Windows Server Active Directory

tapping into ADAM with PHP/Python?

Unsettled - 7 Apr 2007 9:27 PM - 3 messages

Is there a way to tap into ADAM with PHP/Python? ...

Rights to a drive/folder

Newbie prior to purchase question - 7 Apr 2007 11:44 AM - 6 messages

Im new at this: How do you add right to a specific folder on a server through active directory; giving it a drive name to login etc.. for a user? ...

WSS3 on AD member server / kerberos authentication

Handle - 7 Apr 2007 10:58 AM - 2 messages

WSS 3.0 installed on a AD member server. Web application has been configured to perform kerberos auth. I created a SPN for the application pool identity service account: setspn -a HTTP/member.contoso.local CONTOSO\serviceaccount Do I need to trust the member server for delegation, in AD user and ...

I need to create a domin user

ads - 7 Apr 2007 6:41 AM - 2 messages

I need to create a domin user but I cant I created 2 users in AD ut just one of them can login to my local computer. plz help soon ...

How to connect remote user in Active directory

Kiran Umbare - 7 Apr 2007 5:06 AM - 2 messages

Dear Sir, I Installed Windows 2003 STD Server with ADS ( Active Directory Services ). My LAN Users can able to connect to this server properly but when I tried from my another remote location the Client machine gives error while trying ...

Problem with Unjoining Domain

A.L. - 6 Apr 2007 11:16 PM - 9 messages

I wondering if anyone could help. I have this problem where I am not am to unjoin a computer from a domain. Is there a method of manually removing computers from the domain. And Also removing the workstation from the domain. ...

Site-Specific Profile Loading

Alex - 6 Apr 2007 10:14 PM - 4 messages

Hello All, I have a strange question to ask everyone and hopefully you will have an answer for me. Currently, we have a server in the NY area which is 2003 Windows Enterprise with Exchange. On it, we have users with ...

Splitting a child domain in Win2K3 AD

jkulsh - 6 Apr 2007 5:19 PM - 3 messages

Dear folks, We have one (empty) root domain and 6 child domains with Exch 2K3. Part of the business that makes up one child domain is being sold. To split the child domain, we are planning to install a fresh new ...

Login to DC behind NATted F/W

vanan - 6 Apr 2007 4:08 PM - 4 messages

HI, I wish to switch my workgroup model into a domain. The DC must be place in the Server Farm where it is behind a NATted f/W. Clients are mostly XP Pro SP2. What settings should be in place to ensure successful login and access ...

Restricted Groups problem

GeorgeMc - 6 Apr 2007 4:04 PM - 6 messages

Hi! I'm having a problem assigning the users/groups I want to the local machine administrators groups through the Restricted Groups policy. Here's my scenario: - "domain" - "sub.domain" - OU in sub.domain called web servers I have a Global Security group in "domain" called WebServerAdmins with users ...

User cannot view that users are disabled??

cbass - 6 Apr 2007 2:16 PM - 3 messages

AD U and C is installed on a users computer and only has view rights for now. The user is able to view all computer accounts that have been disabled as having the red X over the account, but user accounts that are disabled do not ...

Replication questions

Mac - 6 Apr 2007 1:33 PM - 3 messages

Greetings, Some background: I have an existing domain, all Win2003 Servers SP2, with 2 DC's. Each DC is on a different subnet and each one contains two NIC's, one for each subnet. The central switch also has a router module in it to route the two subnets ...

Active Directory Restructuring

Kishor Yadav - 6 Apr 2007 11:26 AM - 4 messages

Hello, Following is our current scenario. Two separate forest e.g. forestA & forestB Each forest is having one domain in it e.g. domainA & domainB there is no trusts between forestA & forestB or domainA & domainB ...

How to allow users to install certain things?

Idris - 6 Apr 2007 9:35 AM - 2 messages

Hi, Came across something the other day which is not top of any of my priority lists but posed an interesting question. We currently (only about 100 users) have quite a lot of people set as local admin (before i started). I'm now removing this priviledge and most people ...

How to change "Temporary Internet Files" to 1 MB for all accounts in all computers in domain ?

bildos - 5 Apr 2007 11:08 PM - 3 messages

How to change "Temporary Internet Files" size to 1 MB for all user profiles (for existing and new) in all computers in domain ? ...

2 Domain Controllers

Paul Ilacqua - 5 Apr 2007 10:35 PM - 6 messages

I am testing a single domain with 2 DC's on Windows 2000 AS with Active Directory. When I log on now with workstations I get the logonserver variable set to \\OLIVER. How would I take OLIVER down and let BCTI take log ...

gpupdate - how to make it ?

bildos - 5 Apr 2007 9:59 PM - 5 messages

Hello, I'd like to make remote "gpupdate /force /boot" from CMD and disconect without waiting for gpupdate finish - it should be make automatic. My problem is: user can close this CMD windows... how to prevent user against close CMD windows with "gpupdate /force /boot" ? ...

How do I set registry key permissions using GPO

matt.halvorson - 5 Apr 2007 9:12 PM - 2 messages

Hi, I am trying to force users to log off computers after a period of inactivity. I am trying to use winexit.scr to accomplish this. The Screen Saver is installed and works for the most part. I am using ...

Disable ScreenSaver GPO

dmello - 5 Apr 2007 7:50 PM - 4 messages

Hi, I need create a GPO to disable screensaver timeout for some machines in my domain. I would like to know if I apply this GPO for the machines accounts or the users account, because the adjustment is made in the User ...

ADAM Sync vs. Filtered Import

Nicolouw Kruger - 5 Apr 2007 7:34 PM - 4 messages

Hi I am busy with a large migration of an AD subset to ADAM. So far so good. I have studied thi sites forums and it has been of great help to me. My requirement is the migration of an AD content with users, groups (out the box ...

Account constantly locked out

tke402 - 5 Apr 2007 5:14 PM - 7 messages

Hi, I adjusted my account lockout policy to lock a user account after 5 invlaid attempts. Since that change yesterday, I have had to reset my account 3 times. I have logged in without making a mistake on my password. I'm thinking ...

User prefix and suffix

webster1649 - 5 Apr 2007 5:09 PM - 2 messages

What is the best place to store user prefix and suffix information in AD? I am working with a relegious organization and need to add prefixes and suffixes to some of the users accounts ie. Fr. Bob Smith or Sr. ...

How to export recently modified objects from Active Directory

Sachin - 5 Apr 2007 5:09 PM - 3 messages

Hi All, I want to write a script which will export all the users, whose details have been modified in last two hours, from Active Directory in LDIF format. The script should take datetime as parameter and export all the users ...

Remote Assistance Issues

Eric - 5 Apr 2007 4:53 PM - 5 messages

Hello all, I am having an issue with Remote Assistance and Windows Firewall. I have set up the GPO according to the following article: [link] Remote assistance works fine but it changes all the exceptions of the ...

Interforest Migration - 2000 to 2003

Jon - Server Admin - 5 Apr 2007 4:02 PM - 2 messages

Is it possible to use ADMT v3 to migrate accounts from a win 2000 domain in one forest, to a win 2003 domain in another forest? Thanks! ...

Adprep Issues with Win2K3 R2 & Win2K3 SBS SP1

freakrz - 5 Apr 2007 3:38 PM - 3 messages

Hi .., i am running a windows sbs 2003 server with Sp1,we recently got win 2003 server R2, and wanted to set up a file server.i was looking to integrate DFS/FRS on the server and add it to the current SBS ...

Some users not displayed in AD

Susan P. - 5 Apr 2007 2:54 PM - 3 messages

There are several users that are not displayed in our AD. I can find no properties differences between these accounts and the accounts that are displayed correctly. I am not filtering the display. I can see the accounts using ADSI. I can see the accounts in the GAL. If I do a search on the OU ...

LDIDE Export question

bobsss - 5 Apr 2007 2:29 PM - 3 messages

I have used LDIFDE in the past to export data in bulk, I need to know how to export specific data such as Street address for all users in an OU. Can anyone give me an example command line, or help in any way? ...

Active Directory Federation Services

nboothe - 5 Apr 2007 2:27 PM - 6 messages

If this isn't the right group for this question, please point to the right place. I'm trying to implement ADFS in a test enviroment to see if it is a solution for my company. I'm having a hard time with the certificate ...

Changing a users Outlook name

sblair - 5 Apr 2007 2:11 PM - 4 messages

When I created the user I created her as Michelle Miller. Her real name is Michele Miller (1 l). Can someone tell me how to change her name to one L so when she sends an email through outlook it displays her correct name spelling. ...

GPO Logoff script

Several Login attempt - 5 Apr 2007 12:20 PM - 7 messages

hi im running win 2003 Sp1 as dc. i created a batch file, want to delete all temp files from client machines when any user logged off. i applied it to seperate ou. but it fails without any error message. [client machines are win ...

Clone Active Directoy Users and Domain

Ryan - 5 Apr 2007 8:32 AM - 3 messages

Hi All, I am very new to Windows Server administration, I have googled a bit but cant seem to find the answer. I have a client that is running MS Dynamics Nav Server on a Windows 2003 server. They are using Windows authentication for NAV. ...

Accessing GPO from C++

Ramprasad KM - 5 Apr 2007 6:46 AM - 6 messages

Hi, I would like to access the GPO "DC Locator DNS Records not registered by DCs" located @ "Computer Configuration/Administrative Templates/System/NetLogon/DC Locator DNS Record" from a C++ exe on a Windows Server 2003 machine. Can you please throw some light on this ?? ...

How to move objects between 2003 domains in same forest ?

cs - 5 Apr 2007 6:08 AM - 3 messages

Hi , Anyone know how to move objects between 2003 domains in same forest ? That include user , contact, group and DL . There's command move tree .. can i use it for 2003 domain ? I the only way is use ADMT ? please advise . ...

Disjoin Computer accounts not automatica deleted from Active Direc

Urvin - 5 Apr 2007 3:28 AM - 4 messages

HI, I am experiencing the following weird issue: When I disjoin an workstation from the domain it's account is not automatically deleted from the domain. Instead is is marked as disabled and I have to manually delete it. When I disjoin teh machine from the domain I ...

Trying to promote a 2003R2 server to DC

Jason - 5 Apr 2007 2:38 AM - 5 messages

I am running a 2003 domain here and I currently have 2 domain controllers at the 2003 functional level. When I try and promote it, I get the error listed below. "The version of the Active Directory schema of the source forest is not ...

FRS null objects

mattbinns - 5 Apr 2007 12:12 AM - 2 messages

After running a DCDiag /c on my DCs, it came to my attention that there are a number of entries in the FRS Domain System Volume (SYSVOL share) in AD which no longer exist. I assume from DCs which were ...

Reset Administrator Password

sanvaces - 4 Apr 2007 10:30 PM - 3 messages

Hi, I got a server that we lost the administrator password and we can't log in. This server is not connected to a domain yet. Does anyone know how to reset the administrator password from a command prompt. Thanks ...

Failed to apply group policy

Adoyt - 4 Apr 2007 10:28 PM - 3 messages

I have a set of computers that are not applying Group Policy settings. Information: The workstation is on the LAN. gpresult takes 10 minutes to complete running gpupdate /force will get the policy settings defined to apply. I turned up userenvlogging (10002) and get: ...

Users mysteriously removed from group membership

Tynman - 4 Apr 2007 8:58 PM - 2 messages

We have a strange problem. We have a security group that, when we add users to it, several hours later the users are mysteriously removed from the group. This happens over and over again and with any user that is added. ...

Account gets removed from group

Tynman - 4 Apr 2007 8:56 PM - 2 messages

We have a strange issue. We have a security group that, when we add users to it, several hours later the users are removed from the group. This happens over and over again. We've confirmed and double-checked that there are no GPOs enforcing ...

Loosing Group Policy

Mikey - 4 Apr 2007 8:30 PM - 3 messages

Hello! I have some Windows Server 2003 Citrix servers that appear to be loosing or ignoring a group policy. I have disabled the screen saver, screen saver time out, and Password protect the screen saver. These same group policies are ...

AD Trust Removal

Carade - 4 Apr 2007 8:16 PM - 3 messages

A technician in our group added a second domain to our Forest and Set up a 2-way Trust. The only DC for that Domain was removed and reused without properly demoting/breaking of the trust. I ran through everything I can find to clean up the mess but I am left with ...

change standalone server to active directory

eckard - 4 Apr 2007 8:10 PM - 3 messages

I have a standalone Server 2003 standard edition server on my network and it's the only server. I have my shared folders set up with workgroup security. I have Xp desktops that connect to it. Can I make this server a domain controller and use active directory for my ...

AD Replication

Hutch - 4 Apr 2007 7:26 PM - 4 messages

Currently running Active Directory in 2003 Native Mode. Have 3 domain controllers, 2 at main branch, and 1 at an offsite location. The Offsite location is connected via 100MBPS, so I was wondering if there was anyway to get replication on this DC to be the same as the 2 in the main ...

Managing Local Accounts

Ann - 4 Apr 2007 6:28 PM - 2 messages

We have 300 remote locations, (retail stores), and we have about 50 users at each location. Each store has a Windows 2003 server, which is a member server of our 2003 Active Directory domain. At our corporate office, we have all ...

Login Script - Drive Mapping

Hutch - 4 Apr 2007 6:04 PM - 4 messages

To set the stage, we are running Windows 2003 Active Directory, in native mode. Currently have 3 domain controllers, 2 in main site, one remote. We use Kixtart for our login script. Everything has been working fine, until some changes were made to ...

authentication using Kerberos with HPUX to AD

Gillou86 - 4 Apr 2007 5:56 PM - 3 messages

When creating a new user in AD we can use Kerberos authentication without any problems. But when we migrated the users from an NT domain into the AD domain, the kerboeros authentication no longer functions for these accounts. ...

Forcing Users To Change Passwords

RayRedSoxFan - 4 Apr 2007 5:48 PM - 10 messages

We didn't used to have a policy whereby users were forced to change passwords at given intervals, but we want to start doing that. If I go into Active Directory, I can see where I can force the user to ...

External trusts and domain functionality

Brian Selzer - 4 Apr 2007 3:50 PM - 4 messages

Given 6 domain controllers: 4 Win2k mixed on Win2k3 OS for domain Ohio in forest Arrow.local 2 Win2k mixed on Win2k OS for domain Indiana in forest Arrow.com where a bidirectional external trust exists between Ohio and Indiana. ...

schema master (offline) error

Daniele Moretti SP - 4 Apr 2007 3:42 PM - 7 messages

My schema master result offline on LDAP fSMORoleOwner attribut of Dn: CN=Schema,CN=Configuration,DC=studiopleiadi,DC=it is present this string \0ADEL:b0bdf595-7299-44ec-a73e-d8f91260b428,CN=DOMAINPLEIADI\0ADEL:5b59a58e-9bbd-4aa3-93b5-8b1dd38c0900 where DOMAINPLEIADI is the name of an old DC of the domain. ...

Authenticating at logon

Chad Guiney - 4 Apr 2007 3:26 PM - 2 messages

I am having a problem when logging on in that it shows that I am logging on to our DC in another site in another state. This is making my logon take forever. How can I change the logon server I authenticate to if possible? ...

Trust relationship problem between server and workstation

Joeb - 4 Apr 2007 2:58 PM - 5 messages

I recently had a hard drive failure on a server PC running windows 2000 Server. This hard drive had the active directory database on it. I did not have a backup of the database so I had to reinstall Active directory and ...

Restricted Administrator Account

fischste - 4 Apr 2007 2:08 PM - 2 messages

I need to create a daily administrator account on a Windows 2003 Server that can monitor backups, check antivirus console (symantec), reset locked user accounts, change passwords, add user accounts, and review event logs. What my client requires is this account must be restricted from clearing ...

removing computers from domain

Jason M - 4 Apr 2007 1:58 PM - 10 messages

Hey i thought when you removed a computer from the domain it deleted it from the domain but im seeing red x's like its disabled, anyone got insight?? thanks ...

Demote DC with Exchange & SQL

Seor - 4 Apr 2007 1:10 PM - 6 messages

We have a DC that started as an 2003 SBS server (let's call it server1), used a transition pack to upgrade to 2003 Standard Server and then to 2003 Enterprise Server. We recently purchased disataer recovery business continuity software (NeverFail) that requires the system to be protected to ...

I can't grant terminal access to users in GPO

Johnny_Z - 4 Apr 2007 10:48 AM - 8 messages

Hello! I have 4 servers in OU "TermServ", and I want to grant terminal access to these servers to some users by GPO. I'm create a new GPO "terminal_access" in OU "TermServ" and give a next access right: 1. Computer configuration > Windows settings > Security settings > ...

Adding User to AD group

JimBob - 4 Apr 2007 9:26 AM - 7 messages

I am trying to retrieve a user in AD and add that person to a group, however from the examples on this site and on various other sites I can not seem to get this to work. Would be grateful for your help. ...

Policy for Windows update restarts?

Idris - 4 Apr 2007 9:02 AM - 5 messages

Hi, Is there a policy or setting i can do so that a group of computers do not/NEVER restart after a windows update? I did look at the settings months ago but never found the correct settings. Any help appreciated - it is affecting users that process data overnight. ...

Sites DC

Super Boobahlicious - 4 Apr 2007 8:54 AM - 3 messages

I'm an administrator of a child domain with Win2003 R2. I have a Main default site which has three DCs that communicate directly to my forest..All ports are enabled for this. I have three sites and I have one DC in each site.. ...

Local Accounts (Newbie)

Matt - 4 Apr 2007 7:50 AM - 3 messages

I am new to AD and am just trying to get to grips with my AD installation at home before I implement anything at work. From what I have read it is generally considered bad practise to create local accounts on any machines within the AD including the domain controller? ...

redirect user syntax

Jason - 4 Apr 2007 4:36 AM - 4 messages

If I have a domain called abc.com and I want to direct all new users into an OU called NewUsers what is the correct syntax to accomplish this? I tried c:\redirusr ou=NewUsers,DC=abc,dc=com When I add a new user it is not going into the NewUsers OU ...

User Profiles are not saved to Network, they are only saved locall

gavinnelson - 4 Apr 2007 1:44 AM - 2 messages

Hello, I am using Windows Server 2003 with Active Directory and a Domain. When I login to the domain and change things they only stay local. If I go to My Computer Propertys and look at the login enviroment it tells me that I am ...

netlogon.log entries from machines in external trust

mattbinns - 3 Apr 2007 9:37 PM - 2 messages

I have been seeing "NO_CLIENT_SITE:" entries in the netlogon.log file on a DC in my main domain, with reference to machines in another domain, from another forest via an external trust. This 2nd forest is a dev domain, so hasn't got all the subnets setup for its single AD ...

Looking for example on how to associate a new User with a Group

Frank Miverk - 3 Apr 2007 9:20 PM - 3 messages

Hi, I am adding new users to CN=mydomain,DC=com,DC=Users I manually created a new "TestGroup" within the Users folder using the Administrative tool "Active Directory Users and Computers" - right click on Users folder - New and then Group ...

Changing Primary Domain Server from NT4 to 2003 R2

Matze - 3 Apr 2007 9:18 PM - 3 messages

Hello, I want to change the primary domain controller from NT4 Server to 2003 R2 Server. Is it possible to do it with only "a few clicks"? Thank you very much! ...

GPO issue on 1 pc

Mike - 3 Apr 2007 8:30 PM - 23 messages

I've got an end user that when I run Group Policy Results on their laptop - nothing is showing up under the Computer Configuration for Group Policy. All of our User Configurations for Group Policy are being applie. Anyone know why this would happen and how I can fix it? ...

Problem with delagate Control

Hank - 3 Apr 2007 7:20 PM - 2 messages

I am trying to set up a user so they can edit the membership of a group in Active directory. I only want the user to have the ability to add users to certain groups under an OU. 1. How would I go about setting this user up to make this happen? ...

ldifde ldap filter question

Oscar P. - 3 Apr 2007 6:52 PM - 2 messages

Shouldn't this filter work in ldifde? I want to return either of the two object classes. (and(|(objectClass=msDS-AzOperation)(objectClass=msDS-AzRole))) It works fine in my adsiEdit query (substituting "&" for "and"). I've tried a number of other variations, with no luck. Any suggestions? ...

Roaming Profile in Vista

Vic Abrahamian - 3 Apr 2007 6:48 PM - 5 messages

Hi, I have Windows 2003 SP1 R2 on DC's and am trying to introduce a new PC with Vista on it into the domain. Roaming profile desktop settings and files are not showing up on Vista. Though my e-mail settings worked and I was able to ...

2 Way Trust between W2k SP4 and W2k3 SP1 R2

Laurie - 3 Apr 2007 5:54 PM - 4 messages

Scenario Server A W2K3 SP1 R2 Domain A Server B W2k SP4 Domain B Each Server host its own DNS AD integrated for local domain and has secondary zone with other domain set as master. All populating. Server B can contact Server A with \\IP address and then supply credentials ...

Adding more than one command to login script

sihfmis - 3 Apr 2007 4:16 PM - 4 messages

Can you add more than one command to the login script? IE-multiple network drive mappings. ...

MOM, SMS, WSUS Installation

Gil Russell - 3 Apr 2007 4:06 PM - 2 messages

My network consist of the forest root domain and 3 child domains which have about 500 host each. The question is can I install these products at the forest root level and manage all host in all domains? Or do I have to ...

User can't use numbers in his password?

G. Dustin Snyder - 3 Apr 2007 2:44 PM - 2 messages

Bit of an odd one, here, hopefully someone else has seen this behavior. Have a user, wants to change his password, wants to add numbers for security. (Yes, I should require complex passwords, but politics are politics, and certain people in charge refuse to use anything more ...

Tracking FSMO role changes

jmackenzie(UK) - 3 Apr 2007 2:20 PM - 6 messages

Hi We're experiencing "random" FSMO role changes, and we'd like to track when these changes occur and more specifically who initiated the change. I have looked in Event Logs / Mom Logs / Schema lookups but can't find anything. Goolge/Live and technet also give no indication where you would ...

Domain Migration

ayrob - 3 Apr 2007 1:43 PM - 2 messages

I inherited a network that uses a public domain (mydomain.com) for the intranet. I need to migrate the intranet to a private domain (mydomain.intranet) so that we can manage our public DNS servers internally. I have an idea on how to minimize the impact of this and would like some ...

Skeleton Key type password?

Barule Technologies - 3 Apr 2007 1:30 PM - 10 messages

I am pretty sure I know the answer to this, just looking for some reassurance from all that agree, or some indication that there is a way: My desktop support staff will regularly reset user passwords when working on a system to a boilerplate password when they don't know ...

Active Directory upgrade to 2003 using new hardware

sandhya - 3 Apr 2007 1:17 PM - 2 messages

Hi all, We have one 2000 AD forest with 3 domains (2 DC's in each domain). We have exchange 2003 in our environment. We want to upgrade to Windows 2003 AD using new hardware (6 new servers). We have already run Adprep and ...

missing option to modify AD schema

Björn_Urbanek - 3 Apr 2007 12:41 PM - 3 messages

Hello togehter! For using ADS as authentication base for some linux logins I want to add some information to the ADS Schema. The following steps I should do: regsvr32 c:\winnt\system32\schmmgmt.dll - OK Open a new mmc an add Active-Directoy Schema right - OK ...

Internet connection problem into Active directory

Lucian Rusu - 3 Apr 2007 12:04 PM - 4 messages

Hello, I have an Windows 2003 Standard Edition R2. I setup Domain controler useing dcpromo. Now I added a computer into the new created domain. On the local computer I setup the IP, Netmask and on the gateway I put the Win 2003 ...

Is the version of ADPREP from 2003 R2 usable with 2003?

SteveO - 3 Apr 2007 10:04 AM - 2 messages

I currently have a windows 2000 server which is currently the only server in the domain. I want to add a Server 2003 (not the R2 edition) domain controller to this domain and understand that i will have to use the ADPREP ...

No client login when DC not available

mattbinns - 3 Apr 2007 2:18 AM - 8 messages

A few months ago, the DC (called DC1) which holds all FSMO roles fell over, and during the time it was down users couldn't log on. This happened before I started here, so I wasn't directly involved in the ...

Strange Authentication Errors

- - 2 Apr 2007 11:20 PM - 4 messages

Hello, We have 5 domains, all in the same forest, two of the children domains have an authentication issue. The strange thing, is, only in some cases. If a DOM1 user tries to log on interactively to a machine in DOM2, it will act ...

account created attribute in AD

Tommy - 2 Apr 2007 7:42 PM - 3 messages

How do I query/look for in AD on when a user is created? I need to generate a list of users with their account creation date and export them. What do I need to do? TIA Tom ...

Problems with sites with a child domain

NooB Won Kenobi - 2 Apr 2007 6:45 PM - 5 messages

I have a problem that I believe occurred during the introduction of a child domain. Originally the sites within both the parent and the child shared the same site names. The sites where named after campuses (sites) and each campus has access to both domains and are physically sub-netted. ...

Is there a way to set Policy to go from Windows Updates 2 Microsof

BookerW - 2 Apr 2007 6:12 PM - 2 messages

Is there a way to set Policy to go from Windows Updates to Microsoft Updates. I would like to set it from policy for my XP machines but there does notseem to be a way. Most of the KLB articles I have read talked about how ...

Login issue

Brasv - 2 Apr 2007 5:56 PM - 3 messages

Demoted DC without any errors. This DC was previously also a DNS server (AD integrated). Now when non domain users try to access resources on a member server they get prompted for a username and password. Their local account matches their ...

adamsync clear the ADAM instance

drs - 2 Apr 2007 3:50 PM - 2 messages

Hello, may adamsync works fine, but I have a configuration question. I sync only users who have the ext. Attr. 7 field filled. If the field is changed or the user is deleted in AD the change or deleted is made in ADAM to. ...

*Assistance* Ever Since SP2, Some User Accounts Greyed Out

razor - 2 Apr 2007 3:50 PM - 5 messages

Hello-- We are running a W 2K3 server environment, and recently installed both SP2 for Server 2003 and Exchange Server 2003. There are a couple of users in AD where their account properties are now greyed- out. I am logging onto our DC with the built-in administrator account ...

need help with dcdiag replication errors

Dave - 2 Apr 2007 2:56 PM - 5 messages

So I already posted about upgrading our DCs to server 2003. A few of them are still showing as Server 2000 in Active Directory Users and computers. I suspect a replication issue. My forest structure is pretty basic forest root domain: ...

About DNS and Active Directory Domain

wildcard - 2 Apr 2007 2:51 PM - 2 messages

Hi , i have install a W2K3 SP1 domain with 2 DC and some member server. On 2 DC i have installed also a local DNS server configured as autoritative for my domain name "mydomain.local" for all other dns name resolution my dns ...

Create 2nd Domain/DNS

Tom K - 2 Apr 2007 2:50 PM - 4 messages

I have a domain abc.com. I need to build a new domain xyz.com and have it join the abc.com AD as a new domain off the root. My question is regarding DNS. If I have abc.com DNS server on one of it's ...

userenv 1030 error on dc

aaronmcl - 2 Apr 2007 2:20 PM - 10 messages

We're using a server running w2k3 as our dc. Ive just noticed that theres a ton of userenv 1030 errors in the app log. The server has 2 nics 192.168.0.221 and 192.168.0.222, ive made sure the the 'client for ms networks' service and the 'file and printer sharing' service are ticked in the properties. ...

Basic Login Script

Super Boobahlicious - 2 Apr 2007 2:06 PM - 5 messages

I need to make a quick gain and implement scripting to map shares.. I have maximum of three map shares to be available per user. I have At least two file server. Is there any basic template that I can use??? ...

Quick Q - IAS and ISS on DCs

Idris - 2 Apr 2007 1:55 PM - 3 messages

Hi, Very quick Q. Am i right in saying IIS should never really be installed on a DC if it can be avoided? What about IAS. Someone is setting up RADIUS and would like the above installing on my DC ...

AD changes

Dan DeCoursey - 2 Apr 2007 12:22 PM - 2 messages

Hello, I had the original Windows 2000 domain here and now another division has finally upgraded from NT 4.0 to Windows 2003 and instituted their own domain name different from my suffix. I now want to upgrade my domain controller to ...

How granular is your management through Active Directory?

Sean - 2 Apr 2007 10:16 AM - 6 messages

Hi, Just trying to get an idea of what is common practise. I know that MS say that best practise is to try and not have an AD Tree that is deeper than 3 OU's due to how it may affect the performance of the DB. ...

Can I get event log to show desciption when AD user is created?

Gonzo - 2 Apr 2007 7:03 AM - 2 messages

I have created a MOM report which shows when AD users are created and by which user. My boss would like to have the discription that is added to the user account (So we know some more info about the user) to the report, I ...

folder redirection in a roaming profile

tree leafs - 2 Apr 2007 5:58 AM - 2 messages

Hi, in a environment where roaming profile is used, "my documents" folder is redirected to user's H: drive in a GPO. The "policy removal behavior" is set to "leave contents". However, it is noticed that in quite a few users' profiles the old ...

DSGET/DSQUERY Question

webslinga69 - 2 Apr 2007 5:46 AM - 6 messages

hi there, im trying to get a list of members for all groups in a particular OU. i've put this together which does work: dsquery group "ou=abcd,dc=efgh,dc=ijkl" | dsget group -members | dsget user -display > userlist.xls ...

SYSVOL - Clients connecting across WAN for SYSVOL data

Migrating to another domain - Permissions and general tips

Netlogon paused

Netlogon error - 5781