|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Windows Server Active Directorymicrosoft.public.windows.server.active_directory
server r1 update to r2
oberkofb -
16 Dec 2006 9:13 PM - 2 messages
following scenario exsists: Server 2003 r1 on 10 gb scsi partition. active directory ..com prescence/ users - 30 / locations - 2 . larger partition required. Desire to update to server 2003 r2 to enable networking functions and shared services; primarily outlook, mail, calendars, schedules, appointments, ...
ADAM
webrod -
16 Dec 2006 8:27 PM - 3 messages
Hi, suppose I have a network with users who connect on a workgroup (so there is no domain/AD). Is it possible to switch to a domain/ADAM? I mean, will the user be authenticated on ADAM when he will log on its ...
problem to apply policy in XP
Santy -
16 Dec 2006 5:06 PM - 3 messages
Hi, on XP SP2 multilanguage i installed italian mui but i've a proble, the pc dont' take the policy from Active Directory EventID:1030 Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engin ...
Cannot Access Domain Controller Security Policies
Jason721 -
16 Dec 2006 4:56 PM - 5 messages
When I try to access my Domain Controller Security Policies I get: Failed to open Group Policy Object. You may not have appropriate rights. The system cannot find the path specified. Nothing has changed in the domain, but my exchange server says it cannot ...
Folder redirection with selective file types enable
Toyin ogunmefun -
16 Dec 2006 2:08 PM - 2 messages
Hi, I just enable folder redirection for my users. Is there a way i can make gp intelligent to only redirect specific file type. This is to save disk space and avoid users using my document and My desktop ...
Enlarge user profile size
Hong Jin -
16 Dec 2006 2:51 AM - 2 messages
How could i use group policy to set the user profile size? I noticed my Local Disk (C:) for a particular user profile is just 30MB. I have tried editing the Default domain policy > User configuration > Administrative Template > ...
Remove default Windows XP Games using Group Policy
Hong Jin -
16 Dec 2006 2:00 AM - 3 messages
Can i know whether is it possible for Group policy to disable/block/hide the default Games at Start Menu > Programs > Games? Thank you. ...
DNS Issue
Dan -
15 Dec 2006 11:35 PM - 2 messages
Hi, I had a problem this morning where a VPN rule was killing DNS traffic between my Texas and CA sites. What I saw during that time was people in Texas not being able to identify anythin by name (internally or externally). ...
GPO issue
Will Sellers -
15 Dec 2006 11:08 PM - 3 messages
I have 350 students that I need to map a drive to. My approach was to create an OU with a GPO that controls a logon script. My problem is that the gpo does not appear to execute since the logon script ...
Group Policy without ICMP
Dale -
15 Dec 2006 9:46 PM - 2 messages
Hi. Okay, so our firewall guys have ICMP turned off for our DMZ machines. I have just implemented a group policy change to run a script everytime someone logins in. Only because the ICMP stuff is turned off it won't apply ...
Computer Accounts need to be reset
Tim N. -
15 Dec 2006 9:20 PM - 3 messages
We are running a Windows Server 2003 domain. We recently used a utility to find computer accounts in active directory that had not reset their machine passwords in over 90 days, and then disabled all of these computer accounts in an effort to clean up old accounts that are ...
Installing a Enterprise Root CA in a mixed mode environment
Kurt1231 -
15 Dec 2006 9:09 PM - 8 messages
Hello, we are running a mix of W2K and W2K3 servers. I am trying to install a Enterprise Root CA on one of my W2K3 servers. When I do, I can only install a Stand alone Root CA. If I go to one of my W2K servers, I CAN ...
Deployment of Printers with 2003 R2
Jason (NFSB) -
15 Dec 2006 8:21 PM - 2 messages
Question: We are a server 2003 network but have recently had a branch office that installed a server 2003 R2 domain controller. So as far as I know who schema was updated when that server was promoted. Is it possible for everyone ...
Active Directory Replication Issues - Win2k & Win2k3
Daniel Casper -
15 Dec 2006 7:16 PM - 5 messages
I'm having some trouble with my domain controllers and figured I would try to poll the experts. This is where I'm at: I've got two domain controllers. The first, a Win2k3 Server, is my PDC for all of my FSMO roles. ...
Auto detect network to decide use of proxy server
kfc5616 -
15 Dec 2006 6:32 PM - 2 messages
On our network we have a problem regarding laptops trying to access the internal proxy server before connecting to the internet. The problem occurs when the laptops are outside the network, since it cant locate the proxy server the laptops are unable to access the internet. We can manually disable ...
Binding to ADAM as Authenticated User
LM -
15 Dec 2006 6:07 PM - 2 messages
Folks, This question is probably creeping out of the strictly ADAM/AD category, but I'm hoping maybe someone here can help out with it. Basically, we're using the JNDI_Realm under Tomcat to get our user authorizations for some webapps we're developing in Java. Among these ...
Unexplained User Account Deletion
michael_gore718 -
15 Dec 2006 6:00 PM - 6 messages
So here's an iffy one. Turns out a user account was deleted and everything is pointing towards me. However I don't recall deleting the account, then confirming the deletion, and confirming the deletion of the associated mailbox. Heres the info from the Event logs, the header ...
Missing Administrative Templates
Net Admin -
15 Dec 2006 5:32 PM - 6 messages
I have a DC in a site and when I open the Group Policy Management Console the Administrative Templates nodes are missing. Also, there are no other options under the other settings. The other DCs work just fine. Is there a way to repair this? ...
Missing Computer Accounts
amiller -
15 Dec 2006 4:24 PM - 7 messages
Hi all, I have an issue where computer accounts just randomly go missing in Active Directory Users and Computers. The user can no longer logon to the domain because he no longer has a computer account in the domain. In order to logon ...
Security Event ID 538/540 - Way to discern between machine and user account logon/logoff for reporti
Liam C -
15 Dec 2006 4:23 PM - 2 messages
Hello All, We are trying to set up some rudimentary reporting and I'm using snmp to send specific event entries to a syslog server. Is there anyway to tell difference when a user logs on and off network as ...
Trust issue "The specified user already exists"
Owis -
15 Dec 2006 3:52 PM - 3 messages
Dear All Am getting error message when i try to establish the trust relation on the production systems between W3K Forest to another W3k Forest The Error am facing is "Cannot Continue. The trust relationship cannot be created because the ...
Users in upgraded domain have *only* a pre-Windows 2000 user name
Daniel Barr -
15 Dec 2006 3:43 PM - 3 messages
One of our member companies upgraded their domain from NT4 to 2003 a while back, and I noticed something odd about all of the user accounts that were created before the upgrade: in their account information, they only have a pre-Windows 2000 user name set...the new-style ...
Head Office and Remote sites
steve -
15 Dec 2006 3:35 PM - 3 messages
Hi, I'm looking to implement a single Windows 2003 Active Directory over a central office and 2 remote sites. Could anyone point me in the direction of suitable books,Whitepapers...... many thanks. ...
help with ldifde<>adfind
Mike Bonvie -
15 Dec 2006 2:55 PM - 5 messages
* Also posted in the Exchange forum Hi, I have a request to separate mail-enabled contacts and legitimate exchange mail boxes which are combined in our exchange organization. I'm trying to get this data from the following attribute: msExchHomeServerName ...
gpo applied but not making changes
Brandon Baker -
15 Dec 2006 2:36 PM - 4 messages
I have created a group policy and applied to all users. It creates several favorites for IE. There are many people who do not receive the favorites even though the policy is applied to them, I have verified this by running ...
Urgent - please help
Joe -
15 Dec 2006 1:56 PM - 12 messages
Customer has SBS 2003 with 7 workstations. After replacing the router to which all workstations connect, workstations no longer log in to the AD domain, and cannot join the AD domain. For DNS, I have verified that all workstations and the DC point to the DC, which is also a DNS server, for DNS ...
NT Domain to Win 2003 AD
Witts -
15 Dec 2006 12:59 PM - 2 messages
Hi Guys Need a big favor of my Win 2003 AD migration prject. We have NT domain with SWZ.com( no subdomains) and Exchange 5.5 server, IIS servers with windows authentications and XP,WINNT, 2000 Clients. I'm planning of migrating the NT PDC and BDC to defferent WIN 2003 boxes ...
How do I: Do an AccessCheck on A.D. Exchange mailbox SecurityDescriptor?
Russell Mangel -
15 Dec 2006 10:15 AM - 3 messages
I am using VS 2005 .Net 2.0. I would like to perform an access check to determine if the current user has access to an Exchange Mailbox. I have the msExchangeSecurityDescriptor and the CurrentPrincipal, but I don't know how to determine if I have access, before ...
"Target Pricipal name is incorrect"
Charlie -
15 Dec 2006 8:53 AM - 11 messages
Hi, I have an AD domain with 2 sites on separate subnets. The remote site has been out of touch for nearly 6 weeks! Im having a problem getting replication between the sites. From AD Sites and Services, I try to 'Replicate Now' and the error message I receive is: ...
FSMO roles Placement
LincolnIT -
15 Dec 2006 2:56 AM - 9 messages
I just migrated from NT to Win2k3 and have a couple of questions. I now have the following: -2 Win2k3 DC's -2 NT BDC's (from the migration, will eventually retire these) 1. One DC will be a fileserver, the other will run Exchange2k3. All the ...
migrating computer account from SBS2000 to WS2003R2 using ADMT 2.0
eduardo -
15 Dec 2006 2:26 AM - 4 messages
Hello, I´m having a problem migrating computer accounts from an SBS2000 Server to a Windows Server 2003 Standard Edition R2 using ADMT 2.0 The problem is that when the agent is runnning on the machine that is being ...
Hide AD domains at logon
Johan Christensson -
15 Dec 2006 2:12 AM - 9 messages
Hi. Is there a way to customize the domains shown in the "Log on to" list? Some users get confused when then list is long. Best regards, Johan Christensson ...
Help searching Active Directory for UserID
Kellie -
15 Dec 2006 2:03 AM - 8 messages
I am trying to modify code that searches Active Directory by User's First and/or Last Name. I would like to be able to search by Email address and then display the UserName. I am having trouble with the syntax and wondered ...
AD 2000 to 2003
skip -
15 Dec 2006 12:55 AM - 12 messages
Hello I have two AD 2000 sp4 DC both are in the same site. I am also running Exchange 2000 sp4. I need to upgrade to AD to 2003 sp1 and Exchange 2003 sp2. My question is what should i upgrade first AD or Exchange or does it matter? ...
removing subdomain after only DC dies
hawkfire -
14 Dec 2006 9:32 PM - 3 messages
I created a subdomain, but my Domain controller died before I got very far. So I tried to remove the subdomain from the parent domain to stop the alerts from being generated. I apparently did something wrong. The entry is still on the DC of the parent domain, and I can't get rid ...
AD Sites and Services Question
Keith -
14 Dec 2006 9:23 PM - 19 messages
Hello Everyone, I'm hoping you might be able to help me with an issue I'm having. Is there a way in Sites and Services to specify which DC a site will look for first? I’m having an issue where one of my two networks in the same domain ...
Delegation - Password Reset - Access Denied
TimJM -
14 Dec 2006 8:45 PM - 10 messages
I have setup a group as delegate to an OU. This group has Create, delete, Manage User accounts & Groups, Reset user password, read all user info, and Modify Group Memebership. I have setup a custom TaskPad for them to use. When a user in this group ...
Update Lockout user attribute Programmatically
Ryan Sanders -
14 Dec 2006 8:37 PM - 8 messages
I have read here that I can update the value of user Lockout to 16 to have the user account in the lockout status. [link] Near the bottom I read that lockout has been replaced with ...
2003 AD upgrade and consolidation
Ken Manohar -
14 Dec 2006 8:09 PM - 8 messages
Hi Good Day, A client would like to utilized the centralized management provided by Active Directory. They have a number of subsidaries, each with their own AD forest. A mixture of Windows 2000 and Windows 2003. The client would like to create one Forest Root and one Tree Root. Then have ...
Active Directory Problem
Greg Smith -
14 Dec 2006 7:56 PM - 4 messages
I have a small AD network. I am not very familiar with AD so I apologize if I state things poorly. We had three servers (Server 2003 SE) running AD and DSN which I will refer to as server1, server2, server3. Server1 and server2 were on-line from day ...
Create a partial admin account
Alvin Burkholder -
14 Dec 2006 7:27 PM - 4 messages
We have a remote location that we sometimes have a local computer shop do some repair work/installs for us. I want that shop to be able to join computers to our domain. Is there anyway I can create an account with partial ...
Server Not listed on Domain list
JCas -
14 Dec 2006 7:24 PM - 7 messages
We've discovered recently that one of our servers isn't listed in the domain list while browsing, although you can "run" to it, Ping by name, and for all intents and purposes it's still there. Just not listed in the browser. ...
Determine Authentication protocol used
Ryan Sanders -
14 Dec 2006 7:14 PM - 2 messages
We are writing a custom application in C# that authenticates against AD 2003. How can I determine what authentication is being used, Digest, NTLM, Kerbroes. Is there a way to monitor and log the authentication protocol that is being utilized. ...
Single Forest Multiple Domains
Data Dar -
14 Dec 2006 6:02 PM - 10 messages
Greetings, I'm trying to establish a Single-Forest with multiple domains. Currently I'm using Win2K with plans to upgrade to Win2k3 in mid 2007. I have 3 and a half sites that we've named site1.domain.org,site2.domain.org and ...
Win2000 child domain
Darren@community.nospam -
14 Dec 2006 4:46 PM - 3 messages
Hello I am trying to demote the last DC in a Win2000 child domain using dcpromo and I 've checked last DC is in domain but I keep get the error "The operation failed because ....the directory service failed to replicate off ...
Service accounts log off when local user logs off
Bob H -
14 Dec 2006 4:05 PM - 6 messages
I am having a problem with some of our servers when we logoff from a local session. The system in question is running Server 2003 Standard, with all of the latest updates. When I logon locally to the physical server, all is fine except when I ...
Can I disable "Your password will expire in 14 days" functionality
paoutdoorsman -
14 Dec 2006 3:34 PM - 4 messages
I have a windows 2003 AD, and we have a password management website that we force our users to use in order to keep AD passwords sychronized with some other systems. I would like to disable the built in functionality that notifies users at ...
How to Change child active directory's parent domain
nettellect -
14 Dec 2006 3:20 PM - 6 messages
My organizational unit is currently a child domain of (e.g) domaina.com. a corporate level SharePoint portal server is deployed on child domain and all parent and child domain users are using it without a problem. Now due to ...
Unable to modify AD objects - "The system cannot find the file specified"
Ledricus -
14 Dec 2006 3:08 PM - 2 messages
Hi all, I run a 2003 Sp1 Enterprise server that has been functioning quite happily as a domain controller for about the last year with no problems. I've left it alone since it was set up - until now. I went to ...
restore child domain
Jay -
14 Dec 2006 12:06 PM - 4 messages
Hi all, How do i restore a child domain controller. I have a root domain a.com and child domain b.a.com I have one additional domain controller in the child domain. How do I restore a child domain. (I have system state and full disk ...
Logon difference in Workgroup and domain
yuebing.wu -
14 Dec 2006 10:09 AM - 6 messages
all document and comments focus on central and discrete administration. I want to ask some detail. Q1: in a workgroup, create two users with the same user name(U) and the same password separately on two PCs(PC1 and PC2). ...
User accts begin disabled and locked out
Darren@community.nospam -
14 Dec 2006 8:43 AM - 7 messages
Greetings' Everyone, I have a Win2003 domain with a password policy Max pass age 90 day and Min chars 6 and acct lock out threshold 5 and duration 0 .However, I notice some of my users accts occasionally will be both disabled and locked out at ...
Kerberos - AD domain multiple names
Francesco Papini -
14 Dec 2006 8:30 AM - 6 messages
Hi, I'm trying to use Kerberos authentication with XP in workgroup and Outlook 2003; everything is fine as long as I use the real AD UPN name ex: u***@deg.grptop.net but it doesn't work when i try to use the alternate UPN ...
Laptops in domain
Ozgur Ozdemircili -
14 Dec 2006 8:06 AM - 4 messages
Hello all, I wonder if it is wise to put the laptops in our windows 2003 domain. Most of the users have laptops and they mostly travel to places where we do not have the domain set up. But the journeys are mostly less than ...
wk23 dc host record
Elvis -
14 Dec 2006 3:19 AM - 2 messages
Hi, I have recently upgraded a W2K domain to W2K3 and transferred all FMSO roles to the new server. the two server are replicating....I run dcidag and netdiag and everything is running error free...except for some really strange ...
Folder redirection Via GPO
Will Sellers -
14 Dec 2006 2:36 AM - 6 messages
Scenario: I have a teacher group and a student group defined in AD. When a student logs on, I want to show a standard desktop with certain shortcuts to student applications. Can I define a GPO for the students group that only redirects the desktop ...
track employee time using logon & logoff
getcracken -
14 Dec 2006 12:38 AM - 4 messages
Hello all, Does anyone know how or know of software to track employee time using logon ("crtl + alt + del") and logoff? running - win 2000 server exchange 2000 standard one domain 4 offices 5 domain controllers Thanks for all your help. ...
Can Not demote a Win 2000 Domain Controller
Schuml -
13 Dec 2006 10:42 PM - 7 messages
I have a Domain controller that will not allow me to demote it. The network is made up of 3 Domain Controllers to of which are DNS providers. All servers are Win2k SP4. What happens is the Domain Controller regardless if I use DCPROMO or DCPROMO ...
Why are apps reinstalled?
Carl -
13 Dec 2006 10:26 PM - 11 messages
I'm pretty new in this field but thought I'd give it a try. Recently I'm at a school organization where the apps are deployed via AD. The student computers are filled with tens of apps. Today a group of students took up the laptops and logged ...
Forest level is 2000, domain level is 2003
markinaustx -
13 Dec 2006 9:34 PM - 11 messages
I have an interesting situation I've inherited. I have a single domain with two domain controllers, both running W2K3. All servers in the domain are W2K3, including member servers. After starting to clean up and familiarize myself with the environment, I noticed that the forest ...
Cannot add users or change passwords...
smutny -
13 Dec 2006 8:40 PM - 2 messages
Major frustration here... Background: Suffered some powerspikes that damaged a Windows 2000 Advanced Server that was acting as a BDC and was replicating the Active Directory with the PDC. Due to circumstances, it was restored not as a BDC and is a domain member ...
ADAM userProxy bind to NT4 Domain principle?
no-spam-please -
13 Dec 2006 7:03 PM - 2 messages
Hi All, I'm trying to find out exactly what happens when a bind request occurs for a userproxy object in ADAM when the principal is an NT4 Domain user. ADAM resides on a W2K3 server that belongs to an NT4 Domain. ...
Resolving child domain names
reza -
13 Dec 2006 4:33 PM - 3 messages
I'm having a problem with resolving DNS names. Using Nslookup, if i do a query using FQDN name from a child domain computer itself, it resolves exactly, BUT if i just put the computer name to query by using the Nslookup command in the parent domain, it ...
Deleted the wrong user and need help to restore, please.
Pi -
13 Dec 2006 4:25 PM - 7 messages
Hello and thanks in advance for any help that can be provided. I accidently erased a user profile that is still active at our satellite office. This of course erased all the documents/files she had saved to the ...
max password length?
Mike Tupker -
13 Dec 2006 2:56 PM - 7 messages
What is the maximum password length allowed for active directory passwords? ...
NTBackup "NTDS" has reported an error 0x800423f0.
Joseph M. Durnal -
13 Dec 2006 1:17 PM - 2 messages
We've recently replaced some domain controllers and have run into a problem with system state backups on a few of them. It seems like we are running into the problem described here: [link] ...
MS Access 2000 not retaining saved data when used in Win 2003 FRS
DEPOC -
13 Dec 2006 11:58 AM - 2 messages
I recently replaced my Windows 2000 DC with two Windows 2003 servers running FRS. I mapped all users directly to the same DC for the MS Access database. I am now getting intermittent reports of users overwriting existing records and ...
user login time report
Emanuel Violante -
13 Dec 2006 9:32 AM - 2 messages
Hi everyone, I would like to have a list of login and logout time o feach user. For example, i would like to know in the last 15 days, the time that a user does a session login and a logout ...
Resizing a 2000 DC
Goku 316 -
13 Dec 2006 7:41 AM - 2 messages
I need to know if i can use any third party software to resize the c drive with available free space from another partition. this was the first Dc in the ad environment thus it has all FSMO roles. the c drive is running out of space. the e drice has 30 Gb of free space. ...
Query on moving a domain controller
Pankaj -
13 Dec 2006 4:19 AM - 3 messages
Hi All, We are shifting our entire office to a new location and this shifting includes movement of all computers and servers as well. Which means we have to shift our domain controller as well. Now what I need to ask u ...
Schema Extension on Group class
Ryan Sanders -
13 Dec 2006 3:23 AM - 4 messages
I added a new attribute to the 2003 R2 AD, then added it as an optional attribute to the group class. I next created a new group in ADUC. Then I used ADSI edit to view the attribute of this new group. ...
Upgrading large distributed environment from AD2000 to AD 2003 - Risks, Challenges
negativespace2005-null -
13 Dec 2006 2:12 AM - 3 messages
We are planning an upgrade of an existing Windows 2000 Active Directory Schema to Windows 2003 AD Schema in an environment with 105 DCs, at about 95 physical sites across the globe. We are installing new 2003 root servers, and will transfer the roles from the existing 2000 ...
Configuring new 2003 Server as domain controller for existing doma
Derek -
13 Dec 2006 12:31 AM - 5 messages
I've added a new 2003 SP1 Server box to our existing domain, and plan to make it the DC. We currently run a 2000 Server environment. Here's my gameplan: (1) Run 'adprep /forestprep', 'adprep /domainprep', then 'adprep /domainprep ...
trust relationship
ANDY -
12 Dec 2006 11:05 PM - 2 messages
I created trust relationship "one way incoming" between 2 domains. However, I am unable to ping or access the resources from the domain. After creating trust relationship am i missing something. I wanted to make sure and work that user from one domain is able to access resource from other domain. ...
need some advice
chie -
12 Dec 2006 10:14 PM - 4 messages
The scenario is: I have an existing windows 2000 active directory infrastructure with at least 140 users/desktop. I planning to implement a group policy that redirect or at least save users files on their home directory but I dont want to ...
Query to extract only those group members with enabled accounts
mail269618 -
12 Dec 2006 9:42 PM - 4 messages
I would like to extract a list of the members of an AD group, but only include those with enabled accounts (i.e. anyone whose account is not disabled). work, however I wanted to check my logic and my code before I try it as ...
Can not Dcpromo to Domain Controller
Newbie -
12 Dec 2006 9:01 PM - 5 messages
Hello, We have a dead server02, so we bought new server with Windows 2003 R2 installed. The server01 has Windows 2003 installed. We still named new server to server02. But we can not Dcpromo server02 to domain controller (same domain with server01). ...
Is it safe to rename a computer in domain?
Rytis -
12 Dec 2006 8:48 PM - 3 messages
Is it safe to rename a computer, which is joined to Windows 2003 domain? eg. when you do that from the particular computer, not using ADUC snap-in. Or maybe is it better to remove computer from domain, change it name and ...
Upgrade a Win2000 server to Win 2003
Ciaraga -
12 Dec 2006 8:22 PM - 3 messages
We have 2 DCs, 1 is a 2000 the other 2003. I would like to upgrade the 2000 to 2003 server. This 2000 server holds the FSMO roles. What is the best practice or procedure to do this ...
Dynamic DNS on non AD 2k3 domain controller / DNS server
Liam C -
12 Dec 2006 8:09 PM - 3 messages
Hello All, Running non domain controller dns servers at remote sites. How is dynamic dns theoretically supposed to work in terms of updating dns? At our main site, we have dns running on a dc and workstations update DNS forward and ...
Domain Admins and cached passwords
Ozgur Ozdemircili -
12 Dec 2006 7:41 PM - 2 messages
Hello, I haeve been designing a domain for a very large company. The administration of the servers are done within my company so I need to be giving out permissions for users. I have administrators, including me,who needs to make the big changes ...
Computer Account
Michael K. -
12 Dec 2006 5:49 PM - 10 messages
We accidentially added a Windows 2003 server to our domain with the same name as an Exchange 2003 server. The Exchange server is acting as a Bridgehead and does not hold any mailboxes. Is there any way to re-add the old machine ...
View All pssoble Properties on Admin Snap-Add in
carlos -
12 Dec 2006 5:49 PM - 4 messages
I would like to see all possible properties (dial-in, etc.) from my workstation where I have the Admin Pack install. Normally I have to log in to the Domain server and I would like to go away from that. ...
Assigning apps through group policy question
bguill00 -
12 Dec 2006 4:59 PM - 2 messages
Quick questions about the way GP works when assigning applications. Well actually two questions. I am deploying .NET 2.0 and another 3rd part app. When someone reboots their computer and gets the GP settings it installs fine. The problem and my question is about the next time ...
Changing directory owership via command line
James -
12 Dec 2006 4:10 PM - 6 messages
I want to change the owernership on many directories via the command line. Can someone point me to the right syntax to do this? Thanks ---posted via MyTechnet--- ...
Strange access denied error avfter AD upgrade from 2000 to 2003
Freddie -
12 Dec 2006 3:29 PM - 2 messages
I have upgraded my former AD 2000 to AD 2003. I have had [link] as a guide. So I think I have done everything as I supose... After I have run forestprep and dominprep and waited for the schema changes ...
Remove SID from mailbox rights
Mike55 -
12 Dec 2006 3:24 PM - 4 messages
Hi, I have an old SID on my user accounts from an Exchange upgrade project. The user object was created and deleted during the upgrade with administrator rights, and it was given rights to all mailboxes. The account was deleted ...
Saved Queries in AD
Mike L -
12 Dec 2006 2:26 PM - 2 messages
Hello All, I am trying to do a saved query on my AD users that have Inherit from parent permissions checked under the Security tab>Advanced on their account. Already looked through the ADSI editor with no luck, any help is appreciated! ...
Granting permissions in ADAM
abhi_chow -
12 Dec 2006 2:14 PM - 19 messages
Hi, To Grant/Deny permissions in ADAM, we need to use dsacls.exe command in the ADAM command prompt. I need to provide permissions such that barring Administrators, all other users should have write permisssions on only one's own attributes and only ...
Control AD replication
Kjetil -
12 Dec 2006 11:28 AM - 9 messages
Hi all I have a challenge for you. I would like to control the way Domain Controllers replicate between each other in a domain or between domains in the same forest. I have two sites seperated by a firewall and there can be no two way ...
Audit a single folder?
Gonzo -
12 Dec 2006 10:40 AM - 6 messages
Is it possible to audit a folder on our AD network? We just need to know who is deleting/modifying a file in a folder. I have never done this before so I don't know where to start. ...
can't add anymore serveurs to domain, RID reference error
Patrice Bruhat -
12 Dec 2006 9:52 AM - 6 messages
Hello all, I can not add anymore a new server to my domain. Everything looks good in my domain , dcdiag on all entreprise servers gives no errors. But when trying to add another server, I have this error in dcdiag on my new server: ...
Enterprise Subordinate Certificate Server
Joe -
12 Dec 2006 9:44 AM - 3 messages
Hi I have a question on Certificate Servers: Can an Enterprise Subordinate Certificate Serverin one Domain issues certificates to Domain Controllers in another child domain in the same forest? Thanks in advance for your help. Joe ...
AD Parition requirements
Richard -
12 Dec 2006 8:11 AM - 5 messages
Hello, Does anyone know if the partition recommendations for Windows 2003 are still the same as Windows 2000? i.e. seperate partition for the OS, SYSVOL and NTDS? Thanks Richard ...
Problem of Installing the config file while using in two ADAM inst
srihari -
12 Dec 2006 4:26 AM - 2 messages
Hi All, I created one ADAM instance. I did the the synchronization from AD to ADAM. It is working fine. I Created one more ADAM instance with different partition I tried to install that same config with change in a partition name. I got ...
map network drives and vpn
RW -
12 Dec 2006 4:18 AM - 8 messages
I’m experiencing following problem which honestly I’m running out of ideas how to solve it. User with laptop has network drives mapped, user then takes laptop off-side, logon to laptop with cached credentials working remotely, connects from ...
Roaming Profile problem
Will Sellers -
12 Dec 2006 2:19 AM - 6 messages
I'm trying to implement roaming profiles for students that signon to lab PC's. I did the following: 1. created a test student in AD on serverA 2. assigned the profile path to \\serverB\roamingProfiles\%username% 3. setup the shared path on serverB for roamingProfiles with student group ...
Windows firewall on domain controller
kwyap -
12 Dec 2006 1:29 AM - 7 messages
Hi, Should i on the windows firewall on domain controller? ...
trust relationships between windows 2003 domains
ANDY -
12 Dec 2006 1:13 AM - 13 messages
we have 2 windows 2003 domain controllers. we wanted to establish one way trust between them. I am able to ping and establish network connectivity between 2 domains. Below are the details of both domain Domain 1 finctional level is windows 2000 native domain. ...
cannot re-add a server to domain
PhilippeH -
12 Dec 2006 12:34 AM - 5 messages
Hi, simple LAN, 2 servers both windows2003 + sp1, A is domain (blabla.net) controller, B is not, each has 2 NICs one for Lan the other connects to the router (Wan). B was added to domain apparently successfully but few things ...
|
|||||||||||||||||||||||