Windows Server Active Directory

Exclusive domain account log in

ssauerw - 10 Mar 2007 11:01 PM - 3 messages

Hi *, I'm not very familiar with windows' rights management so maybe someone can help me on this problem: There is a windows service that needs to access data on a windows share. For this purpose the service needs to be logged in under a ...

Certificate Services Error

rsys - 10 Mar 2007 10:41 PM - 5 messages

hi, in my exchange 2003 enterprise server's event application log, I see the following messages Certificate Services denied request 24873 because The requested certificate template is not supported by this CA. 0x80094800 (-2146875392). The request was for MYDOMAIN\DC2$. Additional information: Denied by Policy Module ...

AD disaster recovery

rsys - 10 Mar 2007 8:32 PM - 9 messages

Hello, I have three DCs in my windows 2000 AD. DC1 holds all the FSMO roles. All DCs are GC servers also. In this setup, if DC1 fails, 1. seize the FSMO roles from the non-operational DC1 to another DC. ...

Have to set up exchange account details in outlook for new users manually

Coopa - 10 Mar 2007 6:03 PM - 4 messages

Hello, I'm quite new to AD + Exchange so please forgive any stupid questions. When I create a new user in AD I am able to create a mailbox in exchange for the user at the same time. However, I then have to log on ...

Demoting an NT PDC?

Michael - 10 Mar 2007 4:08 PM - 3 messages

Hi, I realise this is not quite an Active Directory question but i would imagine everyone here as dealt with this situation at some point. Anyway, we have an old NT domain that i now wish to get rid of. It has no ...

Cannot apply SCW

Ray - 10 Mar 2007 4:04 PM - 2 messages

Hi there, When I tried to apply SCW on our Exchange Server 2007 on R2 x64, I got an error, any solution about it? Thanks. Extension NameMicrosoft.OS.Services 3/10/2007 9:01:20 AM 0 Configuration start 3/10/2007 9:01:24 AM 0x80070005 Error configuring C:\ ...

Functional Levels

Michael - 10 Mar 2007 11:30 AM - 5 messages

Hi, We have a forest with 2 domains in and the forest level domain. I've noticed that the functional levels are all quite different and wondered if i needed to raise them and what benefits i would get. Top level forest domain: ...

DC roles and making a GC

Michael - 10 Mar 2007 11:19 AM - 6 messages

Hi, I've recently removed an entire domain (not needed anymore with thanks for the advice on here) and everything went fine. I've promoted the server to be another DC for another domain. That domain (A) now has 3 DC servers: ...

I need to clear a field in AD for all users.

Daniel G. - 10 Mar 2007 12:58 AM - 5 messages

Hello all, I don't even know if this is possible but my manager just came to me and told me we have a security breech and HR has asked that we removed everyone's address from the "Street Address" field in AD (ADUC | user properties | ...

How can I check where from user account was blocked ?

bildos - 10 Mar 2007 12:26 AM - 9 messages

How can I check where from user (PC) account was blocked ? Any tool for that ? ...

AD Sites and Site links - Newbie

Happy Camper - 9 Mar 2007 11:41 PM - 4 messages

I am sure this gets asked time and time again and I apologize ahead of time. Just when I think I have a handle on how to configure my AD Sites and Site Links it seems that I read another piece of information that just gets me ...

Problem with user account blocking

bildos - 9 Mar 2007 9:53 PM - 2 messages

Hello, Last time I found following issue with user account in my DC network environment: When user try 3 time logon with bad password account should be automatically blocked (It's policy restriction at DC) Some times user can logon after that (It's very rare situation) - at fourth ...

Listing members in a group - 2003 native mode

rw - 9 Mar 2007 9:42 PM - 3 messages

Hi, i'm in 2003 native forest mode and i have a group that I added about 10,000 users to, however, i cannot find a VB script that will list all of these. Every one i try only returns about 1500. ...

Sites and Services: What populates the NTDS Settings?

Joe Grover - 9 Mar 2007 9:01 PM - 2 messages

I currently have a Windows 2003 directory with the following sites defined in AD Sites and Services: - Dallas - Kansas City - Lansing - Detroit - Alexandria - Ann Arbor In Lansing there are two servers, LAN-DC1 and LAN-DC2. LAN-DC1 is the first ...

ADFS not working - new setup

John M - 9 Mar 2007 8:27 PM - 2 messages

I just setup my ADFS environment using the MS doc ADFS_Step-by-Step_Guide.doc . Some of the issues I have is that it says the doc is not for a production environment, it points you back to the web site, ...

Transfering FSMO roles

Bobson - 9 Mar 2007 7:47 PM - 17 messages

Hi, thank you for your help in advance. Currently, I have two domain controllers (DC1 and DC2) in the main office with several sites. Each has its own domain controller. DC1 holds the FSMO roles. In Sites and Servers, I could see all the site DCs point to DC1 (in ...

Folder redirection of My Doc not working through GPO

wzhen - 9 Mar 2007 7:34 PM - 5 messages

I was trying to use GPO on an OU to redirect users' My Document folder to a file server (\\servername\sharename\username) and it just wont work. Any troubleshoot ideas? ...

Replication Issue

mlopez - 9 Mar 2007 6:46 PM - 2 messages

This has been bothering me the last couple of days. I've been having issues sending from my Blackberry. The issue is because the Blackberry account does not have Send As permissions to my AD user object. I set the permission by adding the Blackberry account to the ...

printqueue objects still attached to old server

Geoff Duke - 9 Mar 2007 5:27 PM - 3 messages

I migrated print services from a Win2003-SP1 cluster resource to a stand-alone server Win2003R2 using the printer migration tool. The process went well with only a few wrinkles. Print services are up and folks are printing successfullly. However, the bulk of PrintQueue objects are still leaves of the two cluster ...

User right in ADAM

Petent - 9 Mar 2007 4:50 PM - 3 messages

Hi, i'm using ADAM (win 2003 server). I have nodes organization like this: dc=test dc=test, ou=users dc=test, ou=users, uid=123 dc=test, ou=users, uid=321 dc=test, ou=users, uid=[.......] - and so on ...

Allow non-Admin users access to view running processes

Highlander - 9 Mar 2007 4:36 PM - 3 messages

Hello all. I've been using the scripts found on this page: [link] They work fine for me, an Admin on the (Windows 2003) servers in question. What I'd like to be able to do is to allow users who are NOT ...

old machine are still in AD

lucbft - 9 Mar 2007 4:00 PM - 6 messages

Hello, I have a "not clean AD". I find sometimes records in AD from machine deleted 2 years ago. Is there a tools, procedure or something else to clean AD without risk of destroy the current data ? Thank's ...

sysvol\domain\old_ntfrs ...

lucbft - 9 Mar 2007 3:43 PM - 3 messages

Hello, I have few folder in my sysvol. they look like "old data container" : OLD OLD_NTFRS_0000fe84 policies_NTFRS_0000dbf8 scripts__NTFRS_0001896e Do you think I can delete them ? Is there tool for that or may I delete it ...

local usergroups

Mike - 9 Mar 2007 2:53 PM - 3 messages

Help! we are having a server meltdown. Our fileserver was configured poorly by a former sys admin and a raid array is hanging on for dear life. We have created a new fileserver and moved the files to it. We ...

single domain 2000 -> 2003 (r2?)

Steve - 9 Mar 2007 2:48 PM - 3 messages

I have a single domain, 3 2000 DC's. I want to get my domain to 2003 R2. should i a: just demote one of my 2000 DC's and upgrade it to 2003 R2...then prep the ...

moving folders to new server, retain permissions question

Greg - 9 Mar 2007 2:28 PM - 2 messages

I am about to mover everyones shared folders from an older server to a new server. Both are running Server 2003 Standard. How can I copy all the permissions to the new server so I do not have to configure them manually? ...

NTDSUTIL ?

Adnan Yildirim - 9 Mar 2007 2:04 PM - 5 messages

Hi, I want to use ntdsutil.exe, but ý don't know. How can I find ntdsutil.exe document, pdf files, Thanks, ...

Netlogon Replication

jwilmer - 9 Mar 2007 12:46 PM - 4 messages

We just setup a spin off company as another tree in our AD forrest. One of my apps guys is complaining that netlogon files from our main domain (root) is not being replicated over to the new domain's DC. ...

Group Policy and child domain

Net Admin - 9 Mar 2007 5:36 AM - 9 messages

I have a parent and child domain(2003 forest functional level) with 2 way trusts.. I have GPOs in both domains with settings defined under Computer and User Configuration. Which GPO or which parts of the GPOs applies when a user from the parent ...

Child Domain Structure

Andy Wolsten - 9 Mar 2007 4:22 AM - 7 messages

Hi, I currently have a domain mydomain.local and require to add a remote location to our infrastructure. I am considering two options 1- adding the remote location with a dc to mydomain.local 2- creating a child domain remote.mydomain.local ...

Problem updating schema in ADAM

Steve - 9 Mar 2007 1:49 AM - 5 messages

I am using LDIFDE.exe to import some new attributes and classes into the ADAM schema. After a lot of experimenting, I managed to get the attribute and class definitions in the right order so that LDIFDE did not give any errors. ...

Moving Active Directory Windows 2000 to Windows 2003

mepefe - 9 Mar 2007 12:16 AM - 4 messages

Hi. I have my Domain controller(Active Directory) in Windows 2000 server and now i need to move that Domain Controller to a new Windows 2003 server. In my network there are 90 users. How I can make the change, without it affects the profile of the users of ...

System will not copy active directory from current DC

DaveH - 8 Mar 2007 11:41 PM - 6 messages

Background First: I just purchased a new server with Windows Server 2003 RC2 Enterprise installed. I currently have a server with Windows 2003 SBS that all my users log into and run our ERP software from. My plan was to bring the new server up, add the domain controller role to it ...

2 domains 1 florest

Serpa - 8 Mar 2007 11:23 PM - 3 messages

Hi it is possible to have two domain's like X.pt and Z.pt and just one florest ? the .pt is the root domain for portugal so i have no control over it. Best Luis Serpa ...

Unable to login to domain

Mohammed - 8 Mar 2007 10:38 PM - 2 messages

I have a windows 2000 server with active dir which has been working fine since couple of years. I have a new windows 2000 sever which when i add to the domain , adds successfully but after reboot i am unable to login to the domain. ...

sysvol replication between 2 DC's in same site

Luca - 8 Mar 2007 10:12 PM - 2 messages

Quick question - got two 2003 DCs in the same site, both are GC and DNS servers. Active Directory replication is pretty instant. (e.g. if i add / remove a user in AD on one server the change is automatically replicated to ...

ports to modify GPO

lansvcs - 8 Mar 2007 9:41 PM - 3 messages

We have delegated full control of an OU to a department's admins. The same group has been added to the Group Policy Owners Creators group. One of the admins created a policy but when he tries to edit it he gets a message that ...

Inter-site transports question(s) :)

TS_Confusion - 8 Mar 2007 9:37 PM - 4 messages

This may seem very basic and maybe I don't understand, however after much reading, I am still confused. I have 4 inter-sites setup on my domain, Corp, Prod, Dev and QA. I have 4 site links as well: ...

unable to add DNS zones

Khalid Rahaman - 8 Mar 2007 9:36 PM - 2 messages

I installed a new 2003 x64 server and made it the primary domain controller, demoted the old controller and now that machine has been formatted. Only afterwards i realized that the old machine was also the DNS server. I am trying to install DNS on the current 2003 domain controller, DNS ...

Find Creator/Owner For All Computers In OU

Tedster - 8 Mar 2007 9:31 PM - 5 messages

In our domain, all new computer accounts are created in one OU by default. It is the responsibility of the one who created the computer account to move the computer to the appropriate computer/server OU. However, this is ...

Roaming Profile location Change

Daniel - 8 Mar 2007 9:30 PM - 4 messages

Hello everyone, We got a new NAS server and I am going to be setting this up to store the roaming profiles in the near future. To do this, I jus wnat to edit the users profile settings in active ...

Send as permisions on AD for BES users

Roger Payne - 8 Mar 2007 9:03 PM - 5 messages

Just applied the CDO patched on my 2003 SP2 exchnage server and on the Bes server now my CDO.dll files are up to date = 6.5.7651.61 what happends next is all users looses the send as right for teh besadmin user ...

What is the "License Service" GP setting?

mbrand - 8 Mar 2007 8:42 PM - 3 messages

I was reviewing our group policies and came across a setting called "LicenseService (Startup Mode: Manual)" under Computer configu- asking this because I want to make sure this doesn't pose a security threat if it's given too broad of access. ...

Client/Server time variance setting within Group Policy

Fred Branham - 8 Mar 2007 8:37 PM - 3 messages

Where within Group Policy can you specify the allowed system time variance between clients and the server? ...

change local admin password and name

stephen Johnson - 8 Mar 2007 8:25 PM - 12 messages

We has someone leaving our Tech group so i need to change the admin name and pswd. I need to change the local admin psw on all our machines in AD. I'm an admin in our OU and have an admin account on all the machines. I also have all the ...

External Trust w/o DNS?

madman - 8 Mar 2007 8:09 PM - 3 messages

Is it possible to create an external trust between two forests by using LMHOSTS files instead of DNS? We are trying to accomplish this feat using Microsoft KB Article 180094 but it is not working. Is it required to have ...

Add new computers to an OU under Windows 2003 AD domain?

wzhen - 8 Mar 2007 8:04 PM - 3 messages

We are planing to migrate our NT 4 domain into the university's Window 2003 AD domain ( It's a single domain AD since the university does not allow multiple domains in the AD). The university IT people promise us the full ...

Windows Time Sync on PDC off by 6 minutes with outside source .. Cant seem to fix.. Help pls?

markm75 - 8 Mar 2007 7:50 PM - 2 messages

I have followed the tips located here: [link] I did the ones pertaining to setting up the PDC emulator with an outside source (time.windows.com, 0x1), set all the registry keys, ...

separate domain controllers with same domain name, want to merge

Chris Reynolds - 8 Mar 2007 7:49 PM - 2 messages

I have inherited a network structure for which I am trying to make more productive. I work for a company that has 2 offices in separate locations. The offices are connected by T1 through a VPN. The offices also have the ...

LDAP auth fails

lavarus - 8 Mar 2007 7:45 PM - 8 messages

I have an issue with secure LDAP authentication on a Windows 2003 server running in 2000 mode. Anonymous LDAP test is successful, but not the secure LDAP test. There are two domain controllers. Here is the results of netdiag: (domain name changed for security) ...

How can I find out who is logged on a specific workstation

Who is currently logged on a workstation - 8 Mar 2007 7:44 PM - 4 messages

Hello, I would like to ask you a simple but very important question: We have a Windows Server 2003 domain with all additional Microsoft technologies including SMS. My question is: How can I find out which user is currently logged on a specific workstation? ...

Kerberos/encrypting logon

Alex - 8 Mar 2007 7:23 PM - 3 messages

Hello, We have discovered that passwords are sent in plaintext over our networks when logging on. In our efforts to find where encryption is failing we are wondering if there is a way of making sure that the logon process between win ...

Adding "Location" Column to ADUC snapin

Bill Bradley - 8 Mar 2007 6:59 PM - 3 messages

We currently location embedded in computernames, so, it's easy to just look in ADUC and find out where it is. We're being required to rename them to just an inventory number, which has the advantage of never requiring the name to be changed, but, the ...

Security Setting will not hold

Binh Duong - 8 Mar 2007 6:51 PM - 3 messages

With the latest exchange patches, I need to add the blackberry account to "Send as" permission on all blackberry users. However, not every users setting hold, there are a few users account automatically remove the blackberry account form the security tab of the user object. Same problem ...

Single server domain name choice: avoid ".local"? figure out later?

Rich Roller - 8 Mar 2007 6:44 PM - 12 messages

For an really tiny site, with one new server about to be set up (there will only ever be this one server for sure) and clients that include Mac OSX... I'm having a debate with myself about the choice of AD domain name. ...

Orphaned SIDs

George Mattson - 8 Mar 2007 3:16 PM - 9 messages

Does anyone know of a way to query AD for a list of all orphaned SIDs in a given OU? Thanks. ...

Changing passwords

john - 8 Mar 2007 3:10 PM - 3 messages

Hi, We just installed a second W2003R2 server. I want users to have a complex password. When I try to force them to change passwords I get a message and it doesn't allow them to change the password. The message is as follows; ...

converting SID

Björn_Urbanek - 8 Mar 2007 2:54 PM - 8 messages

Hello together! I have the SID S-1-5-21-3532701844-1100008186-3142260341-1105. I want to add the sID to the sIDHistory from an new user with ADS Edit. The tool can only accept hex/oct/bin/dec values for example: ...

replication ok but netlogon files don't synchronise

lucbft - 8 Mar 2007 2:46 PM - 5 messages

Hello, all my Dc seems to replicate properly : all is ok in replmon but one of those have old netlogon files. When I launch "replicate now" from site & serfvices it says "AD has replicated the connections" the wrong server is global catalog so ??? ...

Removing Non-Existant Domains and Workgroups

IT_Guru - 8 Mar 2007 2:28 PM - 5 messages

Not sure if this is being posted under the right group so I apologize in advance. How do you remove non-existent domains and workgroups from the Network browse list of clients and servers? We have a number of old domains and ...

Backup and restor AD

Johnson Ferrao - 8 Mar 2007 2:27 PM - 3 messages

Hello, Could someone please send me a link/faq to a proper procedure to backup my Active Directory. I need the same in case my box goes down or my whole site is down, I need the ability to finally restore my entire AD state to a new ...

roaming profile replication

Florin Blejan - 8 Mar 2007 2:01 PM - 4 messages

I have a domain controller with roaming profiles. Every user has a home folder on the server. I want to make a replication for my domain controller, but the new domain that I created replicate only users, groups, OUs, etc, bun NOT user's home ...

2000/2003 AD problems

Steve - 8 Mar 2007 1:41 PM - 2 messages

I have (2) 2000 dc's and another 2003 that i believe was promoted to DC. Everytime i turn that server on i start having user logon problem. I am thinking that the adprep didnt properly update the AD. (One of the 2000 ...

save sID during migrating from Samba to ADS to sIDHistory

Björn_Urbanek - 8 Mar 2007 1:34 PM - 6 messages

Hello together, we want to migrate vom an Samba3 server to ADS and its necessary to save the old sIDs in teh sID History. During the migration with ADMT it always appears the following error: (translated from german) "Its not possible to migrate the SIDs, because the auditing and ...

Computer accounts disappear?

Andrew Story - 8 Mar 2007 12:57 PM - 6 messages

Hi - Win2k AD and clients mix of "k and XP. Sometimes when a computer is joined to the domain (so far 3 times this week) the account is either not created, or it is somehow removed? Is there anything that may cause this? ...

Server operator Group

ieraks - 8 Mar 2007 12:56 PM - 3 messages

I am working on win 2000 server at native mode As far as i know server operator can login to all servers in the Domain . Correct ? (1) Server operator is a local group In my situation server operator can't login to other servers ...

AD domain structure - a bit concerned now!

Matthew M (UK) - 8 Mar 2007 12:29 PM - 7 messages

Hi, Im really just looking at getting an idea of what other people may have done when in our situation? Your ideas would be appreciated. We currently have the following new windows 2003 domain structure (root with sub domains for each country), we also have another forest where the bulk of ...

User Limit of a shared folder

userLimit - 8 Mar 2007 10:24 AM - 5 messages

Hi, when the "User Limit" of a shared folder is set to "Maximum allowed", what is the actual limit? Thanks, ...

long idle sessions stay on DC

deadsessions - 8 Mar 2007 7:56 AM - 9 messages

Hi, Noticed that on one of the DCs (PDC role indeed), there are numerous idle sessions (some are idle for over a week)remaining there until a reboot to get it cleaned up. The DC is even not a file server. ...

About sysvol replication & ntfrs problem

hem - 8 Mar 2007 6:10 AM - 3 messages

we have one server - pdc which is upgreaded fm winNT & having root directory WINNT. Second server BDC as additional domain controller having root directory WINDOWS. bt problem is that both server indicate error in ntfrs service...& didn't ...

New Sub Domain

Andy Wolsten - 8 Mar 2007 5:14 AM - 2 messages

Hi, We have an enterprise AD domain locationA.local with around 60 users. We have just taken over a new office which has a current DC with a seperate AD schema - only 6 users. I need to add this new company DC to our existing AD subsequently removing ...

AD Consolidation Question

Tim - 8 Mar 2007 4:34 AM - 6 messages

My organization currently has ~10 forests, each holding a single domain. Each forest represents a seperate location across the US and there are trusts between all forests. We are looking to consolidate to a single forest / single domain Active Directory infrastructure, but also add another ...

Messed up AD structure, some help needed

Erick - 8 Mar 2007 3:53 AM - 3 messages

Hi, I just entered a new company that has 235 users and 8 servers in a windows 2003 AD. My biggest problem so far is that the company has a headoffice and 4 branches located 100 mileas away from each other. The ...

permissions in the security tab of ad users and computers won't st

paulb - 8 Mar 2007 2:14 AM - 3 messages

Hi When i go to make any changes to the properties under the security tab of some user properties(permissions) in active directory users and computers (windows 2000 server with sp4), the changes will apply, but a half hour later ...

Cannot open Security: Error while opening key.

RG - 8 Mar 2007 1:17 AM - 4 messages

On two of our domain controllers I'm getting the following error on the registry key HKLM\System\CurrentControlSet\Services\Eventlog\Security\Security Cannot open Security: Error whioe opening key. You can't rename it or delete it. I have a vendor trying to instsall and ...

terminal server license question.

Will Sellers - 7 Mar 2007 11:37 PM - 5 messages

We purchased a server from HP with Server2003. When I tried to active terminal server license it asked for the key. I don't have any record of the key. Can I go back to HP for this? ...

Bind to a custom object

Petent - 7 Mar 2007 10:24 PM - 6 messages

Hi, im using ADAM server on win 2003 server .. I created a new schema class: ================================= dn: CN=TUser,CN=Schema,CN=Configuration,CN={X} changetype: ntdsschemaadd objectClass: top objectClass: classSchema cn: TUser subClassOf: top governsID: 2.5.2.3.11.22.1.2.3.1.2.3.2 ...

Errors with Active Directory/DNS

robmccartney - 7 Mar 2007 9:42 PM - 10 messages

Hello, I'm in a small office and attempting to setup a domain controller. I followed a set by set guide and ran the DCPROMO. I allowed it to do all of my DNS settings. I am unable to open Group Policy Editor, or ...

Mass Update of Terminal Services Profile fields

Pat Hall - 7 Mar 2007 9:04 PM - 5 messages

I've looked thru previous posts and found a script looks like it will do what I need ( Paul Williams on 9/29/205). My problem is I've never done VBScripting or WSH or and other scripting other than some ver simple Perl ...

ADFS Token Auth clarification

Eric - 7 Mar 2007 8:44 PM - 4 messages

Just a quick point of clarification. I have my ADFS environment (w/proxy) in development testing .ASP, Sharepoint 2003 and Sharepoint 2007 applications on multiple servers using Windows NT Token Authentication. My question is once I receive my token is received and I gain access to the ...

Break ADAM configuration set, leaving two seperate instances?

jesse.gardner - 7 Mar 2007 8:40 PM - 5 messages

I was tasked to create a copy of an ADAM server to split our test environment into a new dev environment. Following instructions on the MS website, I took a backup of the .dit file, and installed with the ...

Migrating from 2003 SBS to 2003 SBS R2

Dragonace1 - 7 Mar 2007 8:26 PM - 3 messages

We are currently running Windows 2003 SBS on an older server which is reaching the end of its lifespan. We just purchased a newer dual core server with more memory and storage to take the place of the older dying server. So ...

NooB ? - W2K3 Server - 2 Domains need to talk to each other

csudhoff - 7 Mar 2007 8:13 PM - 2 messages

I have a production domain "CorpMain" that is apart of the Forest "Corp". I just installed a new production server called "CHS" and its set up with AD/DNS/DHCP as well and is its own seperate "PDC". what is needed to have the two communicate with each other? I am still kind ...

\\mydomain.net\sysvol is not accessible!!! HELP!!!

infopath - 7 Mar 2007 8:00 PM - 4 messages

We have about 1050 DC hosting AD. Four servers are in the HUB site and the other are in different sites (branches). Last week we started to receive error message: "Distributed file system service encountered a problem and needed to close". After this every 10 mins ...

ADFS Reading Groups from Token - What is [This Organization] Group

Todd Fleenor - 7 Mar 2007 6:33 PM - 4 messages

Using ADFS (Active Directory Federation Services), I have an NT Token based web applicaiton. Within this applicaiton, I have code that reads the groups from the token. The groups returned are: RESOURCEPARTNER\tokenappusers Note: This group only exists in the resource partner active directory domain ...

Best way to handle two networks?

Tom25 - 7 Mar 2007 6:04 PM - 8 messages

We have a Win 2003 domain with 9 servers in one network and one server in another network. The single server network is used for Network Attached Storage. The NAS server is a Win 2003 Storage Server. Would it be best to keep all servers in a single Domain or to have separate ...

creating new site

tke402 - 7 Mar 2007 5:29 PM - 2 messages

Hi I am creating a new site in AD. The physical location is connected back to the main building by a P2P dry T1. All traffic and authentication comes back to the main site. I am looking to improve performance of this site. I would ...

Disable programs to run.

abckid - 7 Mar 2007 4:33 PM - 4 messages

Hi, We have Win 2k3 server domain. I want to disable all the users not to able to run some programs. To be precise, the Google Talk messenger can be installed without administrative rights by the domain user. Also it simply ...

Question about ADprep.exe

compsosinc - 7 Mar 2007 4:08 PM - 3 messages

We run SBS2000 Server for our domain controller. We recently added Windows 2003 Server R2 as a member/file server on the domain. We were reaching some other things concernng this and the ADprep.exe threads caught our attention. What is ADprep.exe used for exactly? ...

Computers in Administrators group

durx - 7 Mar 2007 4:06 PM - 2 messages

Hi all, For some reason, a lot of our workstations, some DC's and a few member servers have found their way into the builtin administrators group on our 2003 domain. They all reside on different sites, and everything seems to be ok. ...

Web Based Administration In Ad

kcornwell - 7 Mar 2007 3:59 PM - 4 messages

I am looking for a way to provide our AD admin a web based way to manage AD. Does MS have a utility that does such a thing? Or third party? Thanks ...

Need an Exchange Expert assistance!!!

8UP - 7 Mar 2007 3:58 PM - 3 messages

The account that was used for the original install of Exchange 5.5 infrastructure is now embedded. What I mean by that is we have a legacy NT4 domain that has a account that was used for the original install of our ...

Remote Site XPClients with no DCs - [WP]

WILDPACKET - 7 Mar 2007 3:32 PM - 2 messages

Have about 65 sites w/o domain controllers which are connected via high speed VPN to our head office. Cannot put DCs, money matters. Some of these PCs in their event viewer it shows they fail to contact the ...

Group Policy delegation

Keshav - 7 Mar 2007 3:23 PM - 4 messages

Hi, How do I delegate control on Group Policies linked to an OU, to a user? I used the GPMC tool and delegated "Edit Settings, delete, modify security" permissions to a user and he is not able to modify the ACL of the group ...

Event ID 1699 Schema Mismatch

Smurfster - 7 Mar 2007 2:55 PM - 3 messages

Hi On one of our domain controllers we are constantly getting the following event in the directory service log, event id 1699 Additional Data Error value: 8418 The replication operation failed because of a schema mismatch between the servers involved. ...

Remove AD from Windows Server 2003 running Exchange Server 2003

Yanick - 7 Mar 2007 2:33 PM - 2 messages

Dear all, I'm having a server running Windows Server 2003 and Exchange Server 2003. This server have the Active Directory install on it and I would like to remove it to make it a member server only. I know that we have to use dcpromo to promote/demote a server AD, but ...

DC Shows as LOGONSERVER when DC is off?

Scott Townsend - 7 Mar 2007 2:17 PM - 11 messages

I have a DC that we turned off and it still shows up as a LOGONSERVER on a few machines. How do I get the PCs (Vista and XP) to see that the LOGONSERVER DC is not available? As a result I do not get access to some network resources. ...

Do I need to register IAS in AD?

Gonzo - 7 Mar 2007 2:00 PM - 2 messages

I have just exported the IAS settings from one of our Windows 2003 IAS servera and imported them into another, do I need to register this in AD to make it work? I never set the other Radius (IAS) server up and I'm not sure if this option ...

Domain Controller Capacity

John W. - 7 Mar 2007 1:38 PM - 13 messages

When planning your hardware for a Windows Server 2003 domain, according to microsoft an example would be: 1,000 - 2,999 = 2 GB Now they also say this about the table i took these numbers from: "Use the number of users per domain in a site to determine the minimum ...

About Active Directory and other 3rd part LDAP

io.com - 7 Mar 2007 1:32 PM - 3 messages

Hi, exist any tool or method for enable a LDAP comunication across Windows 2003 Active Directory and other 3rd part LDAP ? I need to propagate a "user" create on any LDAP to other and if posisble enable a SSO between AD e 3rd part LDAP. ...

Upgrading to Windows 2003 native mode

gpo innacessible

Configuring replication

How to change Win Logon screen

Server 998 Error

W32Time Event 38

active directory error after removing primary dns zone

Access control list delay

two-way forest trust issue

dsmod and renaming the computer same thing?

remove local pc user account via domain

AD troubleshooting tools

HELP, SMB errors

Remotely run DCPROMO

Replication

Disallow DC to service Logon requests without demoting?

Child Domain Problem - Again

Applying user settings based on computer location

Push out WindowsXP-KB921883-x86-ENU.exe via Active Directory

Exchange still on demoted 2003 DC. We have 2 exchange servers bot

Limits to create users

Events 1030 and 1058 logged on domain controller every 5 minutes

Mapped Drive lost its path

Urgent Help needed!!! Kerberos ID 4

Execute order of Policies

Getting tokenGroups attribute

Global modification of user accounts

FRS Replication Problem

DHCP Server authorized but will not lease IP

IE Security Settings Deployment via GPO

schema changes

Problem: The target account name is incorrect

Net time urgent!!!!

Event ID: 7 Source: KDC

Windows 2003 DR exercise , restoring AD to different hardware

obsolete DNS entries in AD-integrated DNS

Event ID 1568

which DC auhenticates user logon

Backup AD Domain Controller

What happens to the previous nt4 domain administrator profile?

AD is broken - Error No mapping between account names and security

AutoEnrollment RPC Error

Effective Limit of DHCP in Windows 2003 Server

Trust relationship using LDAP over SSL

Replication Errors

ADMT V3 Migration Headache

Migrating Group Policy

About CVSDE and user licenses

Delay replication site

CVSDE and distribution lists

Reseting Inherited Security on User Objects?

Setting domain password age

Phantom user account

How to Stop Replication?

Directory limitations in Windows 2000 ?

How can a login script use administrator privileges?

A question about folder redirection

Best way to setup profiles

Redundant print servers?

Event ID 3 Kerberos KDC_ERR_S_PRINCICAL_UNKNOWN

Change password needs extra logoff

Move users from one domain to another domain in a different forest

Raise forest/domain level

Error In Adding ADS to existing Domain

Automated RSOP?

Is there an easy way to list which of our DCs are GC servers?

Which programming language

2nd email address in users logon

My Linux Page

AD communication problem

Replication Problems - AD OK, DNS not replicating

Remote Printing

How to use a User template to create a user from the command line

KCC ignores bridgehead