Home All Groups Group Topic Archive Search About

Windows Server Active Directory

microsoft.public.windows.server.active_directory
Score AD Printing Question
Jeff Grossman - 13 Jan 2007 10:00 PM - 6 messages
I have a question about my AD setup in regards to printing.  I have one main corporate office and 13 remote offices all connected via VPN over DSL lines.  I am running one Domain Controller at the corporate ...
Score AD or DNS failure
Dariusz Tomon - 13 Jan 2007 9:41 PM - 10 messages
Hello Below I present result of dcdiag (what should I do? where from to start to correct errors): C:\Documents and Settings\Administrator.FUNDACJA>dcdiag Domain Controller Diagnosis Performing initial setup:    Done gathering initial info. Doing initial required tests ...
Score How to create a Child Domain on a DC Member machine?
Ceva - 13 Jan 2007 3:59 PM - 5 messages
I actually have a Main Domain 'tester.ad' and 'ServerA' with W2k3 Enterprise Edition which is the Domain Controller for 'tester.ad' Domain.Now, I also have another 'ServerB' with W2K3 Enterprise Edition which is a Member of 'tester.ad' domain. ...
Score Best product to federate Active Directory from web services?
verviflox - 13 Jan 2007 8:55 AM - 3 messages
We are building a .NET based web service will need to federate with (trust) Active Directory via the Internet.  I heard that there are some third-party SAML products that will do this.  Microsoft is coming out with Active ...
Score Disabling Wireless via Group Policy
Don Murphy - 13 Jan 2007 1:33 AM - 5 messages
Is there a way (Windows XP SP2 clients joined to a Win 2003SP1 domain) to prevent using wireles network devices (mainly 802..11a/b devices) using group policy? I know device lock exists but I was hoping for a native GPO solution ...
Score Workstation joined with same name replaced Domain Controller
exx - 13 Jan 2007 1:08 AM - 2 messages
Domain Environment is Server 2003 I'm still scratching my head over this one. We brought another office into our domain by building a DC at the new location. Our tech over there then proceeded to join all of his workstations to our domain. One of them ...
Score Query-Based Distribution Group Question
Andyd - 12 Jan 2007 11:18 PM - 2 messages
How would I have 1 user show in 2 different Query-Based Distribution Group? Example:  John Smith needs to show up in Sales QBDG AND the Management QBDG. ...
Score Change DNS settings remotely?
Cwhitmore - 12 Jan 2007 10:38 PM - 4 messages
50% of our users are remote and all have DHCP, but some have manual settings for DNS. How can I remotely change their DNS settings? ...
Score GPO to disable IE's "remember my password"
burgessb - 12 Jan 2007 10:28 PM - 2 messages
I would like to disable the "remember my password" check box in IE on a OU containing a group of our w2003 terminal servers.  I've looked through all the gpmc documents and searched here too. Does anyone know how to accomplish ...
Score LDAP Query doesn't show OU?
Barkster - 12 Jan 2007 10:22 PM - 5 messages
I'm not real familiar with ldap but I have an application that querys DN list and when returns the list it does not show the OU group that all my users are in, thus when it does a query for a name it will not ...
Score find computers currently offline
wifetalks - 12 Jan 2007 10:14 PM - 2 messages
I have an application that reads all the computers on the domain in active directory. Then it should allow the user to upload files to specific computers (created for Administrative purposes). Currently it will iterate through all the computers the user marked. But I'd like ...
Score Warning :There is less than 11% available RIDs in the current pool
Greg Brown - 12 Jan 2007 9:39 PM - 5 messages
Greetings All, I am getting an error about the % available RIDs in the current pool when I run DCDIAG on my domain controller that holds the RID FSMO role.  All of my DCs are running Windows Server 2003 with SP1 but my functional levels are ...
Score Auditing - User add / remove from Group
Non - 12 Jan 2007 9:21 PM - 2 messages
Is there any way to audit who and when add / delete user to paticular group (distribution group)? ...
Score Removing child domain
Michael - 12 Jan 2007 8:55 PM - 3 messages
I am attempting to remove a child domain from my production domain. When running dcpromo on the child domain dc, do I select "This server is the last domain controller in the domain"?  This utility server is the last domain controller in the child domain ...
Score Satellite Branch Office Woes
Slandrum - 12 Jan 2007 8:37 PM - 3 messages
We are currently testing a traditional satellite branch office solution (no servers in the SBO) for several small locations that will be coming online this year. I’ve been through several different sources now, including the WSSRA, but either I’ve missed something completely, or I am stuck with an ...
Score GPO under User Configuration
Jimmy K - 12 Jan 2007 7:44 PM - 2 messages
Hello, I have 2 containers. One container for PC users and Desktops and another for all laptop users and laptops. I have a GPO created in the Desktop container with User Configuration changes made. My problem is, how do I get a user to ...
Score Learning
kristol.seth - 12 Jan 2007 4:26 PM - 3 messages
Can anyone recommend a good, concise Active Directory tutorial and overview for someone just starting out with Microsoft server technologies? Thx. ...
Score Turn Off Replication?
drm - 12 Jan 2007 4:02 PM - 5 messages
I have two ADAM directories, one is a replica of the other.  I am about to add another branch to the directory structure.  Is it possible to turn off the replication while I apply my changes and verify that they ...
Score Replication
Tom K - 12 Jan 2007 2:56 PM - 2 messages
Hello all, I have to rename some servers within a site.  I need to get the name changes replicated to our other sites sooner than later so that I can continue with maintenance. I believe between site replication occurs ever 90 minutes...? ...
Score Switching from NT4 Domain to 2003R2
ImagineSystems - 12 Jan 2007 2:07 PM - 6 messages
Hello, We have an NT4 PDC which has been running the network and is the only server in our environment. I am trying to put in a 2003 R2 server by adding it as a domain controller and then demoting/removing the NT4 server.  I am having some issues getting ...
Score automatically creating home directories
Dan - 12 Jan 2007 1:27 PM - 5 messages
Hello all, I would like to know how others are doing what I would like to achieve - automatically creating home directories and setting the appropriate permissions when creating a new user in AD. I know you can configure the profile tab in the user properties but I would rather not do it that way bc ...
Score No Option to enable DHCP server to be Authorised
Grizzlie - 12 Jan 2007 1:21 PM - 4 messages
We have a Server 2003 Standard with SP1 and all current updates. This server has been working well for at least two years. Active Directory & DNS seem OK. However just before Christmas the DHCP server became unauthorised. And there is no option on the DHCP menu to 'Authorize' or 'Unauthorize' ...
Score Group policy inheritance and linking in OU's
Roland Schoen - 12 Jan 2007 12:23 PM - 2 messages
Hello Community, yesterday i become a littel bit confused, becaus of the following problem: I had to apply two differen start menus to a certain user, if users are connecting to the designated servers. Becaus on every server the user has a ...
Score orphaned SID in a restricted group definition in default domain GP
Phillip McIntosh - 12 Jan 2007 9:49 AM - 3 messages
I just noticed a orphaned SID in a restricted group definition in our default domain GPO. I think I understand orphaned SIDs and how they occur so in this case am I correct in assuming that they can occur in GPOs becuase the GPT component of ...
Score ADMT question
Simon - 12 Jan 2007 9:39 AM - 4 messages
I will be using ADMT to migrate users from one domain to another, but does it maintain the users on the old domain. I will be gradually moving everybody across but if it moves them into the new domain and removes them completely ...
Score How long do GPTs take to replicate?
Phillip McIntosh - 12 Jan 2007 9:34 AM - 7 messages
Running AD/2003 Server. Problem - GPO's don't seem to take affect for multiple hours when the remote machine is in another AD site. Even if I force replication in ADS&S and do a gpupdate /force on the remote ...
Score Admin rights 2 forests 1 account?
Eric Twing - 12 Jan 2007 9:28 AM - 2 messages
I have a something id like to set up to make administration of our network easier. We have 2 forests on our network topology operating with a 2 way trust. Im noticing the Domain Admins admin rights arent recognized in the ...
Score View Full Dns name of domain on the logon window
J.K.D - 12 Jan 2007 9:10 AM - 5 messages
Dear All, I have a strange request. I have a single forest,multi domain setup.On the login window, I see all the Domain NETBIOS Names listed.Is there any way to display the full DNS name of the domain instead of just the NetBIOS name? ...
Score Everyone group in AD/Server 2003 - change password permission
Phillip McIntosh - 12 Jan 2007 8:56 AM - 8 messages
I'm trying to get my head around why the default Everyone group in AD/Server 2003 has the change password permission to every user object. I believe it has something to do with an unautheticated connection between the workstation and the DC during password reset but cannot find the extact ...
Score LDAP Bind and trust domain
Barrow Kwan - 12 Jan 2007 4:46 AM - 5 messages
If I have two domains ( abc.com and xyz.com ) and are trusted domain.  If I have user User1 on xyz.com, can I bind to abc.com with User1 ( ie ldap://dc1.abc.com/... with User1 from xyz.com ) ...
Score A one word root domain FQDN (finORG.)
Jane - 12 Jan 2007 1:26 AM - 3 messages
Hi all, A quick, perhaps simple question, but I thought I'd get a confirmation first. For the sake of simplicity, we're thinking of just naming our root AD domain as "finORG." That's it. I believe in AD its OK. ...
Score Group Policy - enabling users to view "My Computer, IE, My Documents" on desktop
matthew.d.herring - 11 Jan 2007 9:49 PM - 2 messages
I recently created a GPO to lock down the desktop for the users (standard background, and disabling any ability for the users to change their desktop background).      The problem begins where in XP pro, those three items are not on ...
Score Help importing users into active directory
tandrist - 11 Jan 2007 9:38 PM - 3 messages
I want to import users from a comma delimited file into active directory and have it setup basic FTP access at the same time. Is there a program/way of doing this?  Even if I had to do two seperate ...
Score ADFS - SAML audience
Dima - 11 Jan 2007 8:04 PM - 10 messages
I have a question about the <saml:Audience> tag in the SAML token. After examining the SAML token in the ADFS log, I saw that the resource FS generated SAML token contiains the audience value set to the URL of the ...
Score Want to retire DC
josh lacroix - 11 Jan 2007 7:10 PM - 5 messages
I have a small little domain setup of 1 DC. I want to retire this box. I am planning on bringing up a new box, making it a DC and then transfering the FSMO roles to it. I will make all the services the same, kill the DNS and ...
Score Active Directory access within two forest.
Tracy - 11 Jan 2007 6:53 PM - 15 messages
I have a forest, the first is called clinton.com at one location and one called lapeer.com at a different location. The clinton.com domain and lapeer.com domain both have a file server that I need to allow cross forest access for users. ...
Score DHCP Scope Activation / Deactivation
jblaze - 11 Jan 2007 6:12 PM - 11 messages
My company was purchased and we are trying to migrate our domain (Xdomain) computers to their domain (Ydomain).  There is currently a domain trust relationship set up, but we are trying to eliminate Xdomain.  We are still running two DC's for Xdomain, one that services ...
Score ADMT Migration from NT 4.0 to windows 2003
chanmm - 11 Jan 2007 5:37 PM - 4 messages
Dear all, When I run ADMT on Windows 2003 it said "target domain in not native mode"? But when I setup AD I choose support Pre-Windows 2000 Server. So what can be wrong? Thanks chanmm ...
Score GP Automatic Updates Service
cgold - 11 Jan 2007 5:34 PM - 2 messages
I have enabled the Automatic Upadates service under Computer - Windows Settings - Security Settings - System Services.  This has worked fine for Windows 2000 boxes.  On Windows XP the service does get set to Autmatic but it does not start.  Trying to start Automatic Updates results in this error:  ...
Score Can you Stop KCC replication and just set manual replication?
Scott Sanders - 11 Jan 2007 5:10 PM - 20 messages
Hi, I need to know if it's possible to stop automatic replication between DC's. I need to provide a DC that is part of our AD infrastructure to a vendor so they can do some development, however, I'd rather replicate any changes to AD ...
Score Unable to lookup user names for display
deciacco - 11 Jan 2007 5:01 PM - 7 messages
I'm trying to give a domain user access to a folder on a workstation on the domain. I right click on the folder, then I select sharing and security and I go to the security tab. I click the add button, then the advanced button. ...
Score System Power Options Using GPO
Jason (NFSB) - 11 Jan 2007 4:16 PM - 3 messages
Is it possible to change the power options of a system using GPO?? I know you can do it with 3rd party add-ons but was wondering if anybody knew of REG scripts or anything.. I have a bunch of systems that are locked down very ...
Score Distribute an existing HOSTS file?
Robert Ameeti - 11 Jan 2007 3:52 PM - 4 messages
I want to use one of the existing HOSTS files that can be found that already contain hundreds/thousands of domains that are ads, porn, ad servers, etc. I do believe that every computer always uses their own HOSTS file before ...
Score Only new users can access POP3
todd eric - 11 Jan 2007 3:46 PM - 3 messages
We have a user (Scott) who is trying to access his Exchange account via a PDA.  When he tries to logon it rejects his password therefore not allowing access.  When I enter a new user into Active directory (one added via wizard ...
Score DCPromo / Remove Certificate
Indyreese - 11 Jan 2007 3:38 PM - 2 messages
I have a client that has two Windows 2003R2 servers. Server A is a domain controller, file server, and SQL 2003 Server. Server B is an Exchange 2003 Server and Terminal Server, but is not a backup domain controller. I have the ...
Score Administration of AD on Vista WS
Bking - 11 Jan 2007 3:20 PM - 3 messages
I've been trying to install the adminpak.msi on my Vista workstation so that I can administror AD - it appears to install but I receive an error whenever I try to actualyl run any of hte tools (like Users and Computers) - the error ...
Score Slow logon process on clients
Hens - 11 Jan 2007 1:50 PM - 5 messages
Hi, I hope someone can help me, In building A, I have a GC in place but for some reason, on some desktops/laptops, logging on to the domain just take ages, +- 15 minutes on some machines. I cannot seem to find the problem; does anyone ...
Score Windows cannot update your roaming profile: why not?
LCPaverIT - 11 Jan 2007 1:33 PM - 7 messages
I just set up Windows-2003 server, and 5 XP-pro workstations. I can not get "roaming profiles" to work correctly though. When logging out, after it says "saving settings", an error message always pops up. The first time I tried this in mid-December the message I was getting was ...
Score Computer Account group membership
Keith - 11 Jan 2007 12:51 PM - 3 messages
This is a Windows Server 2003 OS...Is there a way to update computer account's group membership without rebooting the server? Basically I need to update the kerberos ticket of the computer account to reflect changes in group membership for a GPO to be applied. ...
Score Cannot browse DC's
Mike Firth - 11 Jan 2007 12:39 PM - 6 messages
Good Day Everyone, I have a problem with my SBS 2003 domain, but believe the problem is not specific to SBS so I have posted here, please let me know if this is incorrect. Up until last week I had the following enironment: ...
Score Domain Controller Diagnosis Result
PHO - 11 Jan 2007 12:19 PM - 2 messages
Dear all, Our Domain controller has a problem, we need to reboot every morning.  After running "Domain Controller Diagnosis", we got the reslut as below, but we don't know how to fix it. ========= Domain Controller Diagnosis Performing initial setup: ...
Score Group Policy or Windows 2003
Pearl - 11 Jan 2007 12:14 PM - 3 messages
I need to ensure that our Terminal (windows 2003) server has all the display settings available for our TS connected users.  Currently, the Wallpaper, ScreenSaver and Settings are not available.  Is this a Group Policy setup or Windows?  I've checked the Group Policy for users and computers and there ...
Score ADMT Migration from 4.0 windows 2003
Chan Ming Man - 11 Jan 2007 11:59 AM - 2 messages
Dear all, When I run ADMT on Windows 2003 it said "target domain in not native mode"? But when I setup AD I choose support Pre-Windows 2000 Server. So what can be wrong? Thanks chanmm ...
Score Running a com addin when logged on with an AD user
neoret - 11 Jan 2007 11:41 AM - 2 messages
Problems running the add-in for end users. I have developed a shared add-in for outlook using C#. My application is integrating outlook with an archiving system, making it possible to archive mail items using an archive button. I have a peculiar problem. My add-in is installed and run successfully ...
Score Intrasite Replication
Orvs - 11 Jan 2007 9:59 AM - 8 messages
Hi Forum: I have  one problem:  two DCs on same site are replicating one way. I have checked DNS resolutions and all fine, check the AD promotion fine. On the AD sites and Services there is no automatically generated  connection ...
Score Group Policy does not apply
Pc-check - 11 Jan 2007 7:38 AM - 4 messages
I or organisation we have a GPO that does not apply to a server. I we use gpresult then we see the group policy, but is does not change the settings Windows automation Update for Sus. Can somebody tel me how to fix this problem. ...
Score trust creation leading to "clock skewed" error
majid asadpoor - 11 Jan 2007 6:39 AM - 6 messages
Hi when i create a forest trust with domain level authentication between two forest, everything looks ok. but when i want to give a security permision to resource  in a domain in the first forest  to a user which is in a domain in second forest , i can not ...
Score Last logged on user
dano - 11 Jan 2007 6:33 AM - 5 messages
Hello, I have a text file of computer names (all joined to the same domain) and would like to create a report of the Last Logged on user for each machine.  I have looked into using VB script and Psloggedon, but these seem to only find ...
Score DCPromo and NTDS.DIT
cbielich - 11 Jan 2007 5:25 AM - 5 messages
Basically ntds.dit got corupted and I dont have a good backup. Yes I know thats important and let me tell you this is happening for sure now. I have read all the articles and tried defragging, repair, restore and ...
Score Print Server Setup
Wayne - 11 Jan 2007 4:57 AM - 6 messages
Hello, We currently have hundreds of print queues setup using the Static IP of the printers. Our network group would like us to use DHCP addresses on the printers. Question: Would we have to recreate all of the print Queues pointing them to the ...
Score User object changes
ohmcp - 11 Jan 2007 3:09 AM - 3 messages
Is there a way in AD to find out who is modifying objects and when? thanx in advance ...
Score query on active directory
inenewbl - 11 Jan 2007 2:54 AM - 2 messages
Hi all. I have a security question to ask. My office currently has a domain where the dc is win 2003. All client pc are of win xp. Not all client pc is join to the domain. My dc is also a file server. I realise those pc which are ...
Score lastLogonTimestamp
dano - 11 Jan 2007 2:46 AM - 3 messages
Hello, Quick question about the lastLogonTimestamp attribute for user accounts. I automate a report that displays inactive user accounts, eg inactive for over 4 weeks.  In the domain we have many service accounts, which are used to run services but denied logon locally and remotely.  ...
Score Searching the active directory
Sabo, Eric - 11 Jan 2007 12:32 AM - 7 messages
I don't know if this is the correct place to post this or not, but here is my problem (if there is a better newsgroup, please let me know) Our domain is Windows 2003 Native (all windows 2003 Sp1 domain controllers). ...
Score FSMO Server Role
Neil P - 11 Jan 2007 12:08 AM - 2 messages
Hi Guys, Just a question for reference. When adding a computer to a domain which server role is contacted? I think that it is the RID Master, is that right? Also if you try adding a computer to the domain and you use a name that is ...
Score DCPROMO
Lee - 10 Jan 2007 10:47 PM - 4 messages
I am trying to install a second windows 2003 server domain controller, but get an error after replication when the wizard is trying to promote the machine to a domain comtroller, the error is as follows The operation failed because: The Active Directory Installation Wizard was ...
Score Date Saving Time Change
Yman - 10 Jan 2007 9:46 PM - 4 messages
Hi As all you know about DST change coming soon. My question if you change the time on the Domain controller. Do you have to change the time on the other servers and workstations; or they should synch with the Domain controller ...
Score Resetting Folder Redirection for Roaming profile using Group Polic
Walter D''Souza - 10 Jan 2007 9:01 PM - 2 messages
I am using Redirection for My Documents for a Terminal Server Roaming Profile using Group Policy.  I have now moved My Documents to another server and changed the Redirection in Group Policy.  But it is not taking effect.  Is ...
Score AD Log files on separate drive from Database
Chris Herbert - 10 Jan 2007 8:01 PM - 6 messages
Hi, I have a Win2003 DC which is set up with the AD log files on a separate drive to the database files. When I asked the person who set it up why they did that, they said that it was an MS recommendation. I haven't been able to ...
Score 2003 DC Disaster Recovery - is ASR suitable on DCs
Brian - 10 Jan 2007 7:16 PM - 7 messages
We are currently testing a number of options for restoring our domain in the event we lost the entire system i.e. no surviving domain controllers.   If possible could anyone confirm whether using ASR is suitable to restore a ...
Score adprep /forestprep fails
vince - 10 Jan 2007 7:16 PM - 8 messages
Greetings, I am trying to add a 2003 DC to my 2000 domain. When I run adprep /forestprep it fails referencing the following log files: adprep.log: Adprep was unable to complete because the call back function (null) failed. [Status/Consequence] ...
Score Time synchronization
Ray - 10 Jan 2007 6:52 PM - 16 messages
I'm tortured by time synchronization recently. At the beginning, PDC had no external clock so it could not be synchronized, but clients could synchronize with the PDC. I read KBB 816042 and modify something, PDC can synchronize with the external clock, but ALL clients could not synchronize ...
Score Private key / EFS certificate generation and key storage
Ronnie - 10 Jan 2007 5:27 PM - 3 messages
On a 2003 Terminal Server in a 2003 functional mode forest, if encryption is allowed on a folder in a user's redirected My Documents folder with no CA in the domain, am I correct in saying the public key pair is being generated by the ...
Score can only see user via find
Kim Greene - 10 Jan 2007 5:13 PM - 12 messages
Can only see user via find function in Active Directory, not in OU list.  After the search, I've tried moving it to the correct OU, but that doesn't work either.  The account does appear under the correct OU on the other ...
Score DC local policies settings vanish
John Miller - 10 Jan 2007 4:49 PM - 4 messages
Have you ever seen this situation? A client of mine lost power one day and, of course the server went down.  when power was restored, the server booted normaly, but now has a glitch.  It seems that the user right for "access this computer from the network" lost ...
Score Disaster Recovery - Virtualized environment
TonyP - 10 Jan 2007 4:33 PM - 7 messages
What I intending to do is: 1)    Install VMware Infrastructure 3 on a server at my disaster recovery site. 2)    Configure a 4th Virtualized domain controller (DC04 - Windows 2003 SP2 R2 license) which replicates with my physical Domain Controllers at my main Data ...
Score DHCP Authorization
Tango T - 10 Jan 2007 4:23 PM - 4 messages
I am moving our DHCP to new hardware.  I am retiring the old server. If I rename the new server to the same name and give it the same IP address will I have to re-authorize the server? ...
Score Remote password reset
Simon Renshaw - 10 Jan 2007 4:20 PM - 3 messages
Hi, I have users who are always working out of the office. They pretty much just check their emails with OWA/Outlook. I'm looking for ways to allow them to change their passwords. I don't think they can change it from OWA. ...
Score Changing password through Outlook WEB Access (OWA)
buddd - 10 Jan 2007 4:19 PM - 3 messages
Hello, I have a relatively simple problem that maybe someone has some advice on. We have a very simple Windows 2003 Active directory structure (one domain) along with an Exchange 2003 server. We have several remote users, who logon via OWA. These users work with ...
Score Reset Pasword User
Jonatan Sancho - 10 Jan 2007 4:01 PM - 6 messages
Is there in active directory a atribute which record the user who reset or set the password of a user? Thank you and sorry for my english ...
Score Intersite connection ??
Orvs - 10 Jan 2007 3:35 PM - 4 messages
Hi Forum: I'm kind of lost and I need some help. If I have  two AD sites : Site A(being the main site where my Main DC is located ) and Site B(Branchs)  in my  AD domain ...
Score replacing network adapters in domain controllers
burgessb - 10 Jan 2007 3:32 PM - 3 messages
We have three 2003 Enterprise domain controllers and I need to replace all three NICs.  Current nics are 1G fiber and we're converting to 1G cat 5.  Anyone have a good documented procedure for this?  Thanks ...
Score NTDSUTIL seize roles query
LarryF - 10 Jan 2007 3:08 PM - 5 messages
We have a forest that consists of two domains, one root domain and a sub domain as in: a.org = root level b.a.org = sub domain The DC holding the FSMO roles in the sub domain (b.a.org) failed and I need ...
Score objectClass and objectCategory
TB - 10 Jan 2007 2:47 PM - 2 messages
Hi, Just wondering what the meaning of objectCategory is in relation to objectClass. Is objectCategory simply a subclass ? tia ...
Score Splitting up a Domain
butter - 10 Jan 2007 2:24 PM - 4 messages
My company is in the process of being split from the parent company.  Currently we are in a single domain.  The FSMO roles are held by DC's in the parent company.  What is the best way to keep the my domain up and running ...
Score keeping all the PC clocks tightly synchronized
Paul - 10 Jan 2007 2:19 PM - 4 messages
Hi, I am running 2003 AD forest and have the forest root PDC pointing to an external time source which works fine. All PC's are running XP. The problem I have is that we have a document managent system that needs all ...
Score EventID 566 unixUserPassword
Burrga - 10 Jan 2007 2:19 PM - 4 messages
Hi! Since loading the R2 Schema in our production forest, we are experiencing multiple Audit Failure 566 events from users AND workstations against the unixUserPassword attrib on Users and Group objects.  Since we upgraded from 2000 - 2003, we have anonymous logon, everyone and auth users in our ...
Score Can't stop PASSWORD EXPIRING message.
Mrpush - 10 Jan 2007 2:12 PM - 4 messages
Hello, In AD on MS 2003 server, default GPO was set to have user change their password in 42 days.  Well now it 2 weeks until that time and it started dishing out the "password will expire in 14 days, do you want to change your ...
Score NETBT Error on DC
Stefano Colombo - 10 Jan 2007 1:07 PM - 4 messages
We have a DC that started logging the following error in its system event log The machine with IP 10.3.1.3 is another DC in the same domain and site What can I do to solve the problem ? ...
Score Global Catalogue
buddd - 10 Jan 2007 1:06 PM - 4 messages
Hello, I was wondering if someone might be able to assist me in a better understanding of the role of the Global Catalogue. It seems if one has an active directory network configured, one requires a Global Catalogue (GC) to operate correctly. My understanding ...
Score Remote Laptop Users & Password expiration
Seth - 10 Jan 2007 12:26 PM - 6 messages
I have remote users with laptop and they rarely logon to domain. When 42 day passes their passwords expire so they cannot get mail from exchange server. * They also can not do a VPN connection after 42 days because VPN connection ...
Score Seize RID Master Role
Wrighty - 10 Jan 2007 12:23 PM - 7 messages
Hi, We have 2 Domain Controllers running Windows 2003 Server (Non SP1), DC1 & DC2.  DC1 held the PDC Emulator & RID Master roles, while DC2 holds the Infrastructure Master Role.  Somehow DC1 has lost both its roles, we do not ...
Score Basic Replication Questions
Orvs - 10 Jan 2007 11:55 AM - 4 messages
Hi Forum: I need some help regarding AD replication. I have Forest root in States and still on Windows2000 but schema is extended to recieved 2003 DCs We opened a new Regional  HQ and  I have created a new child Domain for this ...
Score Wins Service on a Windows 2003 AD domain
Orvs - 10 Jan 2007 11:35 AM - 9 messages
Do we still need WINS Service  on a Windows 2003  AD domain? I have couple of Windows 2000 Domains and Windows 2000 DCs, but mostly Win2003s. clients are XP. I setting up a new Domain and want to get rid of WINS..... ...
Score Restoring AD onto a Test network (using different Hardware)
raddish66 - 10 Jan 2007 10:31 AM - 3 messages
We are trying to setup a Test environment where we can restore AD and test our apps. We have looked at some of the microsoft guides but they do not seem to give a step by step process on how to do this within a new test ...
Score Join AD
MartinSWE - 10 Jan 2007 10:24 AM - 5 messages
I have a couple of servers that has name resolution problems. I can use nslookup, with that I can resolve all my DCs. However, if I use ping, it can' t resolve? With NSlookup I can allsow resolv external adresses like [link] ...
Score Clients from remote site can't authenticate logins to main office DC
John - 10 Jan 2007 10:20 AM - 2 messages
Hi, We have a situation where our domain controller is dead in the remote office (NT4 based BDC), we're trying to get the users to authenticate from our main office (W2K3 AD in mixed mode) but we're getting no domain controller found ...
Score AD Permissions for WebDav
Flo Prinz - 10 Jan 2007 8:36 AM - 4 messages
Hello, I'm developing an ASP.NET application which is sending meeting requests to AD Users via the code from this page [link] Therefor I created a special user for accesing the user accounts and the ...
Score Passwords Not Expiring
CMH-Jared - 10 Jan 2007 5:55 AM - 8 messages
At some point in the last 6 months, we disabled password expirations (or someone did, specifically). We re-enabled them about 60 days ago, and set the maximum password age to 30 days, but no account has been prompted to change ...
Score DNS Zones not created
Dan - 10 Jan 2007 4:23 AM - 3 messages
I've seen this before and figured I'd ask the pros...  Sometimes when I create a test domain / forest I see that not all of the DNS zones are created.  In this latest example it was a set of Virtual PC's with no ...
Next » 2 3 4 5 6 7 8 9 10