Windows Server Active Directory

How to allow my domain user to start/stop service action in their computer?

choipo - 12 May 2007 8:18 PM - 4 messages

is it possible to allow domain user to perform "start/stop service" action in their computer? how ? Thanks ...

Block USB but allow printing.

abckid - 12 May 2007 1:15 PM - 4 messages

Hi, We have succcessfully implemented a policy to block usb on all the workstations. But now we need to just enable USB port for printing. If any printer is connected to the usb port of the computer, it should detect and ...

strange behavior with AD, kerberos trust and windows XP profiles

Pascal - 12 May 2007 8:57 AM - 2 messages

Hello, I setup my AD (Windows 2003 server) to trust my external Kerberos realm (heimdal KDC on unix box). Clients are Windows XP and Windows 2000. My users login with kerberos credentials and access to the machines and all the domaines ressources with ...

remove 'delete a user account' permissions from an Account Operato

KUMAIL - 12 May 2007 6:44 AM - 3 messages

In Active Directory, I have two types of users in the same OU. Administrators and Account Operators are in the same OU. My question is: How can I remove 'delete a user account' permissions from an Account Operator without affecting the rights of the administrators ?? ...

Domain Connection Hangover

Richard Coltrane - 12 May 2007 5:40 AM - 2 messages

Hello, I was learning by playing on a Win2003 domain. I setup a domain and connected to it with my laptop to test client access roaming profiles, home dirs etc, group policy etc. I also setup for synchronisation for roaming ...

two DC lost communication.

stephen - 12 May 2007 12:52 AM - 6 messages

I have two Domain Controller server (windows 2003 server), but they lost communication for each other. How can I made them reconnnect togother. One server is primary Domain Controller, Another one is secondary Domain Controller, Thanks in advance, Stephen ...

GPMC add .adm file

Dan - 11 May 2007 9:25 PM - 2 messages

Hello, I added an adm file to the GPMC console for a specific GPO and everything worked great. However, when I went into a separate GPO I don't see the policy settings there. Do I have to "import" the .adm file for each GPO? Is ...

A question about sites and subnets.

JD - 11 May 2007 7:51 PM - 5 messages

Ok, I doubt this can be done but I thought I'd ask. I've got a subnet configured in "Sites and Services" and would like one server in that subnet to be in its own site. Is there any way to ...

Find Dialog Box error in Active Directory

davidburgett - 11 May 2007 7:05 PM - 2 messages

Whenever I try to do a "Find" in Active Directory (either by right- clicking on a container or clicking on Action, then Find) I get the following error message: "Windows cannot create the Find dialog box because: Invalid access to memory location." ...

Win 2003 AD and MIT krb5, problem, question,...

Lars Schimmer - 11 May 2007 7:04 PM - 2 messages

Hi! WeÂ´ve got a problem here right now. Given: 1. a routeable .128/25 subnet 2.given DNS resolve for all IPs to cgv.tugraz.at 3. a working OpenAFS Cell 4. a win 2003 server and a "CGV" AD on it with 40 users ...

Join domain on server 2003

Lincon - 11 May 2007 5:56 PM - 5 messages

Dear All : today I setup the small business server 2003, I have find the problem Server background : pcname : pcserver server ip : 192.168.1.3 dns name : lincon.local dns ip : 192.168.1.3 activate dhcp and set perfer dns : 192.168.1.3 ...

Questions on transfer DHCP from an old DC to a new one...

Bobson - 11 May 2007 5:47 PM - 5 messages

Hi, thank you for your help in advance. I just set up a new DC, and would like to transfer the DHCP configurations and database (such as current leases) from an old DC to the new one by using "netsh dhcp server import/export" command provided by Resource Kit. ...

Adding a DC

Alpha Man - 11 May 2007 5:40 PM - 3 messages

I am on a Windows 2000 AD network I have already run ADPREP for the forest and domain and have a working Exchange 2003 server working on the network. .. I am trying to to add a Windows 2003 server to become a DC and I get the ...

GPMonitor - DCs English, clients Spanish

johnny_mango - 11 May 2007 5:24 PM - 3 messages

Hi there. At the momento I am running tests with GPMonitor. After some struggles, the msi installs correctly, and I am receiving results. However, I have an issue with a client with the OS in spanish. The xml file received in the gp monitor ...

DSACLS Script to Export Permissions

Jamestechman - 11 May 2007 4:08 PM - 2 messages

Anyone have a script or link to export permissions for objects using DSACLS? If there is another method that would be great as well. Looking for a method to script out the SELF permissions on all user accounts to find discrepancies. ...

Remove DC

Bob - 11 May 2007 3:46 PM - 9 messages

I want to rebuild one of my two DC's. My plan is to first remove the following components in this order: 1) GC 2) DFSR 3) DNS 4) Replicate with the other DC. 5) Walk through the DNS on the DC (to remain) and delete any references to ...

Restrict Web pages via Group Policy

Adam - 11 May 2007 3:26 PM - 4 messages

Is it possible on a user or group basis to deny or allow web pages? IE can I block *.mail.yahoo.com to stop the page from loading? Is it also possible to have a group that has is allow one web page but not ...

move child domain to its own forest

Network Admin - 11 May 2007 3:03 PM - 3 messages

Is there an easy way to move aq child domain to it's own forest without a migration or is mirgating the only way to accomplish this. ...

converting a domain local group in a universal group

btbadmin - 11 May 2007 2:53 PM - 7 messages

Hello I can convert a domain local group in a universal group in the domain functional modes "Windows 2000 pure" and "Windows Server 2003", i can't do this in the mode "Windows 2000 mixed". But what about the mode "Windows ...

converting 2003 domain server to child domain

Les - 11 May 2007 2:10 PM - 5 messages

What is the best way to convert a server 2003 domain to run as a child domain in an active directory domain? ...

Problem

chris - 11 May 2007 1:53 PM - 3 messages

Hi, Pls advise why is the user being logout. What is the possible reason? Thanks Problem 1 Event ID : 539 Type :Failure Aud Source :Security User : NT Authority\System Logon Failure: ...

Slow file saves on a Windows Server 2003 computer.

Michael Gilliam - 11 May 2007 1:27 PM - 3 messages

I have a server that runs Windows Server 2003 standard on a intel motherboard with dual intel xeon processors, 1gb ram and sata raid. It is being used to run an accounting package and as a file server. ...

Losing connection to a Windows Server 2003 DC

Michael Gilliam - 11 May 2007 1:25 PM - 2 messages

I have a situation where I have 2 windows server 2003 machines that act as domain controllers on a network. Every so often, the workstations are losing connection to the second server with the following error: (drive letter):\ is not accessible. The system detected a possible attempt ...

MMC

maverick - 11 May 2007 1:00 PM - 3 messages

Silly problem but doesnt seem to be a way around it..... When I try to open Active directory users and computers I get the Following errror: MMC cannot open the file C:\WINDOWS\system32\dsa.msc. This may be because the file does not exist, is not an MMC console, or was ...

We have some questions regarding AD in Win2k3..

UDE - 11 May 2007 11:49 AM - 5 messages

Hi! We have some questions regarding AD in Win2k3.. We have 2 clients under our domain controller, but the problem is, the group policies we have applied, doesn't work on the clients. The clients have been in another domain before with other policies. ...

site replication

Joe - 11 May 2007 10:22 AM - 5 messages

Hi guys, I´ve a question regarding the site replication between our dc´s. We´ve a couple of sites and the current configuration is like that: All the dc´s in the sites (subdomains) have connections to dc´s in the ...

Move 2003 domain from one forest to another

Stuart Parker - 11 May 2007 10:21 AM - 5 messages

Guys, I have the need to move a domain from one forest to another. My proposal is to create the new domain in the target forest, and migrate from the source domain into it. This is the only way I'm aware of. Is it 100% correct that ...

Access to share in a different subnet

Giancarlo - 11 May 2007 8:58 AM - 3 messages

Hi all, we have two different offices that are connected to internet and between them through a VPN (of course each office has a different subnet, 192.168.0.x for the main one and 192.168.5.x for the other). ...

DC's svhost.exe keeps hitting 100% CPU for a few minutes

Gonzo - 11 May 2007 8:17 AM - 2 messages

One of our domain controllers keeps hitting the 100% CPU mark for several seconds a day. The process is svhost.exe ...

loopback processing

Bobby Gontarski - 11 May 2007 8:01 AM - 3 messages

This follows the conversation GP to computer in the middle of April in this conference. I have been trying all the stuff you adviced: It works except that the policy on the terminal server is applied to the admins as well which is quite undesirable, I found a lot of info but the ...

OU question

Daniel - 11 May 2007 1:08 AM - 8 messages

In workgroup, there is group but in AD is there any group if i want to assign a folder to only a certain department ? does OU is same as grouping ? Thanks Daniel ...

How can i find out computer (OU) accounts is no longer active

Mugen - 10 May 2007 11:55 PM - 6 messages

Hi, I am running Windows 2003 AD w/SP1. By default, it created a Computers OU and all of our computer accounts are uder that OU. But now, it grown up to over 2000 computer accounts but i am sure more than half of the computer ...

Normal user edit security groups?

Dan - 10 May 2007 11:42 PM - 3 messages

Hello, If I want to have a "normal" user be able to edit a number of security groups (all located in on OU) what would be the easiest way? I tried creating a custom MMC with ADUC and giving them the "managed by" right but ...

Transferring FSMO roles question

Jason W. - 10 May 2007 10:01 PM - 3 messages

Ok...so I need to bring down one of our Domain Controllers and rebuild it (to make a long story short...it is because of licensing issues.) Anyway, I know how to transfer all the roles, but a curious thing is ...

GPO To Force Logon Hours

jkeeley - 10 May 2007 8:17 PM - 3 messages

Is there a Group Policy setting at either the computer or user level to define logon hour restrictions, or is that only possible at the user record level in AD? ...

Move all accounts over to new server ??

steve - 10 May 2007 8:01 PM - 5 messages

Is there a way to dynamically (if that is the right word) move all of the active directory users/object/groups everything over to th new server so that after words basically we can simply take the old one off line. ...

A lot of Event ID 1181 - Category DS Schema

Gabriel/TFI - 10 May 2007 6:30 PM - 4 messages

When I start a Forest Root Domain Controller the following event is registered 75 times in the log: ------------------------------- Type:Information User: NT Authority\ANONYMOUS LOGON Source: NTDS General Category: DS Schema Event ID: 1181 Active Directory could not delete the following column from the database ...

HOW TO: Install and Use the Drive Share Utility in Windows 2000

kamel kaled - 10 May 2007 6:22 PM - 4 messages

If the Windows 2000 Resource Kit Is Not Installed on the Computer: 1. Insert the Windows 2000 Server CD-ROM into your computer's CD-ROM or DVD-ROM drive. 2. Navigate to the drive:\Netmgmt.cab file (where drive is the computer's ...

Duplicate SYSVOL trees on the same server

Lance - 10 May 2007 5:12 PM - 3 messages

I have a rather interesting issue with one domain conrtoller. It's the owner of all FSMO roles for our environment. Some time ago, through testing some backup software, a duplicate Windows directory was created on the server's D: drive under D:\test\Windows\... As ...

Recommended strategy for providing access to web apps via Internet

David Dixon - 10 May 2007 4:44 PM - 5 messages

My organization is beginning to look at providing a segment of the user population (not employees) access to certain web apps and data. These users are not physically in our offices, hence we would need to build a secure method to allow them to access these resources via the Internet. We also have ...

Any issues mixing 2003 sp1 & sp2 DCs?

bruce - 10 May 2007 4:42 PM - 3 messages

We're running win2003 sp1 on all our current DCs. A couple of them are due for retirement. So I need to build a couple new DCs and was thinking of using sp2 instead of sp1. We usually don't go back and upgrade servers w/ ...

Looking For Active Directory User Extension

Kurt - 10 May 2007 3:23 PM - 4 messages

I had a tool one time that integrated into active directory and would display information like the last logon time on the user's property page. I beleive it was from Microsoft but not really sure, sound familiar to anyone? ...

Domain authentication issues ...

Steve Happ - 10 May 2007 2:44 PM - 9 messages

I have an SBS server as my Domain Controller using Active Directory. I have 2 W2003R2 servers running as Terminal Servers. I have a group of local domain users on my LAN that access my Terminal Servers via RDP. They are added to the DC's Remote Desktop Users security ...

How to gain access to local files in a remote desktop session

kamel kaled - 10 May 2007 2:33 PM - 11 messages

How to gain access to local files in a remote desktop session to a Windows XP-based or to a Windows Server 2000-based host computer ...

Domain admin

Smitty24 - 10 May 2007 2:11 PM - 4 messages

We have two dis-joined domains. We have created a two-way trust between them and we are responsible for all AD administration. We would like to use our user accounts in domain A and connect to domain B to do our management. We are setup in 2003 Native mode but i can't ...

software deployment via GPO to multiple sites

Pieman - 10 May 2007 1:51 PM - 3 messages

After some general advice here... What's the best way to deploy software via GPO's when there are multiple geographicaly seperated sites (connected via a VPN), say for example Office 2007, should I create multiple admin installation points 1 per site and setup ...

Specify what DC or GC to query.

Magnus R - 10 May 2007 1:14 PM - 4 messages

When using scripts or VB.NET programs is there a way to specify what DC or GC is queried? Can I even specify a specific server in another domain within the forest? For instance when using the string GC://DC=domain, DC=com I'm telling it to ...

OWA Protocols

D Davis - 10 May 2007 12:31 PM - 8 messages

I have one user in Active Directory that doesn't have the option to enable Outlook Web Access. Is there something that I am missing in AD that can add certain Mail Protocols in the Exchange Features tab on a users account ...

Add alias of domain

GNY - 10 May 2007 12:17 PM - 4 messages

Hello, How can I take my AD domain, lets say "homesweethome.com" and be able to also reference it as hsh when add machines to the domain? I dont mean to have to seperate domains. I mean to just the ability that ...

DNS Issue preventing GC Promotion, Directory Service Event ID: 112

SummitComp - 10 May 2007 11:36 AM - 6 messages

Good day all! We have SRV 2003 and are migrating to SBS 2003 on new hardware using guidence provided by kb/884453. The SRV 2003 will be demoted at some point. GC Promotion is being preventing on the new server and I'm curious if it has ...

Can't i undo GPO changes in win2000 Pro - Pls help me

MSExchange2003Student - 10 May 2007 11:20 AM - 2 messages

Hi all I implememted a GPO policy on my windows 2003 server/win xp pro network that gives LOCAL admin rights to one specific user when he logs onto the workstations. this policy has caused for some reason the strip domain admins ...

synchronization time between 2003 server and vista client

chikini - 10 May 2007 10:59 AM - 6 messages

hi I have a problem with a vista client (laptop dell) sometime, when I open a session on domain, I have a error:"error of synchronisation between server and client" so, it is necessary to unplug the network for open a session. ...

Counting Objects id AD domain & forest.

Gabriel/TFI - 10 May 2007 10:05 AM - 6 messages

Is there a quick way to count all objects in a domain or in an entire forest? Thanks in advance. Regards, Gabriele ...

Delegation to join computer and the account place in other ou

Emeric - 10 May 2007 9:34 AM - 4 messages

Hello, I need to modify the container where the account computer where placed when a computer is joins to a domain. When I join a computer to a domain AD, the account is placed to the container system â€œcomputerâ€. ...

Probibit use of offline files on certain folders

Lasse - 10 May 2007 9:16 AM - 3 messages

Hi I am trying to prohibit my users from making certain folders on our server available offline but can't get it to work. I have entered the UNC path in the following GPO setting: Computer Configuration|Administrative Templates|Network|Offline ...

GPO Restricted Group for 'Local Admins'

Cosmo - 10 May 2007 7:11 AM - 4 messages

Can you use the GPO 'Restricted Groups' setting for local groups? I need to place the 'Domain Admin' global group back into the 'Local Admins' on computers with users who have local admin rights -> hmmm :-( The Online Help for this topic says 'Local Groups' are not supported, which ...

GPMC -the data is invalid-

info@alex-rohde.de - 10 May 2007 6:05 AM - 2 messages

hi there, does anybody know this message (messagebox) during start the gpmc.msc (sp1 english). the same messages is shown if i open any group policy object. the scope register tab shows not path infos !!! why not??? iÂ´m the enterprise admin and iÂ´m able to create, modify new or current ...

DNS Problem

Mansoor - 10 May 2007 4:37 AM - 5 messages

Our organization is small organization just running 60 windows 2000 and XP systems. We have two server installed one is windows server 2003 DC and another is Windows server 2003 ADC. ON both server AD is installed and DNS installed. Both server are not connected with internet. On Dc i have ...

How to reset admin password in Active Dir. Domain Controller win20

Lowell - 10 May 2007 3:10 AM - 3 messages

We encountered a problem on the Windows Server 2003 ( Active Directory Domain Controller ), this is what had happened. After updating the Symantec AV definitions, we decided to boot the server. After booting up we tried to login using the "Administrator" profile, after entering the correct password, ...

Installing AD over Terminal Services

Chirashi - 10 May 2007 2:57 AM - 3 messages

Can anyone tell me if there is any issues with install Active Directory over Terminal Service. I know some application suggest that you do not do it over TS but I was just wondering if it would be an issue. TIA ...

Admin rights on a dc without domain adim rights.

x - 10 May 2007 2:08 AM - 5 messages

Anyone one have a clue if you can give a user admin rights to a single dc without giving them domain admin or admin rights? We have an admin that only needs to run patches, updates, install/remove software on a dc, but not have the right to access the other dcs. ...

Pushing out a .msi package through GPO problem

Jason W. - 9 May 2007 11:38 PM - 9 messages

Hello everybody. I am trying to push out a .msi package using GPO. We are pushing out some extra fonts to all PC's in our domain. These are 2000 and XP computers. XP Path - C:\Windows\fonts ...

Stale Records...

Some Clown - 9 May 2007 10:27 PM - 6 messages

Greetings - I have recently taken over a site where computers have not been disjoined from the domain before being remimaged and added back with a different name (Ghost). I didn't notice for a while, since I'm not in the habit of ...

Event ID help

MrMako - 9 May 2007 9:33 PM - 4 messages

Could someone explain in this logon failure the caller sections? My administrator account keeps getting locked out, this is my best lead but I cannot find anywhere the administrator account is set, so I am trying to understand is SMSinstaller passing the administrator's credentials? Any help ...

Using CSVDE to reset invidually set mailbox storage limits

chrsta - 9 May 2007 8:24 PM - 2 messages

I have a bunch of mailboxes that have mailbox storage limits set individually rather than by a system policy. I would like to reset these individually set storage limits back to the default limit of 250MB. In other words, I am ...

Logs for Tracking who deleted accounts

Tom - 9 May 2007 8:18 PM - 2 messages

We had multiple computers deleted from AD causing a flood of calls about not logging in due to domain trusts. Is there a log file that would indicate what account deleted these computers? Thanks for any help you can provide. ...

ADFS and OWA

nboothe - 9 May 2007 7:55 PM - 3 messages

I saw a few posts from last year about the possibility of OWA and ADFS working. As anyone found a way to make OWA work with ADFS. I tried to configure it but it appears that it uses a different authentication ...

Account Lock Out Tool

butter - 9 May 2007 6:39 PM - 3 messages

I have an account that gets locked out every few minutes. I setup the Account lock out tool but am not sure how to read the results. Here is a snippet of the results: Wed May 09 13:16:09 2007, PID: 2224, Thread: 368, Image C:\Program ...

NTFRS Subscriptions in LostAndFound Container

fowljewl - 9 May 2007 6:21 PM - 6 messages

Our NTFRS Subscriptions container has started showing up in LostAndFound. I run dcdiag an no errors found. We had a similar problem with our Exchange objects which we fixed by running Exchange setup with the /domainprep switch. Any ideas on correcting? ...

Single Site, Multiple Subnets, network browing problem

new-old user - 9 May 2007 5:51 PM - 4 messages

Situation is: Single site domain Multiple subnets Each subnet is a different physical location connected with full T1 MPLS and Layer 3 routers at all end points. All sites logon to DC at HQ DNS, DHCP, and WINS are done at HQ ...

Missing Computer Object

Doug - 9 May 2007 4:39 PM - 8 messages

I couldn't login this morning...my local PC recorded a Netlogon error of 5721 indicating that my PC is not part of the domain. Checked the security log on the domain and saw multiple audit failures error 672. Searched the computer ...

Upgrade win2000 dc to 2003 dc

Yannis - 9 May 2007 4:04 PM - 3 messages

Hello! I manage a small company with 2 servers (win2000 server) and 20 clients (winxp). They reside on a single forest with a single domain (domain.local)so things are pretty simple... I just added a new hp proliant server and i plan to remove one of the old ...

my documents on a share

marcel - 9 May 2007 3:55 PM - 2 messages

what are the steps for: I want every user to have his "my documents" on a share on the net. I want the administrator to have all rights on the folders in that share (read, write...); I want users not to be able to see content in "my documents" from other users. ...

Forest DNSZones and DomainDNSZones in my root Zone DNS

superitik@gmail.com - 9 May 2007 3:02 PM - 4 messages

I found out that in my root Zone bab.org , I have subdomain created for both ForestDNSZones and DomainDNSZones. I dont remember creating this ForestDNSZones My root zone is Active Directory Integrated and Replication Scope is: All Domain Controllers in Active Directory Domain. ...

Eventlog for the reset DSRM password?

Pascal - 9 May 2007 2:19 PM - 2 messages

Hi, sorry I have no DC for testing here and I would like to know if an event is written in the security log file when we reset the DSRM password ? If yes, could you tell me which event it is please ? ...

Migrate Primary DNS zone to Active Directory Integrated

superitik@gmail.com - 9 May 2007 1:47 PM - 3 messages

Hi: I have a Primary Zone hosted in a standalone server and I want to make it Active Directory Integrated. What is the best way to do it? and make it Active Directory Integrated? Lastly, In a Active Directory Active Directory DNS Zone, how can I ...

Removable Storage Service

Peekaboo Support - 9 May 2007 1:21 PM - 3 messages

When my 2003 Server restarts the NtmsSvc (Removable Storage) service is disabled. With out this service my backup will not run. Can some please tell me why and how I can fix this. Regards, Chris ...

GPO or script to stablish display settings

arielqs - 9 May 2007 12:24 PM - 2 messages

How can I change the screen resolution for multiple computers, from a GPO or an script? Where can I find more information about this? Thanks a lot. ...

ADAM Reset password fails

Alicew - 9 May 2007 12:17 PM - 2 messages

Hi, I have ADAM install on Windows XP 64bit, logged in with a local user (no domain). I've created a new ADAM instance, an application partition and a user. I tried to reset the user's password from ADAM ADSI Edit and I get the ...

dynamic user pofile path

Björn_Urbanek - 9 May 2007 11:39 AM - 2 messages

Hello! I want to set up an dynamic user profile path for each user depending on the used os. I have create an AD script, which set up a system variable (%OSVersion%) on each client computer with the OS version. It works fine. ...

Disaster Recovery

Oseborn - 9 May 2007 11:11 AM - 2 messages

hello every body, I would like to know if you have some documentation about restore of a domain in a forest. Best Regards ...

Rights to reset password on a number of accounts.

Kuan - 9 May 2007 10:30 AM - 4 messages

Hello, I will need to give helpdesk the rights to reset password on a number of accounts (but not all accounts) throughout the AD. Once I delegate control at the OU level, the helpdesk will be able to reset all user's password under the OU (which is not what I want.). Is there a way ...

Active Directory Integrated DNS

superitik@gmail.com - 9 May 2007 9:50 AM - 2 messages

This is my second post for this issue, and I apologize but I still have a problem. I have Forest root bba.org based on Win2003R2 Schema, I still have a few Windows 2000 Dcs and DNS is Active Directory Integrated and replication is "To All DCs in the Active ...

cannot join domain using fqdn

dade74 - 9 May 2007 9:46 AM - 7 messages

Hi all , I have this problem. Computers cannot join domain using fqnd name , using the netbios name it works fine. Also I cannot promote a new child domain for the same problem. The dns query give the correct result , correct domain controller but ...

Network upgrade

WSG - 9 May 2007 8:49 AM - 7 messages

hello, I would like to know how other IT experts would handle this situation. I want to upgrade my network to Windows 2003 Active Directory. I have 2 Servers: 1 - Windows 2000 Server (DC) with Exchange 5.5 2 - Windows 2003 Server (Member) Terminal Server ...

Is it possible to shutdown from logon screen?

inenewbl - 9 May 2007 1:49 AM - 2 messages

Hi all. My office has a windows domain network with a win 2003 dc. I would like to know if it is possible to create a shutdown button on the logon screen to allow user to shut down instead of logging in just to shutdown ...

Time

AJ - 8 May 2007 9:52 PM - 2 messages

Hello, My domain controller is behind 6 minues from most time servers. Where and how can I configure a domain controller to adjust its time source. I have all clients updating the time with this DC at the time of login using ...

refreshing AD in testlab environment

Chris King - 8 May 2007 9:49 PM - 2 messages

2 yrs ago we built our testlab using a system state restore from our 6 production domain controllers. Its been working fine, but now after 2 yrs we want to bring the testlab up to production leve. We would like to bring all ...

administator and passwords

steve - 8 May 2007 9:40 PM - 2 messages

hello, I have a question on how to use the administrator password? We are thinking on resetting the administrator password because I think it is used in a bad way. Currently we use the administrator account to install all of the servers, ...

Allowed values for X500 OID

JSDBrian - 8 May 2007 8:48 PM - 3 messages

Hi, I want to add classes/attributes to my schema (currently using ADAM). In the ADAM Schema plugin, I can right click on the Attributes and select Create Attribute. It launches the Create New Attribute dialog. My question is what ...

how to display a list of users from notepad or excel in active directory

7736 - 8 May 2007 8:16 PM - 6 messages

Good day all. i would love for someone to help me on this. i have a list of users given to me by my boss to make ...

AD Not Mapping Home Drives Correctly

BestSysEng - 8 May 2007 7:59 PM - 3 messages

AD is intermittently incorrectly mapping home folders for a very small percentage of users. We have over 10,000 employees. Over the past month or so, AD maps home folders to the root for a few users, so that those users are ...

Transition From Windows Server 2000 to Windows Server 2003

Steve B - 8 May 2007 7:57 PM - 4 messages

Enviroment: (3) Servers PDC, BDC, Exchange 2000 all on Windows Server 2000 boxes, using AD. Transition to all new Windows Server 2003 boxes. What is best practice to migrate to new Server 2003 enviroment and retire old boxes? Concerns: What is migrated first AD or Exchange? ...

Ok to proceed with R2 Schema Upgrade?

Sean Wallent - 8 May 2007 7:41 PM - 4 messages

Need a little input. We need to upgrade our AD schema to support R2 functionality as well as new DC's that are R2. Before we proceeded we were folloing a technet article to test for proper functionality ...

AutoEnrollment

Louis - 8 May 2007 7:30 PM - 3 messages

Hi, Added a new Windows 2003 Server SP1 DC to the domain and the following message occur in application log. Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x80070005). Access is denied. Domain Computers, Domain Users, Domain Controllers groups are already member ...

Delegate the right to unlock user accounts in W2K3?

Phil McNeill - 8 May 2007 6:27 PM - 4 messages

I'd like to allow certain users the ability to unlock user accounts in AD. I've been able to allow them to reset passwords, but not unlock the account. Found a couple of articles related to doing this in W2K (linked below), but ...

Transfer FSMO roles

zeb2100 - 8 May 2007 5:29 PM - 4 messages

I have a test domain, with two domain controllers running Server 2003 sp2. Both domain controllers are also global catalog servers. I was able to transfer the schema master role, domain naming master role, RID master and PDC emulator without any problems. When I try to transfer the infractructure ...

Active Directory not replicating to 1st dc

ces - 8 May 2007 4:44 PM - 2 messages

Hi there, I have a domain with the original 2000 dc, and two new 2003 dcs, with the intention of removing the original 2000 dc shortly. My issue is: I added two new users on a 2003dc, and the mailbox was created, and all ...

Default Group for Newly Created User Objects

Dellboy - 8 May 2007 2:56 PM - 3 messages

Hello, Is it possible to automate the process so that every user object that is created is added to a specific global group in addition to domain users? thanks ...

unable to bind to ADAM with user proxy to AD

boulosp - 8 May 2007 2:45 PM - 2 messages

I am having trouble binding to the ADAM instance that we have running. If i create a new account on the ADAM instance i am able to bind. If try to authenticate with a user account that is part of AD, i get the ...

DC Site Connections

Permissions on user folders and My Documents

Uninstall Exchange 2007 in coexistance with Exchange 2003

Migration Question

Transfer Schema Master role error

Two Sites not replicating

Is there a known issue like this???????????

Using ADAM with AD

Event ID:1219_Winlogon

Prepare 2000 AD for upgrade to 2003 R2

AD Meltdown!

Importing Contacts in Ad

Time-Out Values in AD

can not join a domain

AD Lag Site

how many DC's per site or what is high CPU on a DC

DNS secundary to Primary

Opening GPMC from outside a Domain

AD comment on AD clients

Decipher Logon ID

Sharing a Folder with GPOs

Instant Intersite replication

Error using AdamSync

windows logon consumes bandwidth over slow link

ATTN: Joe Richards (MVP)

Copying a USer

copying user

Event ID:5719-Netlogon

Enabling Password Complexity

regarding login problem in domain controller - event ID 1126

Directory Services Not Starting on DC

Where to have CA role?

logs for deleted objects in Active Directory

Ntuser.pol is missing

Deployment GPO for Office 2007 Professional Plus

Search using account SID