Home All Groups Group Topic Archive Search About

Windows Server Active Directory

microsoft.public.windows.server.active_directory
Score AD Group Policy
TomAlbanese - 28 Apr 2007 9:51 PM - 8 messages
Is there any easy way to exclude a single computer from an Group policy such that the screensaver does not kick in after 15 mins? ...
Score Roaming profiles - Desktop Wallpaper doesn't load initially
Robert - 28 Apr 2007 2:54 PM - 5 messages
When a user selects a wallpaper in display properties the wallpaper is correctly loaded. After rebooting however the wallpaper is not loaded and the user is shown a standard blue background. If the user tries to set it again, the display properties show that it was ...
Score dcpromo Overlapped I/O operation is in progress
lizmcn - 28 Apr 2007 2:14 PM - 13 messages
DCpromo issue I have been having a bit of a problem getting DCpromo to install on two Dell Power Edge 2900 servers. Both servers are running Windows 2003 SR2 and have had all of the dell management software removed as well as using the most up-to-date firmware and ...
Score Adding Windows 2003 server to 2000 AD
Mike - 28 Apr 2007 11:30 AM - 2 messages
Hi, I want to add a 2003 server as a DC to a 2000 AD without (!) changing anything to the AD, so no forestprep or domainpreps. Is this possible, can I add a 2003 server and promote it, or do I need to ...
Score Adding Trusted Sites for IE6 in AD/Group Policy on SBS2003 Server
Dave - 27 Apr 2007 8:52 PM - 2 messages
I have a Windows SBS2003 SP1 server and I'm trying to deploy Trusted Sites through Active Directory Group Policy.  So far, I either add a Trusted site and it will not work in IE or it will block adding that site locally to the ...
Score dcpromo on 2003 R2 Server in Mixed Mode asking for Domain Prep Tool?
Paul - 27 Apr 2007 8:27 PM - 6 messages
Hi, I just upgraded one of my company's domains from NT4 to Windows 2003 Active  Directory.  We're currently running in Mixed Mode, so our NT BDC's in our field offices could still serve login requests.  Well, I ...
Score DCDiag issues
Opie8565 - 27 Apr 2007 7:52 PM - 8 messages
OK I ran DCDiag on my main Domain controller and I have ran into a few issues and was wondering if somebody could tell me what my DCDiaglog is saying and some suggestions on how to fix the fail test? ...
Score How can I recreate automatically connected connections?
John - 27 Apr 2007 7:46 PM - 6 messages
Hi all, I just check the Active Directory sites and services and found the connections are not automatically created.  I remember that I only change the replication schedule.  How do I get the Automatically created connection back? two sites and one DC located on each site.  Windows 2003 SP1. ...
Score Antivirus software for DCs
bay-br - 27 Apr 2007 6:32 PM - 8 messages
First message here, so please pardon me if this is a repeat. We're trying to find the best antivirus product to install on our Windows servers, especially the domain controllers. Is this a personal preference? Are there products that I must avoid? I've heard good ...
Score AD corruptingproblems
rufftop - 27 Apr 2007 6:27 PM - 3 messages
I working with a W2k box that is a domain controller and also is running exchange 2003. We are recieving journal wrap errors. There is a second  2003 DC, but it was brought on-line after the journal wrap ...
Score Give user Admin rights to all PCs?
Cwhitmore - 27 Apr 2007 6:26 PM - 5 messages
I would like to setup a user to have local admin rights to every PC in our agency, but I don't want to include them in the Administrators group on Active Directory. Is this possible without having to manually add this user to each PC's local ...
Score Remote Site Automatic Site Links
[c] - 27 Apr 2007 5:21 PM - 4 messages
We have 16 remote sites. Looking in the Active Directory Sites and Services console most all the remote sites only have one link back to our head office and link to DC02 our second of three domain controllers. DC02 does not hold ...
Score Cannot Assign Permissions to Domain Local Groups
David V - 27 Apr 2007 5:14 PM - 10 messages
I have run across a very perplexing problem that perhaps someone else out there has seen and can provide insight on. I recently received a request to grant a number of users in one domain access to a folder in a remote domain - pretty basic stuff, and I've done it ...
Score disable accounts with expired passwords
Blaqb0x - 27 Apr 2007 4:56 PM - 4 messages
Hi, How can I automatically disable accounts whose passwords have expired? Thanks. ...
Score Renaming Group
briant97 - 27 Apr 2007 4:56 PM - 5 messages
I had a group that was not very descriptive so I renamed it.  This group is given access on our sql server to different databases.  It is still appearing there as the old group account.  I tried to select the one I renamed at it ...
Score Questions on changing Bridgehead server (in Sites and Services)
Bobson - 27 Apr 2007 4:18 PM - 2 messages
hi all, Thank you for your help in advance. Couple of questions on change bridgehead server in Sites and Services.... I have 5 remote sites and each with 1 single domain controller. All the servers is replicated with a DC called DC1 in my main office. ...
Score Problems Creating External Trust
David V - 27 Apr 2007 3:44 PM - 4 messages
I am trying to create an external trust between 2 WS2K3 domains, one of which is the root of its forest.  Both domains and both forests are at 2003 functional level.  DNS resolution seems to be functioning properly.  The ...
Score User lock down
Kathy - 27 Apr 2007 2:42 PM - 3 messages
We are opening a Pharmacy refill center.  The requests for refills will be sent through a user mailbox account that has been set up for this purpose only.  Is there a way to lock this userid down so that they can access only ...
Score DCs are losing time
Idris - 27 Apr 2007 2:15 PM - 7 messages
Hi, We have a domain with 3 domain controllers. Well we have more domains but they are not the issue. In this domain we are finding that they will all be out of time sync by about 2 minutes each week causing multiple problems for people. ...
Score 1704 events are not logged when using GPUpdate
Karen - 27 Apr 2007 1:34 PM - 3 messages
Windows XP system is not logging 1704 events for GPUpdate unless the system is rebooted or use GPUpdate /force. We cranked up logging on userenv.log and I can tell that it checks the GPOs, determines there is no change, and moves on. ...
Score security permissions extract
Andrew Story - 27 Apr 2007 11:07 AM - 4 messages
Hello, Are there any free apps that would allow me to query a file server, and report on what permissions a certain security group has on any of the files/folders? e.g. 'Security group A' - could I find out what permissions it has on ...
Score Site and subnets with VPN endpoints?
Idris - 27 Apr 2007 9:32 AM - 4 messages
Hi, We have a VPN connection to our Director's home office (all Checkpoint based). Their network is an extension of our network. They are on a different subnet than us. I was wondering do they need to be added into my ...
Score server 2003 promotion
Neil D. - 27 Apr 2007 9:28 AM - 3 messages
Hi, I have PC#1 with win2k3 server installed and it is the domain controller, running AD, DNS, DHCP and a VPN server It also used to be file server, mail server, webserver etc. I installed a new PC (PC#2) and installed win2k3 server on it with the ...
Score Do stub zones contain PC host names?
Gonzo - 27 Apr 2007 7:04 AM - 3 messages
Do stub zones contain PC zone names? ...
Score Cannot logon to PDC emulator - domain not available
parry.richard - 27 Apr 2007 6:34 AM - 5 messages
Background: I have an 8 site domain in the head office. -Each site has a DC that was DCpromoed when in the head office site. -Each DC is also a GC. -Each DC is also a DNS server referencing itself for DNS with the Head ...
Score Task scheduled error
DD - 27 Apr 2007 6:24 AM - 2 messages
Task scheduled log showed task completed with exit code (2) and exit code (0). Want to know the job is it complete ? why with different code ? Any doc to show the explanation of the exit code ? ...
Score force removal of Domain controllers from AD
jprstokato - 27 Apr 2007 3:30 AM - 6 messages
Hi, We have introduced a DC into our AD for testing purposes. It has since been removed from the production domain and had FSMO roles seized separatley so as to implement a completely separate test environment. As such it is no longer part of the domain nor can it now be reintroduced ...
Score Raising Forest Functional level to Windows 2003 level
Kuan - 27 Apr 2007 2:56 AM - 3 messages
Hello, I have an AD environment with 50 sites and around 100 domain controllers. All DC installed with Windows 2003 server. Currently Domain Functional level is 2003 and Forest Functional level is 2000. Planning to raise Forest functional level to 2003. ...
Score Demoted DCs loose their DNS record & more...
Gabriel/TFI - 27 Apr 2007 2:06 AM - 3 messages
Problem: Windows 2003 Domain Controllers that are demoted to member servers, after some time they are working fine (around 30days), they loose their DNS record and, if they're print server, the printer objects associated to them are deleted from AD as well. ...
Score Obtaining SID info on group of users in an OU, not entire domain ?
booker@mgt - 26 Apr 2007 10:16 PM - 2 messages
On one domain ,I am the domain admin and used the following script to enumerate the SIDS of all of my users: '************************************************************************ strComputer = "Domain Controller" Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2") Set ObjFS = CreateObject("Scripting.FileSystemObject") Set colItems = objWMIService.ExecQuery ("Select * from Win32_UserAccount") ...
Score Group Policy to deny PST
Super0ne - 26 Apr 2007 8:04 PM - 5 messages
Does anyone know of a group policy that will either deny creation of a pst or will deny the ability to put mail in a pst? The only option I see that is avialable when adding the outlook 2007 Resource kit named LArge:PST, this option appears to allow you to set size ...
Score Visio or 3rd party app
skip - 26 Apr 2007 7:34 PM - 2 messages
Hello I need to use a tool that will map out all the OU's and the GPO's applied to the OU's in the entire forest. Is Visio a good tool for this? if so do i need ...
Score Need AD Schema update for Credential Roaming
Jim Robb - 26 Apr 2007 7:00 PM - 4 messages
I am trying to implement credential roaming.  I have a Windows 2003 domain.  Apparently I need schema version 34 for credential roaming.  I thought that installing SP2 would include this schema upgrade, but it does not.  How do I ...
Score force replication (lastLogonTimestamp)
Cam - 26 Apr 2007 6:58 PM - 4 messages
Is is possible to force AD properties (specifically lastLogonTimestamp) to replicate? Here is my situation. A script that runs once a week and uses lastLogonTimestamp to indentify accounts that have not been logged into for 30 days and disables them. Here is an example case based on the evidence I ...
Score how can i find out who created a user account
Jef - 26 Apr 2007 6:24 PM - 3 messages
i am having problems with others creating user accounts without my knowledge. 1. how can i find out who created and when a user account was created. 2. how can i find out which accounts are not being used (not being logged ...
Score SFU intall on domain with 2 controllers
Justin - 26 Apr 2007 6:15 PM - 3 messages
I need to install Microsoft Unix Services and currently have 2 domain controllers.  Does it need to be installed on both servers or if I install it on one, will the scheme changes be replicated over?  Also are there any major "gotchas" with installing SFU? ...
Score Can not reset DSRM password
Joaquin - 26 Apr 2007 5:46 PM - 5 messages
I'm having problems reseting the DSRM password on two domain controllers in a domain.  Everytime that I try to reset the password I get the following error: Reset DSRM Administrator Password: reset password on server null Please type password for DS Restore Mode Administrator Account: ********** ...
Score Domain Controller Setup at satellite office
myeiter - 26 Apr 2007 4:22 PM - 2 messages
Currently we have a corporate office (with a datacenter) and a hosted DR site. We have two active domain controllers, one in the corp datacenter and one at the DR site. We are going to be adding a foreign satellite office soon. We are planning on adding a domain controller ...
Score GC Infrastructure issue clarification
denalitom - 26 Apr 2007 4:04 PM - 8 messages
Hello all, my question is... Do ALL the DCs in each and every Domain in a multi-Domain Forest need to be made a GC?  Or, is it relegated to just the specific Domain? - if in one domain the IM is set to be a GC.   ...
Score Network Problems Affecting AD
Trinity Catholic High School - 26 Apr 2007 3:46 PM - 3 messages
Hi, not sure whether or not to post in this or Networking, but I've had some strange stuff going on. In my event viewer I'm getting load of error messages from userenv (codes 1030 and 1058) stating that ...
Score ADMT v3.0 Security Translation Options
skip - 26 Apr 2007 3:42 PM - 2 messages
Hello i am reading the ADMT migration guide, and it says in order to migrate a users local profile (profile on the workstation) i first need to migrate the user account, and then run ADMT again but this time run the security ...
Score How do I insert a terminal server licence server that isn't a DC into Active Directory?
Sean - 26 Apr 2007 3:10 PM - 6 messages
As above really, I've just configured a new (and sole) TS server with the licence server residing on the same box. When I go into Terminal Services Licensing Snap-in it cannot find it (because it isn't in the directory), this doesn;t seem to ...
Score Cleaning up home directories
Jeff - 26 Apr 2007 2:58 PM - 2 messages
I am looking to clean up a large amount of user home directories. I am trying to find a way to find user directories that belong to disabled user accounts or belong to no user account or belong to only the local admin account. Does ...
Score Move users from one group to another!
Mladen Portak - 26 Apr 2007 2:14 PM - 4 messages
Hi, does anyone knows how to move hundreds of users from one group to another at once inside same domain? ...
Score User Logons
Keith Murphy - 26 Apr 2007 1:44 PM - 2 messages
Hi, I work in several schools and i need to stop one user logging into 2 computers at the same time. I use mandatory profiles and mapped drives for each student. Students are allowed to sit anywhere in the classrooms. ...
Score Deactivate Domain user login-id automatically
Several Login attempt - 26 Apr 2007 1:18 PM - 2 messages
How can a domain user login - id being deactivated when the user is not logged morethan 3 days? if anybody, advance in thanks rajaguru ...
Score local account and AD Groups
Andy White - 26 Apr 2007 12:05 PM - 11 messages
I have an issue and I'm not sure how to resolve or workaround it. We have a process on a server which is a batch scheduler that links to a database on a UNIX box. For the service to run it need to use the local account that it creates ...
Score Users getting virtually disconnected
Vandana - 26 Apr 2007 10:56 AM - 4 messages
The VPN Users are getting disconncted after inactivity of 30mins and gets the error "The local policy of this system does not allow you to logon interactively" and are able to login sucessfully when the users connect their machines to the LAN network directly. ...
Score LDP client authentication fails
Romil Shah - 26 Apr 2007 8:32 AM - 11 messages
Hello, I am using LDP.exe as a client to communicate with LDAP server. LDAP server is configured to use SSL with client server authentication . I have copied the personal certificate of server into the Trusted Root Certificate Authoroties. I found that ldp.exe fails to connect to server.  SSL handshaking fails . ...
Score Clients often have to logon twice - What can be done?
Niko - 26 Apr 2007 8:04 AM - 5 messages
The Server: W2K3 Server with AD, PDC Sometimes a client has to logon twice to our domain. This is really strange. After entering the password for the first time the Logonscreen then disappears and a few seconds later nothing happend and the client has to logon again. ...
Score Exclude Member server from the Domain policy
DD - 26 Apr 2007 3:34 AM - 6 messages
We defined the Domain security policy on the DC for the the users login but I want to exclude this domain security policy for the member server. I want the member server have his own local policy. How to achive this setting ? ...
Score Lists of Active Directory Consultants
Will - 25 Apr 2007 11:51 PM - 17 messages
Are there any good web sites that maintain lists of Active Directory consultants? ...
Score NTFS permissions
Jeremy - 25 Apr 2007 10:57 PM - 9 messages
At our schools, we'd like to use the script below to log who logs on to which computer and what time etc.  Trouble is we're finding that we need to give students modify access to adjsut the log.  And we're worried that may ...
Score Trusts using wrong domain controllers..
Glate - 25 Apr 2007 10:33 PM - 4 messages
I have two forests configured: 1. Internal forest (internal.local), used for employees. 20+ domain controllers around the world, GCs in each Branch Office. North America branch offices all synchronize only with Vancouver. South Africa branch offices all synchronize only with Johannesburg. Bridge all Site ...
Score AD and SAMBA
topokin - 25 Apr 2007 10:32 PM - 2 messages
I have read in different document on how to easily integrate *nix system with samba from version 3 into AD. What will be the possibility to be able to access data on *nix systems installed with older version of samba, from and ...
Score Permissions for Administrators
WadeBart - 25 Apr 2007 10:26 PM - 10 messages
I wanna to take away the ability of Domain Admins (Windows 2003 AD) to delete anything in Active Directory.  They will still retain all the other rights that an Administrator normally has but I don't want them to be able to delete ...
Score Directory Service cannot start
Bob - 25 Apr 2007 10:20 PM - 9 messages
I got the following error today upon bootup of Windows Server 2003 SP 2 R2 Enterprise: ------------------------------------------------------------------ The Active Directory is rebuilding indices. Please wait… Security Accounts Manager initialization failed because of the followingi error: Directory Service cannot start. Error Status: 0xc00002e1. Please click ...
Score Transferring FMSO
topokin - 25 Apr 2007 10:16 PM - 2 messages
I am trying to simulate my NT4-Domain upgrade scenario in virtual environment, so I migrated our BDC unto a VM with a PrivateVirtualNetwork. The migrated BDC was forced to become PDC, upgrades to W2K3 and configured with AD. A freshly installed W2K3 Server was added to the domain and promoted ...
Score Light directory service and ADAM
Mario - Roma - 25 Apr 2007 8:44 PM - 3 messages
I am looking for a "light" directory service to manage and keep synchronized usernames an passwords of a small group of users on a small group of Windows servers. Active Directory looks too much powerful and complex for my needs. ...
Score 2003 SP3 postinstall group policy errors
Tom Happy - 25 Apr 2007 8:06 PM - 2 messages
Hello, I have just updated the main FSMO AD 2003 to SP2, now we are having all kinds of problems, it took forever to boot up, and it's now displaying following errors in the log: Windows cannot query for the list of Group Policy objects. Check the event ...
Score Active Directory 2003: Wide-open to Join Domain?
Paul - 25 Apr 2007 6:48 PM - 2 messages
Hi, We just upgraded from NT 4.0 to Active Directory (Windows Server 2003 Mixed), and we are seeing some strange behavior that I wasn't entirely sure is normal or not.  Since the upgrade, anybody at all can add a ...
Score Map drives over VPN based on security group membership
rdifrancesco - 25 Apr 2007 6:24 PM - 4 messages
I'm having trouble accomplishing the following: I have AD configured to selectively map drives to users when they login to the domain within our office.  In effort to give access to these same drives from their home computers, I am creating a VPN ...
Score W2K3 32-bit Server as Additional DC in W2K3 R2 64-bit domain
Barry - 25 Apr 2007 6:10 PM - 8 messages
I have a Windows 2003 R2 64-bit domain controller installed and wish to have a W2K3 32-bit server as an additional domain controller in the same forest.  When I try to install AD on the 32-bit server and answer additional server, I ...
Score Commands to T/S AD
supersonic_oasis - 25 Apr 2007 5:50 PM - 2 messages
Hi all, I just setup a Windows 2003 R2 AD domain, I was going to test out its replication status with the repadmin command, but it seems that repadmin does not exist on my server.  Is there some sort of support tools for AD that I ...
Score Firewall Exceptions Lost After Joining Domain
Mick - 25 Apr 2007 5:14 PM - 3 messages
On a newly imaged PC the firewall exceptions are lost when I join the PC to the Active Directory domain - what would be the reason for this? ...
Score ADAM Schema ForeignSecurityPrincipal question
mbenson - 25 Apr 2007 5:05 PM - 5 messages
Hi, I'm porting a Sun LDAP schema to ADAM schema and have a question about DN SID syntax for my own DN attributes. I'm aware of the mechanism for creating ForeignSecurityPrincipal (FSP) entries in ADAM to represent AD users and groups by setting the member DN attribute of a groupOfNames entry to <SID=...>. This has the effect of creating the FSP and setting the DN in member to point to it. Perfect. ...
Score AC Replication through sites
Dave - 25 Apr 2007 4:52 PM - 9 messages
I have several sites and am building another.  all sites have a DC with the same domain.  what I have done last time was build my DC at the headquarters so replication would successfully happen.  then i move the DC to the other ...
Score Re-enable access to display after GPO change
durx - 25 Apr 2007 4:48 PM - 5 messages
hi all, we have enabled a GPO to push down a company desktop via GPO (we used the default domain policy) and then restricted access to display icon in control panel, and also stopped the changing of the wallpaper. i need to enable the display option in control panel so that the ...
Score Suggestion - DNS, DHCP, WINS
NetFodder - 25 Apr 2007 4:46 PM - 8 messages
I'm really wondering how to make a suggestion to the Windows Server Core group. The reason is I've been wondering why the there haven't been any considerable changes to the basic network services starting with DNS, DHCP ...
Score Active Directory Windows Component
supersonic_oasis - 25 Apr 2007 4:22 PM - 2 messages
Hi all, I just setup an Active Directory domain on a windows 2003 server by using the DCPROMO command.  I have noticed if you go to Add/Remove Programs, and click on Add/Remove Windows Components there is a program called "Active ...
Score Adding Trusted website into GPO
Chris King - 25 Apr 2007 3:38 PM - 5 messages
We have a new website requiring a username and password.  I want to add the URL into IE for each user in the domain who logs on.  Where do I add this into the GPO? ...
Score same server name two domains one network?
Chris Pirillo - 25 Apr 2007 3:11 PM - 8 messages
I have an existing server named "server1" on a x.x.2.x network. I brought in another server from out old company called "server1" BUT it's on another domain. Can I lave it that way without a name conflict if I leave it on the ...
Score AD Backup/Restore
Constantin Chionas - 25 Apr 2007 3:06 PM - 4 messages
I have an old main domain Server 2003 that I want to copy the Active Directory to a new server with new installed Server 2003 R2, so I used the windows backup utility to backup the System State of the current AD. ...
Score SID not removed from objects
2788888@googlemail.com - 25 Apr 2007 2:54 PM - 7 messages
Hi, I have the following questions: a) is it possible to recover a deleted user in AD. How would I do that? b) will all the permission settings from a deleted user be cleaned automatically. e.g. Permission on files, permission on outlook ...
Score What is the right way to backup a DC?
Bob Mgr - 25 Apr 2007 2:53 PM - 8 messages
What is the right way to backup a DC, or do I really need to if I've got two, and I expect one of them to always be available? We have two Server 2003 DC's on this network with about 100 workstations. ...
Score Allowing help desk position to reset passwords only
efg20 - 25 Apr 2007 2:34 PM - 3 messages
I have a help desk person starting soon and I would like this person to only have the right to reset user account passwords in active directory.  I do not want this person to be allowed to change, add, or remove anything from active ...
Score AD Design Question
briant97 - 25 Apr 2007 1:56 PM - 13 messages
I have a question on the AD Design that I am working on.  Quick Overview Domain.com Home Office    HR            HR Users       HR Groups ...
Score ADAM - Modifying dsheuristics
alicewonderl - 25 Apr 2007 1:49 PM - 2 messages
Hi, I have two questions: 1.Is there a way to modify dsheuristics without using ADAM ADSI Edit, using a script or an unattended ADAM instance installation? 2. Is it possible to import during an unattended ADAM instance installation my private ldif files? ...
Score Client deleted File (s) from network share
Andre - 25 Apr 2007 1:36 PM - 6 messages
I have a client that deleted some files accidently off there share on a windows 2003 server.  Is there an easy way to get those back without havining to access tape backup.   If I go to the clients workstation and look in the ...
Score Removing an old DC from AD
jwilmer - 25 Apr 2007 1:04 PM - 2 messages
We has an old Windows 2000 DC fail over a year ago.  The admin never replaced the box just put a new 2003 DC with a different name in place. All the other DCs still think this server is out there and I am seeing ...
Score moving one AD server outside the firewall
robr - 25 Apr 2007 12:59 PM - 2 messages
I just added a 2nd server to the network running Server 2003 x64 and Exchange 2007.  Now that it's all set up, I need to move it to a hosting company, which means it needs to be able to communicate with ...
Score Auditing on DC.
JJ - 25 Apr 2007 12:24 PM - 2 messages
I have enabled all the audit settings in the default domain controller policy. The problem is that I am looking for the security event that tells me what computer account has been created in the domain and by who - event id ...
Score Extract details
wmb - 25 Apr 2007 11:49 AM - 3 messages
Does anyone know how I can extract from AD all First names, Last names, display names and email address all in one go.  I need to make changes to everyone's display names w ...
Score password policy by organizational unit
phil2627 - 25 Apr 2007 10:57 AM - 4 messages
We are trying to avoid multiple domains and setup multiple password policies in a single domain.  We want our staff to have a 10 character minimum password that changes every 40 days and students to stay the same.  We have tried this in a test environment where in the DC ...
Score Adding employee pictures
Matt - 25 Apr 2007 10:40 AM - 2 messages
Is there a standard schema entry in AD for employee pictures? If not what data type would you suggest to use if I extended the schema? ...
Score Simple passwords for some users?
Idris - 25 Apr 2007 8:10 AM - 4 messages
Hi, Is it possible somewhere to set 'simple passwords' for some users rather than complex passwords? This would be for a small number of users, not necessarily in the same OU etc. Thanks. ...
Score Modifying dsheuristics
alicewonderl - 25 Apr 2007 7:28 AM - 9 messages
Hi, Is there any way to modify dsheuristics attribute without using ADAM ADSI Edit, maybe using a script or when performing an unattended installation of an ADAM instance? Thanks! ...
Score GPO Software Deployment Path Change...
Pasi Heino - 25 Apr 2007 6:48 AM - 4 messages
....I'm removing old File server (SERVER02) where is also GPO software deployment share and other file services. All Data is moved to SERVER01 and shares, etc.. is samelike how it was in SERVER02. Now I need to change also GPO software deployment UNC paths if possible? ...
Score One DC not logging in users when other is down
James - 25 Apr 2007 1:04 AM - 5 messages
Hey all,              I ahve 2 domain controllers at our main location. I had all of the servers down today. I turned on domain controller 1 and started turning ...
Score My Windows 2003 R2 server does not recognize itself as the PDC
Vintrice G - 25 Apr 2007 12:08 AM - 3 messages
I have a single server running Windows Server 2003 R2 x64 with 3 workstations running Windows XP SP2 x32.  I initially installed Active Directory and configured the server as the PDC.  I setup a basic DNS server on the same ...
Score Different Group policy settings from different vantage points?
pdx - 24 Apr 2007 10:20 PM - 6 messages
I have a Windows 2003 SP1 domain. One of my OUs contains two SQL servers. There is an GPO applied to the SQL OU. If I look at the GPO settings from a DC using the Group Policy Object Editor ...
Score Issues with second Domain Controller
John555 - 24 Apr 2007 10:14 PM - 7 messages
I am working on a 50 workstation network in a Windows 2000 mixed mode domain and recently decided to add a second Domain Controller (DC2) becuse the original is getting older. A few months ago I ran DCPROMO on a ...
Score password policy at Organizational Unit level
phil2627 - 24 Apr 2007 9:37 PM - 2 messages
We are trying to avoid multiple domains and setup multiple password policies in a single domain.  We want our staff to have a 10 character minimum password that changes every 40 days and students to stay the same.  We have tried this in a test environment where in the DC ...
Score Grant computer unlock rights
Chris T. - 24 Apr 2007 8:09 PM - 5 messages
Is there a security setting I can set to allow a helpdesk users to log off another user who has the screen locked with (ctrl + alt + delete). I would like to avoid telling helpdesk to just power off the computer because this is not good for it. ...
Score password policy by OU
phil2627 - 24 Apr 2007 7:15 PM - 4 messages
We are trying to avoid multiple domains and setup multiple password policies in a single domain.  We want our staff to have a 10 character minimum password that changes every 40 days and students to stay the same.  We have tried this in a test environment where in the DC ...
Score Re: Office deployment via GPO Problem!!
mcp - 24 Apr 2007 7:14 PM - 4 messages
On Apr 24, 12:28 am, Jeremy <Jer***@discussions.microsoft.com> wrote: hi, i have nothing out of ordinary. thanks ...
Score CA wont allow me to submit new requests in a text file
Ehren - 24 Apr 2007 6:54 PM - 3 messages
Hello! I just set up an enterprise CA in our domain to create certificates for several of our internal servers to use for SSL.  I am trying to secure our VirtualServer 2005 VMRC server which requires me to generate a certificate ...
Score ADFS change home realm
Dima - 24 Apr 2007 6:36 PM - 5 messages
Does anyone know how to redirect the user back to the home realm discovery, without clearing the cookies? Is there something like a home realm signout URL? ...
Score Forward DNS
JV - 24 Apr 2007 5:51 PM - 3 messages
Is it preferred to set a forward DNS settings for the DNS settings in Windows 2003 AD?  Another consultant said just let the top level DNS do the lookup while another said it is better to also have the forward lookup DNS ...
Score Domain Controller Virtual Memory
RAJ - 24 Apr 2007 5:02 PM - 2 messages
Hello, I have a domain controller (RID, PDC, Infrastructure Master) that is also a file server and runs the company Time Clock software.  For some reason the Virtual Memory Initial size has been set to 512MB & the Maximum size has also ...
folder size on primary member dfsr
Delegation of GP Linking to a subset of GPO's
Active Directory book for beginner
About Group policy
jrnl_wrap_error clarification
CommitChanges and delay?
User is automatically locked out of AD
Changing Roles and DNS
Home folders and mapped drives
Domain Rename - DNS Question
simple site/subnet question
ADAM Setting VLV searchFlags
About Group Policy
Accessing AD Group failed due to error -2147467259 FetchGroup: data provider or other service return
Identical computer names across sites
Migrated domain controller - DNS not working properly
Advise on taking image of primary DC
Importing a List of Group names
CLARIFICATION: Reconnecting a DC whose roles were seized
Office deployment via GPO Problem!!
change the name and ip address of a new primary DC???
Password Warning
Event ID 1030 and 1058
How to remove domain name from "log on to" field?
Builtin administrator password strategy ?
Remove NT4 PDC
Upgrade existing 2000 DC to 2003 Server OS
Active Directory - Move DC to new hardware with Acronis True Image Universal Restore
Group Policies aren't updating
can't create trust between NT4 and 2003 AD
Question about group policy
Running Windows 2000 AD and Windows 2003 AD
Mailbox Only accounts
Adding new controler
replace whole Active directory domain controller whith new machine
Next » 2 3 4 5 6 7 8 9 10