Windows Server Active Directory

Best place to put web servers?

Michael - 17 Mar 2007 7:17 PM - 2 messages

Hi, Currently all of our web servers are on a seperate NT domain (with DMZ ip range). As we are moving everything to AD should we be moving these web servers as well? Is so where should they go? In the AD with everything else? ...

Active Directory and Dynamic Ip

mrbochin - 17 Mar 2007 4:40 PM - 5 messages

I have a windows 2003 server computer in my little LAN in my house, and I want to connect them all through active directory, of course I have to create a domain, but can I do it with dynamic Ip, or it necesseraly needs ...

Modify locked AD Schema Objects

NS - 17 Mar 2007 4:32 PM - 5 messages

Lo everyone, In order to make my Netasq F200 firewall being able to communicate with my AD i had to modify my AD schema. (Netasq whiteaper here : [link]) I just noticed that i did it wrong and i have to modify some attributes ...

Migrated NT-AD accounts and SQL access

Michael - 17 Mar 2007 12:21 PM - 2 messages

Hi, Bit of a long shot on this section probably but wondered if anyone could offer advice. We are slowly migrating users from NT to AD. The problems we face are numerous flat file share permissions and also SQL permissions(loads of). ...

Domain and child domain file sharing

Hong Jin - 17 Mar 2007 4:36 AM - 4 messages

Hi, I am new to domain server technologies. I setup 2 domain servers, A1 & B2. A1 is the first DC located at headquarters and B2 locates at remote site. A manager Mr. Smith connects to domain server B2. When Mr. Smith comes for a ...

Map network drives to different servers

Hong Jin - 17 Mar 2007 3:28 AM - 3 messages

Hi, I have 3 servers, which are server A1, B2, & C3. Currently, when Mr. Smith, a domain user logs onto the domain file server A1, he is assigned to his own network shared folder. However, this user also needs to access a folder at ...

Retreiving a list of user account from multiple domains?

ikaikaokaina - 16 Mar 2007 11:13 PM - 3 messages

Hello. I have a question I'm hoping someone could clarify. I've got a forest set up with multiple domains which represent each of the company's five locations. Each domain has it's dedicated GC and contain the user ...

Contacts and PKI Certificates

Kenneth Sims - 16 Mar 2007 5:35 PM - 3 messages

I want to associate some PKI certificates with some newly created contacts I imported into Active Directory. When I click on the properties of the contact I do not see a tab for Digital ID or Published Certificates, but if I ...

problem

Florin Blejan - 16 Mar 2007 5:16 PM - 4 messages

I have a 2003 Sever with a domain controller. I have 10 computers in this domain. I have 100 users in domain. I want that in 2 domain stations to log on ONLY 2 specific users from the domain. How can I do that ? ...

setup

Dave - 16 Mar 2007 4:33 PM - 6 messages

I have three sites that are connected by VPN. Each of these sites have a DC and are connected to the same domain. In the future we will be expanding and DC will be assigned to these sites. Is there a common practice or rule that ...

Active Directory Migration

vinaymelkote - 16 Mar 2007 4:25 PM - 3 messages

Hi All, I am trying to migrate a small domain with 25 users and TWO offices in NY and CA. Current servers are running windows 2000 and replication is working fine. Two new servers with Windows 2003 have been added to the ...

Need help with using Group Policy to lock workstations

Don - 16 Mar 2007 4:24 PM - 3 messages

Hi, Can anybody show me how to using group policy to lock all workstations in domain if workstation is idle for 15 minutes? we have about 100 workstations and they are all XP SP2. Server is Windows 2003. ...

Making new attributes in user class

Sander - 16 Mar 2007 10:10 AM - 6 messages

I want to make five new attributes in the user class but has no idea how to do that. The problem is that I don't know what to fill in for the X.500 OID. I ask the department for schema registration from microsoft for help but ...

Creating a new distribution list

Warrensm - 16 Mar 2007 7:40 AM - 4 messages

i have installed the windows server 2003 administration pack sp1 on a pc running windows xp pro sp2. however when active directory users and computers is opened under the exadmin account, i am able to create a new email distribution list but there is no option ot associate an exchange email ...

Looking for help on design Active Directory for small business

rocky - 16 Mar 2007 7:28 AM - 2 messages

Hello, I am freelance semi IT for a small company with three branches offices that each have Windows 2003 server. I am planning to implement Active Directory for the companywide use. I like to know what is the best and simple design for each branch. ...

Restoring AD to new server

chris - 16 Mar 2007 5:54 AM - 3 messages

Is that possible restoring AD to new server with different hardware. Your advice is greatly appreciated, Thanks. ...

Drives not mapping

Lan_Guy - 16 Mar 2007 4:40 AM - 2 messages

Hello folks - Our network has 2 sites that each have Windows 2003 as a DC. Both DC's are Global Catalog servers. I have configured replication between the 2 domain controllers. When users log onto PC's at the main site (DC name = Server), ...

Group policy does not refresh

SeanK - 16 Mar 2007 1:38 AM - 2 messages

I have tried everything I know how to do. I have a group of 27 computers in a computer lab that do not accept the gpupdate command even when /force is used. The server settings are correct as far as I ...

immediate lockout

CarlZ - 16 Mar 2007 12:53 AM - 4 messages

A company I work for recently terminated an employee. We *disabled* her account, they let her go back to her desk and she sent out several emails. The emails were harmless, but our concern is how do we immediately lock a ...

dynamically linking an auxillary class

miranlui - 16 Mar 2007 12:46 AM - 2 messages

i can't seem to be able to dynamically link an auxillary class to a user.i created an auxillary class. when i try to link a user to this class, it returns with an error. any suggestions on what might be ...

Sysvol not replicating, tryed everythiing, need help!

Luca - 16 Mar 2007 12:14 AM - 3 messages

I have been having trouble for a while now with two DCs in the same site not synchronizing the sys vol share. The two DCs in question are in our head office site. DC1 holds all 5 roles (PDC, FSMO etc etc) DC2 is the one with ...

Slow logging in to Domain Controller

Chucky - 15 Mar 2007 11:37 PM - 6 messages

Hi, I'm in the process of evaluating Windows 2003 R trial version. I've installed Active Directory on an old Pentium 4 1.5GHZ 1Gig RAM machine, and joined a test workstation to the Domain. When I try to ...

Problems with renamed Administrator account

Mike Bannister - 15 Mar 2007 9:55 PM - 2 messages

Hello, I am running Windows 2003 SE SP1 and I have renamed the administrator account as per KB816109: How To: Rename the Administrator and Guest Account in Windows Sever 2003. After I renamed the Administrator account I logged in to the DC using the ...

Need help with AD rights - Installing software by basic users

Courtney R - 15 Mar 2007 8:23 PM - 3 messages

My company will be using a local client application that is downloaded and installed from the vendor website. This requires administrator rights to install. So, the user will go to site [link] and the site will download ...

Can you create an OU administrator account?

wzhen - 15 Mar 2007 8:22 PM - 6 messages

Our university has a single domain Windows 2003 AD. They will create an OU named Online for our department. Is it possible to have them to create an OU administrator account that we can use to create and manager computer accounts ...

create default value for msExchOmaAdminWirelessEnable

sneaky - 15 Mar 2007 7:35 PM - 2 messages

Hello, When a new AD account is created msExchOmaAdminWirelessEnable is not set by default. This means that the account is automatically enabled for mobile access. Is there a way to have this attribute automatically populated when an account is created? ...

Machine GPO

Peter F - 15 Mar 2007 7:24 PM - 10 messages

Hi All, Please could someone help. I need to know if it is possible for a GPO to be applied to a PC and, if so could that GPO hold applications that would be available for a standard userer profile to access when he logs on to the machine with a GPO applied to ...

Restoring after disaster

wssnoob - 15 Mar 2007 7:15 PM - 7 messages

We are a small company with only 1 office - about 40 employees. We are just getting large enough to think about disaster recovery - and I have been tasked with doing the restore. I have some server experience but not much as I have been primarily desktop support. I ...

Recover a OU

lmelm - 15 Mar 2007 5:14 PM - 5 messages

Hi I just delete a organization Unit, is there a way I can recover it? Thanks ...

Auto Deleteing User Accounts

UHHG_Network_Guy - 15 Mar 2007 4:15 PM - 5 messages

Is there a way to delete users out of active directory based on date? I am wanting to delete user accounts that have been disabled after a certain period of time, say 6 months. I would like to use a script that would run ...

Domain keeps vanishing

Simon - 15 Mar 2007 3:54 PM - 2 messages

This is a weird one............... Domain seems to be running fine all users can access data with no problems. When i view the domain over network neighbourhood i can see all pc's, then if i refresh sometime later i get the message:- ...

Inheritable permissions checkbox

Marcus Dempsey - 15 Mar 2007 3:31 PM - 5 messages

Hi, I have a weird problem which is only affecting one of our users in our Windows 2003 AD domain (SP1). When you look in the advanced security settings screen of the user, the "Allow inheritable permissions from parent ...

Access to Domain Controllers at Sites

Trev - 15 Mar 2007 3:09 PM - 3 messages

Hi, We are running Windows 2003 Server AD is native. We have many sites with IT support at each site. I've delegated control to OU's at each site to the local IT personal. I still need the IT users to login to ...

GPO screen saver lock

Shedoks - 15 Mar 2007 3:00 PM - 3 messages

I've made screen saver lock GPO but it won't run i don't know why but after 2min nothing happen (2min is idle time). This is my policy User Configuration -> Control Panel/Display Hide Screen Saver tab: Enabled ...

RAS and VPN policies - help

Michael - 15 Mar 2007 2:31 PM - 3 messages

(I'm posting this same message here - i've also posted in server security but it kind of falls under AD as well so hoping more people can help). Hi, We have NT users and a VPN server. Each NT user can VPN in if they have the ...

ADAM and DMZ

Michael - 15 Mar 2007 2:14 PM - 3 messages

Hi all, This is a quick and rather general question... Am i right in thinking that but utilizing ADAM we can get rid of our NT domain that acts as our DMZ? Anyone have some good links and reading on ADAM? ...

user wants to login to several computers simultaneously

Pearl - 15 Mar 2007 2:08 PM - 4 messages

I have a user on our Windows 2000 domain/integrated that wants to login with her acct to several computers simultaneously but when she does her account always gets locked out. How can we resolve that? ...

cannot extend schema for R2

Interlochen.Arts - 15 Mar 2007 1:41 PM - 4 messages

Hello, When I try to run adprep off R2 Disk 2, I get the following error messages: "isSingleValue" attribute value for objects defined in the Windows 2000 schema and extended schema do not match. A previous schema extension has defined the attribute value as "True" for ...

Block a policy for one computer

Matt - 15 Mar 2007 11:32 AM - 4 messages

We have a GPO (with a number of settings in) that is applied to our domain. One of the settings is Computer Configuration/Admin Templates/Windows Components/Windows Movie Maker and the 'Do not allow Movie Maker to run' ...

Network Place

Benedicte Merci - 15 Mar 2007 10:45 AM - 5 messages

We change of location and change or Ip range by the way. Since we 've moved My Network Places / Entire Network / Microsoft Network Windows I find Workgoups and my internal Network but the root domain is missing (We have a VPN connection with the root). ...

AD rights to install software on a machine

Andrew Story - 15 Mar 2007 10:04 AM - 6 messages

Hi, do you know what rights a user account in AD needs to install software on a workstation? I need to create an account that someone can logon as to install software, and would like to do this per OU when needed. ...

Active Desktop Wallpaper Not loading Correctly

pegasus1919 - 15 Mar 2007 9:58 AM - 2 messages

Hi, I have a problem that most of my XP Pro SP2 machines won't completely load a desktop background specified in group policy. They all partially load the wallpaper, because i can see a thin strip of it across the top of my desktops. Some of the machines work fine every ...

Upgrade standard W2K3 to Entreprise Edition W2K3

Benedicte Merci - 15 Mar 2007 9:03 AM - 2 messages

I need to upgrade a W2K3 Standard Edition server (member server) to a Enterprise W2K3. I have application and Virtuel server on this. I don't want to Reinstall. What do you think about? Thank you. Benedicte Sorry for my english, french is my mother tongue so MERCI! ...

login once per user

gbkhor - 15 Mar 2007 1:16 AM - 4 messages

hi can anyone show me how to limit one windows id to be login once at anytime at any PC? note: I'm using Win2K3 R2 AD thanks ...

command to check what dc authenticated client

[c] - 15 Mar 2007 12:50 AM - 5 messages

there is a simple command that can be run from the command prompt, i think its a 'net' command that will show you the domain controller that the client authenticated against. Is anyone able to supply me that command. Thanks ...

SetPassword and ChangePassword Invoke

John Larsen - 15 Mar 2007 12:37 AM - 2 messages

Trying to set or change a password while the "User must change password at next login." yields an error foo the same name. This is a pure MS AD 2003 environement. I am using C# as follows DirectoryEntry DE = new DirectoryEntry ...

LDAP query...

Dan - 14 Mar 2007 11:54 PM - 8 messages

Hey everyone, I'm trying to use a very simple query from ADUC (saved queries) where I give a custom filter of (objectSID=S-1-5-21-1208884873-28081512-3404142544-1444). This particular SID is what I can only assume is a deleted account somewhere but I don't know ...

How do I see who created a user/group/OU in W2k3 AD???

islanman - 14 Mar 2007 10:43 PM - 9 messages

Hi... I'm looking for tips/pointers on the following: *How can I determine WHO created a user/group/OU in AD? *How can I determine WHEN the objects were created? *How can I determine WHERE the objects were created? ...

Inactive User Logins

DLove - 14 Mar 2007 8:39 PM - 4 messages

I am looking for a tool (free is possible) that can give me accurate information concerning User Accounts that have been inactive for a specified period of time withiin 2003 AD. If anyone knows of such a tool or script, I ...

Joining linux machine to domain

SJMP - 14 Mar 2007 8:34 PM - 6 messages

what is the microsoft preferred way to go about joining a linux server/workstation to a windows 2003 domain? ...

Stale Computer objects

tke402 - 14 Mar 2007 8:19 PM - 4 messages

Hi, I have decommishioned quite a bit of workstations over the past few months. I looked in the AD Users and Computers and it looks like the computers are still in the computers OU. How long do these stale computers stay in AD? ...

Domain Trust Problem

WadeBart - 14 Mar 2007 7:55 PM - 3 messages

I have two disjointed domains. Domain 2003.com = Windows 2003 Native Mode. Domain 2000.COM = Windows 2000 Native Mode Domain. I've created a trust between the two them so I can use the ADMT (v3) tool. When I try to verify ...

Joining computer to domain error

Jason - 14 Mar 2007 7:34 PM - 4 messages

This may sound stupid but, here is go. I have 2 computers that I am trying to join to the domain but when I do it says : the computer name you have enter can not be used because: you were not connected because a duplicate ...

Replace DC replication/ad issues

APT SA - 14 Mar 2007 6:50 PM - 6 messages

My goal was to replace a DC (lets call it Server1) in site with a new DC (Server2) of same name and rename and move existing DC to a member server role(Database server). I have 8 sites. So I had a site with 1 DC. I promoted a member server to a ...

My Organizational Units Group Policies are not being applied to do

Sweeper - 14 Mar 2007 6:13 PM - 2 messages

Hello Tech Specialists, I recently created an organizational unit within my domain in Active Directory. I created a group of users and added this group to my OU. I then created two policies to be aplied to this group, and so far I have had no ...

NTP Question

Geoff - 14 Mar 2007 5:54 PM - 8 messages

We have a 2003 domain separate from our production domain that has several member servers for a application located in our DMZ. As it turns out, the PDCe was never pointed to a NTP server, so the time on the ...

How to add an additional tab into ADUC

Dan Heim - 14 Mar 2007 5:13 PM - 2 messages

I am trying to see if anyone has any information on how to add an additional tab into ADUC. I would like to add in either the Employee ID attribute or a large "Notes" field where I could enter information I have already enabled ...

Domains for offices in different cities..

averied - 14 Mar 2007 4:38 PM - 11 messages

Hi, I'm implementing a domain structure for our company. For starting, I'm doing this in 2 different cities, so now I'm in the first city, and I created a Domain in a DC Server. The domain name is city1.company.net ...

Network is 4 hours behind the WIN 2K DC

eric.cole - 14 Mar 2007 3:34 PM - 4 messages

So Monday I come in after the big time change and all computers except the Domain Controller W2K Server updated properly. Like a fool I tried to manually set the new time. This caused all client computers to jump ahead one hour. ...

Deleting a user - does it leave a ghost?

Dave - 14 Mar 2007 12:09 PM - 2 messages

If I delete a user from the AD does it automatically delete all of users contents of their mailbox on Exchange or does it just remove the link. In other words, does it release the disc space? ...

Login Script's and user lockouts

Dunne_Kev - 14 Mar 2007 10:43 AM - 3 messages

Good Morning, i'm having issues with login scripts running in my head office. we currently have 2 DC's in the office (which i inherited!) one has exchange installed on it the other just a DC. We enforced a password policy recently so that users have to change their ...

active directory integrated zone problems

inenewbl - 14 Mar 2007 9:26 AM - 2 messages

Hi all. I have a windows 2003 DC. In the dns management console, i can see my active directory integrated zone. However under my forward lookup zones i can only see the folder for my domain. I cannot expand the folder for my domain ...

Unable to View Other Domains - Network Neigborhood

A.L. - 14 Mar 2007 5:46 AM - 2 messages

I have currently have two domain running windows 2003 server on two different subnets but they can't seem view each other via of network neighborhoods. The trust has been established between the two domain and I have verified ...

user Authenication question

Jack - 14 Mar 2007 1:40 AM - 5 messages

Hi All Just want to confirm something before my company gets into a DR project. We have a site that has a domain controller which serves as GC, DNS, DHCP, file print server. I know its wrong but this is the infrasture that I ...

client user certificates

param - 13 Mar 2007 10:30 PM - 11 messages

Hi all, We have a Windows Server 2003 domain environment with a Enterprise Root CA installed. Clients are Windows XP Pro. Some of our apps use client certificates for user identification and today the users go to the certificate enrollment website that is installed on the CA server to ...

user allow to install application but not access network resources

Pearl - 13 Mar 2007 8:35 PM - 3 messages

how can I restrict a user in our domain this way: 1. Can install programs 2. Can not access network servers via Network Places He will have the capability to login to a standalone server on the domain ...

domain controllers on different subnets

thomas.pani - 13 Mar 2007 7:47 PM - 2 messages

Hi, I've got two Windows (2k3) servers, which should act as domain controllers for a single domain and reside on different subnets. Each one is secured by a firewall (Cisco PIX or ASA). DCs have private IPs, natted to the outside to public IPs. So, network topology is this: ...

Need to scrap my 2000 DC for a 2003 DC

bill - 13 Mar 2007 7:34 PM - 4 messages

Hi I have 1 windows 2000 domain controller and about 40 clients of win98, win2000 and xp. My windows 2000 DC is dying and cant be upgraded so I am going to buy a new server with windows 2003. I want to make this new server ...

2003/R2 object class and query questions

eric.hall - 13 Mar 2007 6:10 PM - 3 messages

Hi, I've been using AD for several years, but am installing a new 2003/R2 network and have some questions inetOrgPerson seems to be fully supported in 2003/R2, and from my poking around in ADSI Edit it looks to be a sub-class of the regular ...

when was user activated

7736 - 13 Mar 2007 6:06 PM - 4 messages

Good day ALL.. I need a bit of help which i am sure somebody else out there has an answer to this. There is a user in Active directory that has been ...

Offline files

Snake86 - 13 Mar 2007 6:05 PM - 4 messages

Hi, in our AD we use roaming profiles with offline files for notebook users. The first problem is that I get an error synchronizing PST-files (Outlook 2003 e-mails). How can I make these offline available? The next thing is that even if the profile, My Documents and the Application ...

GC Logon failure

Alessandro - 13 Mar 2007 5:54 PM - 4 messages

We have 2 subnet and 2 sites connected from a T1 configured in this way: Domain "farm.contoso.com" (netbios name is "contosofarm") is in a parent-child trust with domain "contoso.com" (netbios name is "Contoso"). - Server NY1 (subnet 1, site NY): GC and Master of contoso.com ...

Goodlink Service Account

Francisco Villa - 13 Mar 2007 4:58 PM - 3 messages

I am running Exchange 2003 and Goodlink 4.9.3.20 in out network and have been experiencing an issue with the Goodlink service account. We have given the service account "Send As" permissions to all mailboxes, how ever that ...

Delegate exchange tasks

Danilda Freeland - 13 Mar 2007 3:26 PM - 7 messages

I have delegated my Help Desk department to create user accounts, but they do not have the ability to create the user's mailbox. Where do I assign them permissions to do this? I do not want them to be able to administer my ...

Question about inter-site replication

TS_Confusion - 13 Mar 2007 2:42 PM - 17 messages

Hello! I have four sites, three of which (B,C,D) cannot talk to each other, they have to go through site A to be able to replicate their A/D info. (we do not allow the subnets of B, C, D to transverse the network, they can only ...

Not all Group Policy settings being applied

tigerdivision - 13 Mar 2007 2:32 PM - 4 messages

Hi Everyone! I am encountering a problem on certain Windows XP Pro (SP2) workstations where not all settings of the W2K3 group policy are being applied. The setting which is not being applied is the Windows Automatic Updates. It is company policy to disable automatic download of MS updates. The majority of our workstations are having this policy setting applied correctly but some are not having this setting applied. They are having other settings applied e.g. disabling the Run command, etc., but not this one. All the workstations belong to the same AD domain and all have a common group policy. ...

Installing a Certificate server

Gonzo - 13 Mar 2007 1:15 PM - 4 messages

I've never installed a certificate server before and need to create one to issue certificates for our wireless network. For the type would I install "Enterprise root CA"? And the for the common name would I just create a ...

Clear password hisrory

Yuriy - 13 Mar 2007 1:04 PM - 5 messages

Hello all. Is it possible to clear password history for a domain account? We have GPO enfircing password history of 24 password. I have a need to clear password history for one of the users. Is it possible to to do it? And to have better ...

DSGET when group contains cross forest objects - get "CN=<sid>,CN=ForeignSecurityPrincipals"

Matthew M (UK) - 13 Mar 2007 11:56 AM - 4 messages

Hi, When i use DSGET on a group which has members from another forest, i recieve the following: "CN=<sid>,CN=ForeignSecurityPrincipals,DC=domain,DC=domain" Is there anyway i can get the friendly name shown in the ADUC? ...

Query re Access-Based Enumeration (ABE)

tigerdivision - 13 Mar 2007 11:34 AM - 2 messages

Hello everyone! I have a query which I hope someone will be able to answer. We have an application whose MS Access DBs reside in a particular folder. I wish that authorised users be able to still access the Access DBs since they are users of the application but I do not which them to see them when they are browsing the folder using Windows Explorer in order to prevent them from copying these DB files, etc. Can this be done using ABE? ...

Potential problems with DC disconnected for more than 60 days

dbowman - 13 Mar 2007 10:13 AM - 4 messages

One of our sites (with very few users) will move to a new temporary location. We will keep the servers disconnected (ie turned off..) for a while (users will logon using a VPN access to the main site with a ...

DSADD user -memberof usage

Mo Childs - 13 Mar 2007 9:49 AM - 4 messages

Can anyone point me at the correct syntax for using the DSADD user command and adding a user to multiple groups, I can only add a new user to one group at creation time. An edited version of what I have now is below ...

Active Directory Migration 2000 to 2003

mohey - 13 Mar 2007 8:57 AM - 4 messages

I got very tired searching MS web Site about an article discussing the Migration process from Windows 2000 Domain to Windows 2003 domain but i did not find any related Article. I have a very easy Scenario - Windows 2000 Domain with only one domain Controller. ...

Script or command for Server synchronisation

schteger - 13 Mar 2007 8:49 AM - 7 messages

Hi there I was wondering, whether there exist a possibiliy to synchroize several servers with each other by just using a script (I just wanna use a button to start the synchronisaton) Is there any chance for such a script or a command? ...

internet explorer security level

idem ugur - 13 Mar 2007 7:27 AM - 3 messages

Hello, I am planning to change all domain user's ie security level at the same time. I decided to increase level which is high. But unfortunately I don't know how.Can I use group policy or scripts for this issue? ...

Sysvol not replicating but no NTFRS errors

Luca - 13 Mar 2007 5:59 AM - 5 messages

Got some problems with the sysvol directory not replicating between two servers which are in the same site. Both are obviously DC's and they are also GC's. Connectivity is fine, DNS is fine, Active Directory changes get ...

Desktop lockdown Help

Will Sellers - 13 Mar 2007 2:22 AM - 3 messages

I have a GPO that basically locks down desktop functions for students. When a student logs on to a PC they get a mandatory profile. How can I restrict a student from creating a desktop background from an internet image? ...

Set Registry Remotely as non-administrator

guywmustang - 12 Mar 2007 11:42 PM - 6 messages

I have something I'm trying to do and haven't yet found an answer on the internet. I'm trying to add the permission for a non-administrator to be able to read & modify the registry on a remote computer. It works fine as ...

Time synchronization

Sandra L Miller - 12 Mar 2007 10:13 PM - 3 messages

The machines in my domain are not staying synchronized with the domain controllers. Isn't this supposed to happen by default? From the Help and Support tool I found the following under "Windows Time Service overview": "In the Windows Server 2003 family, Windows Time Service ...

Active Directory Best Practices Tool

Mr. JYC - 12 Mar 2007 8:46 PM - 8 messages

Hello, Does any one know of any tools that could be run against Active Directory that would indicate if Active Directory is running using best practices? Also, if there isn't any tools, what should I look at to find out if AD is ...

ADAM and Performance

jskalicky - 12 Mar 2007 8:36 PM - 2 messages

I have ADAM installed on a Windows Server 2003 R2 machine and I am using the DSML service in fronot of it. We have been performing some load testing and seem to top out at 1,000 sequential users before we are thrown a connection ...

Active Directory - Joe Richards - ISBN please?

Matthew M (UK) - 12 Mar 2007 6:12 PM - 5 messages

Hi, Whats the ISBN of your book Joe? Matthew ...

Adding auxiliary objectClass to existing instance of an object.

qwikrex - 12 Mar 2007 5:30 PM - 2 messages

Hello, I'm developing an application which will use schema extensions for tracking the status of Groups, and Users. As such, I want to create two new classes, one to extend the "group" objectClass, and one to extend the "user" object class. They are defined below. ...

How can I find the certifiacte server in AD?

Gonzo - 12 Mar 2007 4:19 PM - 4 messages

We have/had a certificate server in our network somewhere, can I use AD to find out which server it is? ...

AzMan AccessCheck problem with Active Directory Groups

hocky.johansson - 12 Mar 2007 12:58 PM - 3 messages

I have trouble using AD groups assigned to Roles in AzMan. The AccessCheck function works great when I assign AD Users direct to AzMan Roles. If I put an AD User into an AD Group then assign the AD Group to my ...

Re. Adprep on Server R2

jprstokato - 12 Mar 2007 6:44 AM - 3 messages

Re. Previous message on this problem: [link] describes a hotfix containing the files Idmschupg.exe and Schupgrade.ldf. Could someone let me know where to get this hotfix, or these files without going through professional supoort licence procedures. ...

Certificate Authority Problem with AD

neo kw - 12 Mar 2007 6:30 AM - 2 messages

Hi, recently my corporate IT deployed a Root CA in China Domain Controller which is an 2003 Enterprise. And all the certificates are autoenrolled normally. Our singapore DC which is an 2003 Standard version reported that all users got their certificates (by viewing Certificate Template in AD). ...

Server 2003 R2 -Disk 2 Adprep problem

jprstokato - 12 Mar 2007 5:19 AM - 5 messages

Hi, As instructed by an error message from the setup on Windows Server 2003 R2 (disk2), I attempted to run adprep from d:\cmpnents\r2\adprep, with the following output: ============================================================================= "attributeId" attribute value for objects defined in Windows 2000 schema and ...

Migration of Windows 2000 to 2003 R2

Hawkeye - 12 Mar 2007 5:11 AM - 3 messages

Hi, We are planning on migrating our Windows 2000 AD running Exchange 2000 (on a separate machine) to a new server with a clean installation of Windows 2003 R2. Does anyone have a step-by-step migration guide? Thanks ...

multiple users in ADAM Instance / Getting around RDN requirements

gwwmcse - 12 Mar 2007 2:59 AM - 3 messages

Hello, I have one ADAM instance where a new requirement has arose that we will need to add another application partition to the instance, and input the exact same user names from the first application partition and insert them into the second partition. The object does not have ...

Lost administrative rights - Active directory

Best 3rd-party tools for Active Directory

Office 2003 shortcut problems

adprep for 64-bit

logon script to set time

Automatic change of DNS Servers

RPC Failed When Replicating AD