Windows Server Active Directory

Event ID: 4000 DNS error

Mike - 3 Mar 2007 8:57 PM - 15 messages

Hi, I am in desperate need of some help. I just finished a migration with SBS 2003, and I have a 2nd DC running Windows 2003 Server. On the 2nd DC, I'm getting the following error in the event logs. ...

DC 64x Compatibility

Luiz - 3 Mar 2007 5:38 PM - 10 messages

Hi, I intend to deploy a new W2K3 R2 64x Forest. My Forest has W2K and W2k3 32x. Is there compatibility problem if I run ma root DC as 64x and my child domains are 32 bit? Thanks Luiz ...

Offline Folders Disappear

Al Mucci - 3 Mar 2007 5:27 PM - 2 messages

I have setup a user to have his My Documents redirected to the H: drive on the server, which sets up an automatic Offine Files function Strange things have been happening lately. Even when he's in the office, and ...

Child Domain Questions W2K3

Luiz - 3 Mar 2007 4:51 PM - 16 messages

Hi, I intend to implement Child Domain in my Company that has 2 distinct domains because are a Holding. I will configure a root domain as x.local and the child domains are my.x.local and yours.x.local. ...

DHCP for various subnets

johnny_mango - 3 Mar 2007 3:08 PM - 2 messages

IÂ´m sure this must be a very straighforward question, but what must I consider when providing a DHCP server for servicing various subnets? Eg, building 1 uses address ranges 192.168.200.x, 201.x, 202.x according to ...

Account Operator Cant Unlock Accounts?

[c] - 3 Mar 2007 1:01 PM - 3 messages

I have a user assigned to the Account Operators group. He has the adminpak installed to his workstation. His is a local administrator on his workstation. He can reset a password but he cannot unlock a locked user account. Any ideas? THis is a windows 2003 r2 environment, he is running windows xp ...

Locking down DCs and GPs

Michael - 3 Mar 2007 12:48 PM - 3 messages

Hi, I've noticed lately that toooooooo many people can see all of our Group Polocies and toooooo many people can edit them. Is there a way for me to lock this down at all? I really don't like it. ...

Kerberos SRV record disappears from DNS

pdx - 3 Mar 2007 7:52 AM - 5 messages

W2k3 domain w/ two domain controllers. The 2nd DC (no fsmo roles) has had its Kerberos SRV record disappear from DNS and this leads to some issues. This has happened once - possibly twice . When this problem was last encountered the KDC service was in a stopped/not running state. The SRV ...

AD Stale Objects

Lisa - 3 Mar 2007 7:44 AM - 2 messages

Hello all, I need the best way to delete stale objects in the AD, users and computers, is ther a XML LDAP query sample that i can create and use with the ADUC (dsa.msc) to render the same result like the following command do? ...

International characters in AD & ADAM

Patrik_L - 3 Mar 2007 5:41 AM - 9 messages

Hello. Coming from Sweden (and with a branch office in Finland) we use Scandinavian characters in object names in our AD. This works fine as such but when coming to sorting it doesn't. For example the Swedish character Ã… (an A with a ...

Permissions for programmers

Hong Jin - 3 Mar 2007 4:40 AM - 5 messages

Hi, What role i should assign to my programmers because software programmers need to write program that sometimes need to access & change C:\Windows\System32\ files in the domain computer. Currently i put them as Domain Users. The moment they try to modify some ...

Prohibit Browse Entire Network

gsuazo - 2 Mar 2007 11:32 PM - 2 messages

Hello! We are looking for a configuration/policy thru GPO that prevent users for browsing Microsoft Windows Network on Entire Network, even the computers within the domain that they belong to. How could we accomplish this requirement from one of ours client? ...

NTFS permissions best practices

mbrand - 2 Mar 2007 9:31 PM - 5 messages

Are there any best practices out there for applying group policy to NTFS permissions? I've found all kinds of stuff for setting up said groups but nothing about applying them. I'm looking for things like managing inheritance. ...

Permission issue: Accessing AzMan store in ADAM from ASP.NET worker process

chen - 2 Mar 2007 9:09 PM - 3 messages

Running into a problem that fails in the AzAuthorizationStoreClass.Initialize call with "The system cannot find the file specified. (Exception from HRESULT: 0x80070002)". I've followed the "How To: Use ADAM for Roles in ASP.NET 2.0" to setup ...

Group Access

johnisccp - 2 Mar 2007 7:15 PM - 2 messages

I have over 20 groups created in Active Directory and I want to start deleting them if they are not valid. Is there a tool or a way for me to find out what each group is accessing or have rights to? ...

Need Help with 2nd Domain Controller

razor - 2 Mar 2007 5:19 PM - 6 messages

Hello-- About a year ago we moved our Exchange server off of our DC and onto its own box. At the same time, we made the Exchange server a 2nd DC with Global Catalog, etc. etc. We followed "best practices" the best of our abilities, however, I have ...

ADAM wirh SSL

MichaelB - 2 Mar 2007 3:58 PM - 9 messages

Hi all, I just setup an ADAM on a standalone server. Everything works fine and I cna use it to the full extent. Now, as for using SSL, is does not want to work at all. I got a certificate from my CA and assigned it to the server and the ...

Domain to Domain Browsing

ICTSM - 2 Mar 2007 3:39 PM - 16 messages

Hi all! We have primarily, 2 domains. One is our Admin domain (office work etc...) the other is a curriculum domain for students. I know for certain that a 'Trust' between the 2 was setup...but here's the ...

Deleting a valid computer account disables the local admin account

Paul - 2 Mar 2007 3:36 PM - 4 messages

We have recently experienced two instances were 2 computer accounts got mistakenly deleted. When trying to RDP into these computers we found that the local administrative account was locked out. We cannot seem to find a way into getting these computers re-added to our domain. Has anybody ...

Any good workstation profile migration tools for clients moving to a new domain?

boe - 2 Mar 2007 3:21 PM - 5 messages

I'd like to create a new domain but keep their XP pofiles essentially the same. Are there any good utilities or something I should be doing at the workstation? THanks ...

OU Design Best Practices

Chris Lukowski - 2 Mar 2007 2:55 PM - 10 messages

We currently do not have any GPOs in place and want to design a sound OU structure first. Currently our user base only consists of our office building and remote managers with laptops across the country. We currently have no ...

unaccesible system event log

Jan - 2 Mar 2007 1:52 PM - 10 messages

I am logged as domain administrator, and when try to read system event log with application "Event viewer" I get error message It is on Windows Server 2003 now configured as second DC. Access rights to files system.evt and so on are all ok. Before adding server to domain as DC ...

Locked windows 2003 server services not starting svchost crashes GPO

Reggie - 2 Mar 2007 9:47 AM - 3 messages

Hi guys, At work at the moment in the middle of a crisis let me explain a little :- We were messing with GPO's to get vista to work when joined to a domain.... I changed 2 Domain GPO policies : - ...

AD upgrade from 2000 to 2003

Thomas Olsen - 2 Mar 2007 7:40 AM - 8 messages

Hi all I am sure that many of you have already upgraded or migrated your AD from Windows 2000 Server to Windows Server 2003. I am in the start phase of that project now, and was hoping some of you ...

Active Directory Design Question

jwilmer - 2 Mar 2007 3:20 AM - 3 messages

We are spinning off another small company 30 users max. I need to come up with an AD design to meet these requirements. 1- Our IT group will mange their complete network 2- Their mailboxes will be housed on our Exch 2003 servers ...

What do you do with servers in dmz if you use adam

Kahlan - 2 Mar 2007 2:48 AM - 2 messages

If one where to choose to implement adam in a dmz in place of the current forest and create a new domain to the back-end enviroment and replicate the newdomain with adam via IIFP what do you do with the servers that where a member of the dmz domain. do ...

How to restrict user access to internet

Joeb - 2 Mar 2007 2:25 AM - 4 messages

I would like to know how to restrict certain users from using the internet on client computers. I am running windows 2000 client PC's connected to a windows SBS 2003 R2 Std edition Server. Does this have to be done through ...

report logon / logoff times of users

jim - 2 Mar 2007 12:45 AM - 7 messages

I've had the dreaded request - please get me a report of when my employees are logging on and off the network... now I know this is problematic because (as I explained to the requestor) the reports probably won't give this person the information they want... oh well. ...

Remote Assistance GP???

Sam Adams - 1 Mar 2007 11:32 PM - 5 messages

I am trying to assist one of our users with remote assistance and it works for most users but ocassionally I will run into remote users that I am unable to log in via RA. Is there a way that I can set group policy to have ...

Update Employee Information in AD

C Emmons - 1 Mar 2007 8:51 PM - 2 messages

I am running Windows 2003 Server. I would like to update my existing AD with employee information. First, I would like to know the best way to place an employeeid in the existing AD records. Secondly, what is the best way to ...

document for same domain AD migration

Calvin - 1 Mar 2007 5:56 PM - 2 messages

our company buy a new server, we want to migrate the user account from the old 2003 AD server to new 2003 AD server within same domain, Any document for this case as reference? ...

trouble removing DC using repadmin tool

Greg - 1 Mar 2007 4:21 PM - 6 messages

I created a test lab seperate from the production domin. I backed up the system state from the production DC that has all the master operation roles. I restored it on a DC in the lab. I dont have a second server in the lab to ...

Lost mappings

billmcg - 1 Mar 2007 4:13 PM - 6 messages

Hi All, I'm having a problem with mapped printers and drives losing their path. I'm using an older COBOL app that requires me to map the printers with the "net use lpt*" cmd and I'm using the persistent: yes with it. It only happens ...

Group Policy across domains?

hus888 - 1 Mar 2007 3:31 PM - 3 messages

Can somebody tell me how GPO appliance works across trusted domains? e.g. what user and computer policies are applied when I logon to domain B from a computer in Domain A and credentials of Domain A?? Thanks for your feedback ...

Exporting AD settings to file

charlesET - 1 Mar 2007 3:12 PM - 2 messages

Hi: Is there a way to export the settings of AD to a txt or doc file for documentation purposes? I recently started working on multiple domains that have no documentation on how their AD is configured and would like to create a hard copy for future ...

Win2k3 Group Policies

ripley - 1 Mar 2007 3:02 PM - 2 messages

We manage a Terminal Services based environment as follows: Each office has an ADSL router which connects via ADSL VPN connection to our main server area Each office has many users each with a PC Each PC is joined to the domain and has no additional software - the ...

Display user groups and Refresh Group Policy

SEgerton - 1 Mar 2007 2:37 PM - 2 messages

In Windows 2000 how do i Dispay User Secuirty Groups from a command prompt w/o running gpresult? All I want to display are the groups not all the other info. I believe i've done this before, but have forgotten the command. Then ...

Using ADMT

Luiz - 1 Mar 2007 1:35 PM - 6 messages

Hi, I intend "rebuild" my forest and using ADMT to migrate the users from an existing Domain 2000 to 2003. Must I install ADMT in the new DC, creating Trust Relationship and migrate the objects? Anyone can tell me where can I get some paper about that procedure? ...

Network logon traffic

Dharan Prakash - 1 Mar 2007 11:26 AM - 6 messages

The MS press book, Building Enterprise Active Directory Services, in the Notes from the Field series, gives some numbers data size for network logon traffic for Windows 2000. Where can I find these details for Windows 2003 Server? Will there be a huge ...

Trust between Windows 2003 Forests trough firewall

Filipe - 1 Mar 2007 11:03 AM - 2 messages

Hi, Im trying to configure a trust between two forests with an ISA Server 2004 in the middle. I opended the ports that the Microsoft article refers ([link]) and im having ...

Qurying the GC via vbscript.

Brad - 1 Mar 2007 10:59 AM - 4 messages

All, is it possible/feasable to query the GC in a multiple domain forest to ascertain ALL group memberships for a particular user? Is there a better/smarter way that people are doing this? Users in one domain are ...

DC placement / Small branch offices

MarioC - 1 Mar 2007 9:40 AM - 6 messages

Hi, I have an AD environment with some small branch offices. Since there are no locked down server rooms we don't want to deploy DCs in those sites. There are about 20 users located in each branch office and there are ...

SYSVOL clean up

kwyap - 1 Mar 2007 9:27 AM - 6 messages

Hi, I've found a lot of folders under \\DomainName\SYSVOL\DomainName\Policies, how do i clean up these unused stuffs? Regards, kwyap ...

Moving From Windows NT 4.0 to Windows 2003 Domain

VIT - 1 Mar 2007 12:35 AM - 11 messages

Hello! Can anyone lead us in the right direction for moving from a Windows NT 4.0 PDC to a new Windows 2003 server with AD? We will be buying a new server and installing Windows 2003 on there and then shutting down the old Windows NT ...

Replication Problems

Ricky - 1 Mar 2007 12:15 AM - 4 messages

I'm migrating some servers from one network to another network and one of my servers is giving the following errors in the event log: *****************************APPLICATION LOG********************************* LDAP Bind was unsuccessful on directory ServerXXX for distinguished name ''. Directory returned error:[0x51] Server Down. ...

Finding Users and Groups within Groups within...

LM - 28 Feb 2007 10:59 PM - 2 messages

Folks, Sorry if this shows up twice, but it's been all afternoon since I (thought) I posted the question, and I don't see it, so perrhaps I messed up. In our application right now, we assign permissions to users by making ...

ADFS questions

John M - 28 Feb 2007 10:41 PM - 6 messages

I believe I'm looking to setup a Federated Web SSO configuration. Let me know if I'm wrong.. I have an existing corp. network with AD and a dmz network with ad installed in a separate forest with sharepoint services 3 and maybe upgrade to ...

find user

cptkirkh - 28 Feb 2007 10:11 PM - 3 messages

While running the DST update I found a user that I haven't seen before when i pulled the DNs for the list when using msextmz. How cani figure where this user is and what it is. Thanks for your help. ...

hide organizational unit from view in active directory

vagrantbrad - 28 Feb 2007 9:22 PM - 11 messages

I want to hide an organizational unit from view so that our helpdesk person cannot see the objects and properties inside this OU. It would be detrimental to security if he could see the users and their associated properties in the OU because it contains all our ...

Can switch print servers w/o touching workstations?

Chris Lukowski - 28 Feb 2007 8:39 PM - 6 messages

Is there a way to move a network printer to a different print server without touching the workstations that use the printer? I'm hoping there's a cool way to do this in AD since it seemed impossible with NT4. We might have to do ...

Can Schema Master and Global Catelog be on the same server?

achen - 28 Feb 2007 6:33 PM - 9 messages

I am prepping some work for our first Exchange 2007 server, and here are two important requirememnts that need to be met: 1. The domain controller that is the schema master must have Microsoft Windows Server 2003 Service Pack 1 (SP1) installed. ...

How do I copy the permissions of of an AD object?

Jammy - 28 Feb 2007 6:05 PM - 4 messages

I'm working with a company that has put all of their users, service accounts, & security groups in the default "User" container in their domain. They want to split those out into seperate sub-OUs now. However, the default containers ...

Restrict read access to mobile phone numbers

Luis Rosado - 28 Feb 2007 5:28 PM - 3 messages

We want to include mobile and home phone numbers in AD for out IT dept. We wnat to restrict read access to ONLY the IT dept. I removed read access to the "Mobile Phone," property for authenticated users, but a regular "domain user," was able to read it. ...

Change location of files

Trinity Catholic High School - 28 Feb 2007 4:58 PM - 3 messages

Hi, My file server ran out of space on its hard disk, so I decided to have a little re-org of where files are kept. Unfortunatly, I have a lot of software on the hard disk rolled out by group ...

How to install just Active Directory snap-in on windows xp

cbass - 28 Feb 2007 4:37 PM - 7 messages

I would just like to install the AD Users and Computers snap-in on a windows XP pro machine. How would I do this w/out installing all the other Admin Tools such as DNS, DHCP, etc. ...

Unable to add DC to Domain... help!

IGastaldo - 28 Feb 2007 4:26 PM - 4 messages

I really hope you guys will be able to shed some light my way... I inherited an already configured network, and I'm dealing with some "issues"... I'm trying to set up a second DC on the domain, but everytime I try I get ...

AD Attributes

Steven - 28 Feb 2007 4:20 PM - 9 messages

Hello, I would like to add a "Hire Date" field to the Users property in Active Directory. I know editing the schema can be a little tricky so I was looking for some help. I don't see a syntax for date and I didn't know if i had to have an OID... ...

Event ID 27 W32Time

Ciarava - 28 Feb 2007 3:30 PM - 2 messages

lately a win 2003 server has been logging this system warning. Time Provider NtpClient: The response received from domain controller serverprovendirect.net is missing the signature. The response may have been tampered with and will be ignored. This is the only server receiving this error- Any suggestions? ...

Redirect MyDocs to H-drive

Snake86 - 28 Feb 2007 3:25 PM - 3 messages

Hi all, we have an AD here with roaming profiles. The MyDocs folder is redirected to: \\server\users$\Docs, so the output will be (if my username is Snake86): \\server\users$\Docs\Snake86\My Documents. But when you i.e. open the My Pictures folder the address in the addressbar ...

What happens when a client joins the domain

Matt - 28 Feb 2007 3:21 PM - 5 messages

I am setting up an Active Directory test environment and having never used it before I am wondering what actually happens when the client joins the domain. Specifically I have two user accounts set up on my client, will the ...

DNS Zone problem?

Pasi Heino - 28 Feb 2007 2:53 PM - 2 messages

I have Windows 2000 root domain with one Windows 2000 child domain. I have installed new Windows server 2003 child domain under root domain. Problem is that; DNS zones is not created automatically to installed W2K3 dc. Only W2K root dc have new W2K3 domain zone settings etc.. but child ...

Disabled AD accounts receive email (exchange)

CampMaster - 28 Feb 2007 2:41 PM - 2 messages

I am having a problem that just started. I am running a Windows 2003 Server SP1 with Exchange 2003 SP2. I have had a few accounts that are disabled in AD and if someone on the outside were to send an email to one of these disabled users, they would get ...

System State Back Up

rebelldtu - 28 Feb 2007 2:41 PM - 2 messages

Hi, When backing up the System State in Server 2003 Standard Edition are all group policy settings, firstly included in the back up and secondly reinstated when using Active Directory Services Restore Mode. Any comments would be much appreciated!! ...

DST Question- Affected??

Super Boobahlicious - 28 Feb 2007 2:33 PM - 2 messages

Hi MS Gurus: As everybody know DST is coming soon.. I need second opinion althought I did some research already. Our servers and services are located in Italy that talks, replicate to some Servers in US.. Lotus Domino, File shares, SQL etc.. ...

Running Win2k DST patch on OU with XP machines - safe?

Mike55 - 28 Feb 2007 2:32 PM - 5 messages

Hi, I have an OU that has a mix of 2k and XP computers. I want to run the Win2k DST patch as a startup script, but I don't know what will happen with the XP machines. ...

directory+Single sign-on

Borak - 28 Feb 2007 2:23 PM - 4 messages

I know very little about active directory but I must develop a directory application for my entreprise. my boss wants an application that makes easy for each employee to find contacts of other employes in our entreprise (telephnoe ...

Daylight Savings Time Patch for AD

AMP - 28 Feb 2007 1:58 PM - 3 messages

I have Windows 2003 R2 for our AD, do we need the Daylight Savings Time Patch? Thank you. ...

Domain authentication

Dharan Prakash - 28 Feb 2007 9:43 AM - 3 messages

In a typical Active directory - Domain environment, the clients authenticate users and this authentication happens in the domain controller. But if the domain controller is not available or cannot be contacted, authentication happens at the client itself using cached credentials. I have two queries. ...

Forced user password change request only by 2-nd login

Alexander Schaefer - 28 Feb 2007 9:43 AM - 11 messages

Hello, in our Windows 2003 Active Directory we expirience strange password change behavior: When administrator force the user to change its password on the next login (activating the appropriated check-box in the AD UÃºsers management), the user ...

csv file to ad

M. Shahab - 28 Feb 2007 6:37 AM - 4 messages

Hi csv file parameter DN,objectClass,sAMAccountName,sn,givenName,userPrincipalName cn=1,ou=test,dc=test,dc=com,user,11,,111,1***@test.com cn=2,ou=test,dc=test,dc=com,user,22,,222,2***@test.com where i can set pass and enable the user's ...

Login script to Computer OU

Joe - 28 Feb 2007 1:48 AM - 2 messages

Is it possible to setup a login script to a computer OU that will automatically run an executable with elevated privileges, or do I need to run a runas function in conjunction? The users of these workstations run as power users. ...

Users having to much rights !

Roger Payne - 28 Feb 2007 1:45 AM - 2 messages

I just finished up all DST updates but nosiest that my regular users have way too much rights. What is the default rights to give a user 2003 - Exchange OWA, POP, IMAP BES - 2.1.3 I have three sets of OU's ...

Pushing out DST Package to XP workstations

tnt - 28 Feb 2007 12:58 AM - 8 messages

Hello, How are you guys doing? Using GP with an MSI package? Scripts. Please don't tell me it is done manually. Unfortunately, our XPs are not configure to have automatic updates. Can this be set using GP to forec ...

Using Restricted Groups to grant local admistrator authority

vagrantbrad - 28 Feb 2007 12:29 AM - 4 messages

I'm a systems admin and recently hired an assistant. I want to grant this person local administrative authority to all the pc's in our active directory. To accomplish this, I want to add his user account ...

ADUC on a Terminal Server

Michelle Yu - 27 Feb 2007 11:20 PM - 5 messages

Hi, I installed the Active Directory Administration Tool from window 2000 support tools on a window 2000 terminal server. I would like to run the Active Directory Administration tool on a window 2003 terminal server. But I could not find the 2003 support tools on the server. Does 2003 server have ...

WSUS on a Domain Controller

CK - 27 Feb 2007 10:22 PM - 3 messages

Is it against "Best Practices" to install WSUS on a Domain Controller? What are the potential risks if it is installed? ...

Printer Management in R2

Todd - 27 Feb 2007 10:11 PM - 3 messages

Hello, I'm attempting to deploy printers using Server 2003 R2. I have upgraded the schema of our Active Directory domain to R2, and the print server to R2 as well. Previous to this I was using .vbs scripts to map printers. ...

Group Policy across domains?

ms-dog1 - 27 Feb 2007 9:33 PM - 5 messages

Hi, The infrastructure consists of Windows 2003 domain in '2000 mode' (Domain A) with an external trust to another Windows 2003 Domain in '2000 mode' (Domain B). The question is, will Group policy from Domain A apply if I ...

Filtering out files that can't synchronise

Yobbo - 27 Feb 2007 9:20 PM - 2 messages

Hi All Like this AD/GPO thing, but finding that when the teachers log out the synch bit isn't finishing gracefully because of a number of files. These files vary, but most appear to be MS Access .mdb files and the like. ...

Installing ActiveDirectory on Vista Enterprise Edition

lijunair - 27 Feb 2007 7:25 PM - 9 messages

Hi All, I was wondering if anyone had instructions on installing Activedirectory and setup a domain on Vista? Thanks! -l. ...

Microsoft PS to check AD environment

Matthew M (UK) - 27 Feb 2007 6:20 PM - 3 messages

Hi, Whats the name of the service where microsoft will come out and sanity check your AD environment. What are the limitations? Do they check multiple forest environments etc etc? Would you recommend this if there are no outward signs of problems with AD, ...

AD Tool

Luiz - 27 Feb 2007 6:08 PM - 13 messages

Hi, one curiosity, is there some tool to verify AD integrity? Thank you. Luiz ...

Any risk in converting mix mode into native mode?

achen - 27 Feb 2007 5:17 PM - 3 messages

We are bringing in our first 64 bit Windows 2003 R2 server + Exchange 2007, and it is nessasary to switch the domain into Native mode. This project has been hold off for coupel weeks because we are not sure ...

Windows 2003 Group Policy - Folder Redirection

modemgeek - 27 Feb 2007 4:48 PM - 9 messages

I have a problem with group policy. I was testing folder redirection for a single user. Setting it up was not a problem. However, the user had GBs worth of MP3s on his computer and it was copying all of it to the network ...

Massively clear SID History of all objects in AD.

Gabriel/TFI - 27 Feb 2007 2:41 PM - 3 messages

Is there a way/tool to clear the sidHistory attribute of *all* objects in AD? Microsoft published a VBS script at [link] that applies to a single object only. Maybe someone has developed a script, or knows a tool, that queries AD to ...

How to grant user limited access to Active Directory?

cbass - 27 Feb 2007 2:08 PM - 3 messages

Is it possible to grant a user access to only creating and modifying active directory accounts? I would like to have a user create accounts, join accounts to groups, reset passwords, but NOT delete user accounts or OUs or ...

uPDATE .adm files

ieraks - 27 Feb 2007 2:03 PM - 5 messages

1) I am Working on win 200 server and i want to update the adm files How can i do this ? I already download the admFiles_Windows2000SP4. 2) Is the re a problem if i upgrate the mode of AC on native mode? ...

Windows Domain Setup - FSMO Roles and DNS - Best, secure setup

flash - 27 Feb 2007 1:47 PM - 4 messages

FSMO roles [link] and a DNS Active Directory Integrated are the pieces for a Domain. Can someone please tell me the best setup for a Domain? Right now we have: One server with the Infrastructure, Schema and Domain Naming Master Roles ...

Startup Script Question

PRSmith59 - 27 Feb 2007 1:37 PM - 2 messages

Hi Hopefully someone can help me. I need to define a policy to have clients run an EXE file with the quiet parameter (filename.exe /quiet) Any thoughts on how to push this out thru GP. I tried creating a script but am not sure where ...

Effectively delegate control - how to?

Andrew Story - 27 Feb 2007 12:48 PM - 7 messages

Hi, Win2k AD. I'm struggling a bit with the delegate control wizard. It only provides the option to delegate a very small amout of tasks. Is there an easy way to accomplish delegation for a custom set of tasks using the Windws tool? e.g. ...

Separation : Who to separate a child domain from a root domain

Benedicte Merci - 27 Feb 2007 12:15 PM - 2 messages

We have to separate site. Site1= root SIte2= child We would like to separate them. We want to keep the same mail address but we want to be a root domain. I plan to do a migration with ADMT and migrate the child After the creation ...

How to use third party CA certificates for SSL in ADFS?

Yogesh - 27 Feb 2007 12:02 PM - 4 messages

...

Global Catalog Access Denied

Stevie - 27 Feb 2007 11:49 AM - 7 messages

We have recently upgraded our Test Domain from 2000 to 2003 and are having problems replicating from our Production Domain (which is still 2000) to the Test Domain. Here is a typical error message... Event Type: Error ...

Distribution Groups in Active Directory

pgatting - 27 Feb 2007 11:44 AM - 6 messages

I am trying to configure Active Directory on server 2003 to be used as a directory service lookup for all email clients on my network. (We do not use Exchange but have a linux IMAP email server.) It seems to work fine looking up all the individual users in AD with ...

Delegate Control

Adnank5 - 27 Feb 2007 6:29 AM - 5 messages

I am confronting with 2 problems with "delagate control" : 1. I don't see most of the fields on which i can give update permission to a user such as City , State 2. Once I delegate control to the user from which interface that ...

DCDiag Error KDC-SPN

Tom - 27 Feb 2007 5:17 AM - 9 messages

I have the following error when running dcdiag on one of my Domain Controller (server B2). Kerberos error. The KDC could not find the SPN for the server (server A1). The source domain controller (server A1) is on different domain but on the ...

Does the computer account need to be deleted if...

Jeremy - 27 Feb 2007 1:45 AM - 13 messages

Let's say I have a computer called Fred in the Smith OU. Then I rebuild that computer with an unattended install, giving it the exact same name. Do I need to delete the computer account first, before rebuilding, assuming ...

Add Employee ID

Jose - 27 Feb 2007 1:16 AM - 9 messages

All, How can I add the Employee ID field in our Active Directory Users Properties? We have a Windows 2003 Domain. Any help is appreciated. ...

Establishing WallPaper

arielqs - 26 Feb 2007 11:38 PM - 3 messages

How can I stablish a wallpaper for every user in the domain? Do I need GPO? Please help me with the setting I should use. ...

User profile problem. Any tools to analyze user profile problems?

bildos - 26 Feb 2007 11:30 PM - 3 messages

Hello, I'm looking for tools to help analyze user profile problem. Any one can recommand something ? ...

Error when trying to run DCPROMO on Windows 2003 R2

Automatic workstation domain registration w/ new AD server?

A good simple test for GPO function over slow WAN links?

GPO and removing games

How do i change the user's "Sessions" tab settings through a scrip

Unable to replicate

How to make give cross-domain "Domain Admins" permissions

Time Increases 4 minutes every month

What controls access to the Advanced tab features of shared printers?

Time Increases 4 mentis every month

Active Directory in an Internal Network Containing Firewalls

NNTP help

Domain access time

GPO: Interactive Login Won't Go Away!

Recreate users using a given SID.

Port No.

Journal Wrap Errors

Active Directory and DNS for remote branches

Please help - can I restore what I deleted using ADSIEDIT?

Windows Firewall on a DC?

Very looooong authorization - problem!

cannot change password...

ADAM Group Size

Active directory authentication

Active directory implementation