Windows Server Active Directory

Moving 'First' DC in Forest

David A. Beck - 30 Dec 2006 10:26 PM - 8 messages

I set up an AD some time ago on a Windows 2000 Server. When I upgraded the Exchange Server to 2000 (then 2003) I ran the utilities to add the needed fields to the AD but the DC remained a Win2K server. (Exchange 2003 is not ...

HELP!! Remote office down

nick reed - 30 Dec 2006 7:45 PM - 2 messages

Hi Everyone, i am having trouble with one remote office. i currently have 4 offices with one DC at each office. The remote office that is having the trouble is the only server with 2k on, the rest are all 2003 and all are ...

Help Understanding LDAP Variants

Will - 30 Dec 2006 7:42 AM - 13 messages

I would like to understand in what contexts LDAPS, LDAP GC, and LDAPS GC are used. Normal LDAP the runs on port 389 TCP and UDP I more or less understand, and that is the basic LDAP that is used extensively between domain users, domain ...

Question on Funcional Levels

supersonic_oasis - 30 Dec 2006 3:27 AM - 4 messages

I have one Domain running on only one DC running on a win 2003 server. I have some questions on what happens if I take its domain and functional levels to Windows 2003. 1. Can I add Win 2000 clients to the domain? ...

Question on backups and Active Directory

Brian - 29 Dec 2006 4:08 PM - 3 messages

Hi everyone, I've been looking for a concrete answer to this, but haven't found anyone who is sure of their answer. Anyways, what is the minimum to backup in order to do a successful restore. Obviously you want to backup data, systemstate, ...

Target Principal name incorrect

Dbhud - 29 Dec 2006 2:06 PM - 3 messages

We recently had a powercut and - The primary server had a failed mother board unit which eventually was replaced within 48hrs. Once replaced I've noticed that the BDC Kronos cannot replicate to the Primary which is now on line. ...

Group Policy Sysvol Disk Space

CSI_DJones - 29 Dec 2006 12:03 PM - 6 messages

I have a customer that could potentially have approx. 1500 policies once their network is fully implemented in about 3 years. I am concerned about disk space and more importantly replication of the content of sysvol. What ...

Trusted domains

Bjarni - 29 Dec 2006 12:24 AM - 2 messages

Hi folks, I have domain a and domain b. Domain a is all set upp with exchange etc. Domain b was bought, and they don't have exchange. I have trust between the domains and file sharing and authentication are ok. ...

Can or Can not?

Marcos R. - 28 Dec 2006 10:59 PM - 3 messages

Does Account Operators group members in Active Directory 2003 have rights to unlock a locked account? I spent a lot of time looking for that answer in the WEB and nobody is totally sure about that!! Does MS says this directly somewhere? ...

run command prompt commands via asp.net

adch - 28 Dec 2006 10:08 PM - 7 messages

I have a asp.net 2003 web application into a local domain. I want to use some command prompt commands like "net user" etc., via a webpage of my application. How can i do that? Thanks ...

Userenv 1030 & LSASRV 40961 Errors

James - 28 Dec 2006 9:26 PM - 11 messages

I have a windows 2003 domain environment and all clients are XP SP2. It appears that all clients are having Userenv 1030 error every couple of hours and at the same time LSASRV 40961 errors occur. Event Type: Error ...

AD Design

ACH - 28 Dec 2006 5:48 PM - 11 messages

I am looking at deploying AD across three international locations, and after reading Microsoft's guides am getting conflicting solutions as to what is best. Basically each of the sites will be connected via an IPSec VPN (via SDSL / broadband connections), each site will host a single server, and each ...

GAL not updating

David A - 28 Dec 2006 4:47 PM - 4 messages

Environment: 2 AD Servers (Windows 2003 R2) 1 Exchange Server (Windows 2003, Exchange 2003) All servers and apps are fully patched Same site and subnet Problem: When add new user to Active Directory and create corresponding mailbox their name does not show-up in the GAL in Outlook for 16-20 hours if ...

ADAM replication via LDAP

Jeremy Wiebe - 28 Dec 2006 4:14 PM - 2 messages

I'm working on setting up an ADAM replication scenario and I can't seem to find any information on enabling ADAM replication via LDAP (is it even possible??). I've set up 2 ADAM instances (one being the "main" instance and the ...

Computer Group Policy User Exceptions

Erich Rockman - 28 Dec 2006 3:54 PM - 2 messages

Hello. Is there a way to exclude certain users from getting a computer group policy when logged into that computer? I am using the Interactive Logon policies under Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options. I want certain users (Admin, etc.) to not get these policies when logging ...

Backup procedure for 2 x Domain Controllers ?

Brian - 28 Dec 2006 2:33 PM - 5 messages

Hi. At the moment we have a single forest, single domain with two domain controllers (1xWin2000 Std & 1xWin2003 Std) and currently take a system state and full backup of the primary HD (c:) of each DC daily. If possible ...

STUMPER: File and print sharing in AD???

Angela - 28 Dec 2006 1:49 PM - 8 messages

For security concerns, my company is considering disabling "NetBIOS over TCP/IP - NetBT". I've heard this is fine in a pure 2003/AD environment, but my question is, Without NetBIOS over TCP/IP how are we supposed to access our ...

ADmodcmd & Query

Erwin van der Lee - 28 Dec 2006 10:32 AM - 6 messages

I am trying to find a way to alter the RDN for all the contacts (!) that are copied into an OU in our AD. The syntax I tried but did not work was: admodcmd.exe -dn CN="First Last",OU=MIIS,DC=xxx,DC=xx -modrdn ...

merging domains

KirtP - 28 Dec 2006 5:48 AM - 2 messages

I have 8 individual windows 2003 Domains That I need to join into 1 domain forest without loosing the existing active directory user and security currently they all have trusts setup between domains as well as secondary DNS setup on each. The servers are setup at different ...

Need to eliminate sneakernet with push installs

257roberts - 28 Dec 2006 2:53 AM - 3 messages

Hello, I just landed my first IT job as a system admin for a 40 user windows network. We are on a Server 2k3 domain. Our company gets numerous software updates from our software vendors. Almost all of these ...

Can't find domain at logon with New DC up and original down

Jeremey - 28 Dec 2006 1:38 AM - 14 messages

Hello, I am in the process of replacing a single DC environment with a new DC. I set it up as a Global Catalog Server, transfered all five Operations Masters to the new server, made sure all the DNS records were present representing ...

shared drives

SeanOc - 28 Dec 2006 12:45 AM - 3 messages

I am setting up an OU for some contractors. I would like to for security reasons, have them see only a couple of mapped network drives. Is there a way to do this via GPO without using a login script? ...

Export users and OU's that were created after a certain date

Phil Montalbano - 27 Dec 2006 10:57 PM - 3 messages

Hello, I need to export any users and OU's that were created after 11/04/2006. I have an exact copy of AD in my lab as of that date. I wish to update the copy in my lab with the changes that have occured since that date. ...

Remove from Active Directory ref to a defunct Exchange Server

C Hooke - 27 Dec 2006 10:15 PM - 2 messages

We are trying to figure out how to remove reference to an Exchange 2000 server that is no longer running from active directory. We do not plan to rebuild it. We have an exchange 2003 server that is still function and we ...

Backup and Restore Question

Michael - 27 Dec 2006 9:46 PM - 8 messages

Greetings, I have an AD, using 3 DCs (DC1, DC2, DC3) with FSMOs role spread among the DC1 and DC2. We use AD integrated DNS. We have recently begun a disaster recovery project. For this project, I am ...

Error when adding Mailbox Store

Geovanni - 27 Dec 2006 9:46 PM - 2 messages

Hi, I have one exchange 2003 with 150 mailboxes and I been trying to add a new Mailbox storage to my existing storage group I keep getting this message: An operation error occured Facility: LDAP Provider ID no: 80072020 Exchange System Manager ...

how to migrate to new forest

Rush - 27 Dec 2006 9:03 AM - 3 messages

We have to perform a domain rename for current environment (W2k3) and I was though more than perform a domain rename creating a new forest and migrate all the things to it. Can somebody guide me for resources or how to perform migrate to new forest? ...

domain rename disaster recovery plan

Rush - 27 Dec 2006 8:14 AM - 4 messages

Does anybody can tell me what is the best disaster recovery plan is if some things go wrong in domain rename? What I'm thinking is DC directory service restore. But I'm worrying about member servers. I tested this in lab environments and after directory service restore ...

Offline Defrag of Ad database

Pankaj - 27 Dec 2006 7:28 AM - 2 messages

Dear All, Can anyone tell me after how many days one should perform offline defrag of AD database as in our domain there are lot of accounts are added and deleted on daily basis. So I think we should perform offline ...

ADMT v3 Global group migration

Marc - 27 Dec 2006 4:08 AM - 2 messages

We would like to migrate(copy) several global groups with sid history from a source win2k3 domain intraforest to a win2k3 domain. When we attempt to configure admt the option for sid history is checked but grayed out. Once the ...

Restoring AD from a different DC?

Dev 8008 - 27 Dec 2006 12:44 AM - 3 messages

Hello, I have a situation: - DC1 got a hardware problem and crashed. - DC2 on the same site is up and running DC1 got new hardware parts and is now up and running, but the AD replication didn't work. ...

Tools / Method to debug the Group Policy

Kam - 26 Dec 2006 11:34 PM - 2 messages

In our company, there are 2 GPO created by the global team and must run. We can add our own Group Policy. when I add the machine into the AD the policy not apply all the time, some may take a couple of reboot? ...

Network Administrative Privelages

Howie - 26 Dec 2006 8:18 PM - 14 messages

Hello All, I have a Windows 2003 R2 member server on a Windows 2000 native domain. For some reason all my Windows 2003 R1 member servers allow domain administrators to do everything, however, as for my Windows 2003 R2 member server, the network administrators get access denied when trying ...

Trusts

TLMPLHou66 - 26 Dec 2006 8:14 PM - 2 messages

Can a Windows 2000 Forest trust a Windows 2003 Forest? What do the forest levels need to be set at? ...

server cannot join domain

PhilippeH - 26 Dec 2006 6:17 PM - 6 messages

Hi, I have a very simple LAN: 2 boxes (A and B). each is win server 2003 with 2 NICs (LAN, WAN).A is domain controller, B is just a server. I Could not add B to domain (Apparently because A is multi-homed) so I ...

AD Database Corruption

Nitin - 26 Dec 2006 10:40 AM - 6 messages

Hi ALL, I am recieving the following error on one of the Domain controller (running windows server 2003 SP1), please advice: Event Type: Error Event Source: NTDS ISAM Event Category: Database Corruption ...

Add a 2003R2 DC to SBS 2000 domain

Januar - 26 Dec 2006 10:35 AM - 6 messages

Hi, I have a SBS2000 domain (1DC) and want to add a new hardware with 2003R2 Standard Edition as a secondary DC. Currently there is no exchange installed in the domain. I would appreciate any advise. Thank you in advance. ...

Re-joining Windows XP pro to Domain

dfotiadis - 25 Dec 2006 11:26 PM - 3 messages

Hey all. I have this problem. Windows NT4 Primary Domain Controller crash. No Backup Domain Controller. No Backup media to rebuild the PDC. Build new Windows 2003 Server with Active Directory. Re-create all Domain Users with default settings. Re-joining computers (Windows XP pro) to the Domain by changing membership ...

About MCP in Active Directory

Pankaj - 24 Dec 2006 4:24 PM - 4 messages

Hi Everyone, I wanna do certification in AD. I think if i clear 70-294 in MCSE I get an MCP certificate. Pls let me know if i am correct or not. Also if I wanna do MCSE can i give papers in any random order or i hav 2 give in ...

Server/Client help - User Profiles

Julie - 24 Dec 2006 8:13 AM - 12 messages

Hi, I've been playing around with win2k3 and winxp. I have setup win2k3 as an AD domain with a couple of users. I have also setup a group policy to redirect its desktop and my documents folders to a share on win2k3, ...

Restrict access based on OU

MichaelHensley - 24 Dec 2006 6:11 AM - 6 messages

I have a group of users in a particular out (let's call it "Students"), and a group of computers in another OU (let's call that one "LabComputers"). What can I do to make sure that accounts in the "Students" OU can't log on to any ...