenv Event Category:    None Event ID:    1058 Date:        6.12.2006 ...
Score Ports required for Internal Firewall between client and DC
Ram - 6 Dec 2006 8:44 AM - 6 messages
Hi, I have a setup where the clients and DC are seperated by firewalls. Client and DC are in seperated network. Few ports are allowed for IMAP, POP3, NTP, DNS and RPCOVERHTTP. Now am planning to join the client to my Domain. If the client needs to ...
Score Problem in Extending the schema for ADAM
srihari - 6 Dec 2006 5:24 AM - 9 messages
I synchronized the data from AD to ADAM through Synchronization tool. It is working fine. Then I extended the schema by adding following  new class and attribute # ================================================================== # #  This file should be imported with the following command: #    ldifde -i -u -f Schma1.ldf -s server:port -b username domain password ...
Score User can't join a the domain
ISA_MAN - 6 Dec 2006 5:04 AM - 4 messages
Can anyone help why Active Directory users cant' join the domain. The message is "access denied". But if I try with admin user, I can join the domain from any computer clients. Any help would be gtreatly appreciated ...
Score Mandatory profile will not load on multiple computers at one time.
Dan Spec - 6 Dec 2006 3:21 AM - 7 messages
Hello, I have a few classrooms with from 20 to 25 computers each. My problem is that when I send a script to make a classroom restart and log in (These computers are set to auto log in). 5 to 15 of the computers do not get the ...
Score ADAM on Windows Server 2003
Gibraltar - 6 Dec 2006 1:01 AM - 2 messages
Hello, Is there any difference in the way ADAM works on Windows Server 2003 standard edition and Windows Server 2003 enterprise edition? If we have to implement ADAM for a unit of more than 20K users, which one is preferable. ...
Score Language Pack Error on DCs
Mathew - 5 Dec 2006 11:33 PM - 2 messages
We are getting this error on Server 2003 DCs. Event Type:    Error Event Source:    NTDS ISAM Event Category:    General Event ID:    604 Date:        12/4/2006 ...
Score Redundant Authentication Procedure?
mp - 5 Dec 2006 11:05 PM - 4 messages
Hi, This may be an obvious thing and I'm not using the right search terms, but I'm trying to configure two win2000AS domain controllers as primary and failover. I've got Windows DNS failover working great and I need to verify that ...
Score Can AD do what Radius can?
LB - 5 Dec 2006 8:35 PM - 5 messages
Hello .. Can active directory do authentication and authorization? Similar to that of what OpenRADIUS in Linux can do? thanks in advance.. L ...
Score Replication monitoring
CSupport - 5 Dec 2006 7:35 PM - 5 messages
Can anyone recoemmend the best way to automatically monitor AD replication? Cheers ...
Score Upgrade of BDC into New AD structure
dlove106 - 5 Dec 2006 6:59 PM - 5 messages
I have an existing NT4 domain and a newer W2k3 AD domain.  I have moved nearly all of my users and computers into a child domain in AD.  I would like to upgrade my BDC from NT4 to W2k and place into the existing child domain.  ...
Score AD Planning - Help!
Hugh Janus - 5 Dec 2006 6:48 PM - 6 messages
Hi all, I have been given the seemingly impossible task of designing our new Windows Server 2003 AD implementation.  I know Windows Server and Active Directory to a support/implementation level but have never done design before.  So, I am hoping that if I post what I want here, ...
Score Remove just the Shutdown Command
Corey_in_Canada - 5 Dec 2006 5:28 PM - 3 messages
We are looking to a policy to remove just the shutdown command from the start menu and task manager window, we want to retain the restart command. However using GP and removing the shutdown option it also removes the restart command. ...
Score DSClient & Windows 9x
Tim Chin - 5 Dec 2006 5:09 PM - 2 messages
I'm in the process of creating a standard default domain controller policy for our network's many domains.  I'd like to set the LAN Manager authentication level as secure as possible and still be able to use legacy ...
Score ADAM Authentication
graywolf88 - 5 Dec 2006 4:18 PM - 4 messages
I am new to Active Directory and ADAM, so if this posting sounds a bit confusing, sorry but I real confused.   What we are trying to do is use IIS and authenticate to it via the ADAM server. We would like to do is sync certain users and groups, who ...
Score About adam replication
io.com - 5 Dec 2006 4:15 PM - 4 messages
Hi, i have 4 adam instance on 4 server in replica ; now i would stop a replication on 1 instance on 1 server so the modify on this istance or on the ther istance not replicated on other istance. Exist any command for do it ? ...
Score Event Id 1568 NTDS KCC
butter - 5 Dec 2006 4:11 PM - 4 messages
I am receving the following error message in my directory service logs.  I have checked the transport on the automatically generated site link.  It is set to IP.  I have also checked the other automatically generated site links ...
Score AD to ADAM sync issues
ahertenstein - 5 Dec 2006 4:08 PM - 5 messages
OK I admit I am fairly new to the syncronization of AD and ADAM. Here is my processes that I have done so far: 1. I have uninstalled and recreated the instance a. During the installation I imported the MS-InetOrgPerson, MS-User, and MS-UserProxy ...
Score GPO Access is Denied Messages on DC
NRC Help - 5 Dec 2006 4:07 PM - 4 messages
Hello, Recently the two messages below have been showing up in the application event logs on one of our domain controllers (which happens to be the global catalog server as well) on a very regular basis . Any ideas what is going on ...
Score nt4 users to 2003 server transfer
da1308ve - 5 Dec 2006 4:00 PM - 2 messages
I understand you have to have a trust between NT4 server and 2003 server, i keep getting cant find domain error when trying to trust the NT4 to 2003 server, not sure what to do, thanks for any help. they can bring up netbios ...
Score access granted after lock out
r. wales - 5 Dec 2006 3:59 PM - 6 messages
I had an interesting thing happen this morning.  While reviewing security logs, I found many entries for a user account failed logon due to account lock out.  I went to speak to the user in question to let them know I would ...
Score Trouble sharing a file
wingsfan - 5 Dec 2006 3:25 PM - 4 messages
I have a directory that is being shared. I have two security groups, one that has full rights and one that has read/execute rights. In a subdirectory I have an Excel file that I would like some people from the read/execute ...
Score NtRights.exe
needlittlehelpwithSMS - 5 Dec 2006 1:53 PM - 2 messages
Hi everyone, I want to permit a user to be able to use remote control feature to rdp to a laptop from home. The user is getting this "the local policy of this system does not permit you to logon interactively". ...
Score Folders and Icons keep re-appearing.
Kardon Coupé - 5 Dec 2006 12:26 PM - 2 messages
Dear All First I must apologise if this has been posted in the wrong group, but I didn't know which one to use. Here is my dilema, I have a user, and I'm trying to restrict the items in ...
Score W2K3 interforest migrtion
dihe - 5 Dec 2006 12:24 PM - 6 messages
Hi, I want to migrate 2 W2K3 forests to a new W2K3 forest. I will use ADMT V3. What about file servers? What's the best way to migrate these to the new forest so the migrated users will be able to access the resources with the ...
Score Home Folder Permissions
Pedae - 5 Dec 2006 10:13 AM - 2 messages
Hello the Home Folder for Useres doesn't get the Permission whe i create or modify a User in AD. I shared a Folder on a Fileserver with Everyone "Full Control" Remove the inherit Chebox from NTFS Permission. When i now modify a User in ADUC to set the Home folder to the share. ...
Score Creating a fallback for forestprep / domainprep
Jaap de Koning - 5 Dec 2006 10:04 AM - 4 messages
Hello, We are currently planning the first steps in upgrading our mail system from Exchange 2000 to 2003, which is the forestprep and domainprep. We have two domains in a single forest, a root domain and the domain containing our users. What we would like to do, is execute the ...
Score Backing Up Active Directory
Net Admin - 5 Dec 2006 9:09 AM - 8 messages
I backup the system state data on my domain controller. Do I need to backup anything else to be able to restore AD? I have ran test backups and restores but I just wanted to clarify that the System State Data is all I need to backup in order for me to recover ...
Score security accounts manager initialization failed
Mansoor - 5 Dec 2006 5:20 AM - 6 messages
We have windows 2003 environment, currently organization is running two windows 2003 servers. Few days before one of our administrator deploy another server with exchange 2003 but unfortunately that server become down due to some hardware problem. Now we are facing serious problem. When we try to ...
Score Schema Owner
Tom Mason - 5 Dec 2006 4:18 AM - 14 messages
maybe you can help me with my Schema Owner problem, which is: I  had only one DC in my domain The system hard drive on the DC failed I did not have a backup I recreated the domain on another server ...
Score delegate contact creation
PL - 5 Dec 2006 12:45 AM - 3 messages
I would like to delegate the ability to create contacts with external email addresses, how would I do that? I tried the delegation wizard, but I couldn't get it to work with mail-enabled contacts, only non mail-enabled contact creation works. ...
Score How to change and inherit user object acls in ADAM
Jims - 4 Dec 2006 9:18 PM - 6 messages
Currently all our ADAM user objects are of a custom class that has organizationalPerson as it's parent and msDS-bindproxy as an auxiliary.  We originally made CN=Users,CN=Roles,DC=CHBDir,DC=Org a member of CN=Readers,CN=Roles,DC=CHBDir,DC=Org and that has worked fine but now we ...
Score Vista and AD
Bad Beagle - 4 Dec 2006 9:09 PM - 3 messages
If I want to start rolling out Vista machines on my network - is there any schema extenstions etc that have to be done to AD? ...
Score LDAP and DNS problems in Win2k3 AD Server
Guatemala Balla - 4 Dec 2006 6:20 PM - 2 messages
This is my netdiag output. I am also missing the folder in the forward lookup zone of my domain that was grey and was named _mc something or something like that. It was grey and had like a document icon beside it ...
Score sync options aren't shwoing up
Dark Lord - 4 Dec 2006 5:38 PM - 2 messages
A laptop here at work isn't showing any sync options.  When users log-off the synchronization status bar doesn't show up, nor does the double blue arrows show up on any of the files. Here's what the synchronization options look like: ...
Score How to give priviledge to see who has open files
Atreju - 4 Dec 2006 5:16 PM - 6 messages
Dear all, I have a specific request on a network for a user to be able to see who has any specific file open. For example, user wants to access a file but software says file is open - I want this user to be able to ...
Score ADAM LDAP Query to implement 'Sounds Like' filter
Sunny Tsang - 4 Dec 2006 5:06 PM - 2 messages
A couple months ago I posted about how ADAM didn't seem to give the expected result set when using a sounds like filter. In order to be compliant with RFC 2254, ADAM simply treats the "~=" filter as an equality. Better some type of ...
Score Windows 2003 AD / Windows Client Communications / Encryption
Bob Randall - 4 Dec 2006 3:53 PM - 7 messages
Hello - I am tasked with detailing the default security configuration on a Windows 2003 Domain for a C&A effort, and i have 2 questions: 1) Does AD store the AD database in an encrypted format on the DCs? If so, ...
Score ADAM1.0SP1 DSACLS I:P and "Authenticated Users" Bug?
dj.psd - 4 Dec 2006 3:45 PM - 2 messages
I would like to give authenticated users read rights to my app node and all nodes one level below: c:\windows\adam\dsacls \\localhost:389\dc=app /I:P /G S-1-5-11:LcRp;; Unfortunately it won't inherit the permission to the entries one level ...
Score Proper Rights
WooYing - 4 Dec 2006 3:34 PM - 13 messages
Hi All             Just wanted to get everyone opinion on whether or not I should set this up the right way.  I have an account which should only be used for ...
Score FTP - Login user access and viewing
RC - 4 Dec 2006 2:37 PM - 2 messages
I know this is an AD group but I figured I would see if anyone could assist. We are using a standard Microsoft IIS server with FTP access. I created several username/password for users to login, post, download, etc. ...
Score web administration for active directory
Imulet - 4 Dec 2006 1:05 PM - 4 messages
I am looking to manage my Windows 2003 Active directory to create, edit my AD accounts. Moroever, i am also looking to have one simple web page for all users where they can edit their basic info (phone, office location etc). Is ...
Access an OU via LDAP from a non-member machine
additional 2003 domain controller
Design question
Best Books about Active Directory
tranfer DC roles to another DC
How can users update their own profiles?
No user accounts that are Enterpise Admins can connect to other do
GPO Loopback
How do I: Get the Exchange Mailbox creation date
Next » 2 3 4 5 6 7 8 9 10