Home All Groups Group Topic Archive Search About

Windows Server Active Directory

microsoft.public.windows.server.active_directory
Score Re: Corrupt Active Directory 2003
tonybrough - 7 Mar 2009 8:20 PM - 3 messages
Hi All I have just gained a new customer who has a SBS 2003 R2 server that he believed was being back up. Well it was all apart from system state!!!! The server crashed last night, not sure why yet.  When I boot the server I am unable to log onto the domain, just the computer.  I have managed to log on in the DSRM, but like as in this thread the NTDS is corrupt. ...
Score Google Mini and AD LDAP
Newbie - 7 Mar 2009 4:07 PM - 2 messages
We recently received a Google Mini appliance and we'd like to get it setup with Windows AD LDAP for authentication.  I can't get it to work though, most likely with the syntax, but I'm not sure how to troubleshoot as I the ...
Score NTFRSUTIL error 1753
Thomas R Grassi Jr - 7 Mar 2009 2:47 PM - 7 messages
I have two Windows 2003 R2 Standard DC servers SP2 trying to get file replication sysvol netlogon shares working. ran this command on DC1 ntfrsutil ds dc1 results ERROR cannot bind w/authentication to computer, dc1 000006d9 (1753) ERROR Cannot bind w/o authentication to computer dc1 000006d9 (1753) ...
Score New DC added need help
Thomas R Grassi Jr - 7 Mar 2009 4:27 AM - 10 messages
Just added my second Windows 2003 R2 Standard DC sp2. when I issue a net share I do not see SYSVOL or NETLOGON I am having a windows firewall issue and I currently have windows firewall off on both dc's ...
Score Access Denied on XP after joining domain
Dave G - 7 Mar 2009 1:35 AM - 10 messages
I have set up a test Win 2003 Enterprise server and installed active directory. There are no patches, service packs etc installed on the server. I am using XP Pro machine that is current with all patches. I shared one of the server drives with full control for everyone. ...
Score Way for end users to see group membership?
£Jim - 6 Mar 2009 8:48 PM - 3 messages
Hi, Is there an easy way/tool to let end users see a list of AD groups and/or what users are members of a group? Read only of course :) Thanks ...
Score File or printserver without domaincontroller for non admins not possible
Andreas Wöckl - 6 Mar 2009 8:03 PM - 9 messages
Hi group! I have some big problems in an Active Directory of a school. I have: - ISA-Server - Fileserver (VM) - Fileserver (Physical) - Exchange Server All of these servers have to be Domaincontroller - otherwise it is not possible to provide print services, outlook with exchange (a popup with ...
Score Upgrade Windows 2003 ADDS to Windows 2008. Clients get access deni
paune - 6 Mar 2009 6:29 PM - 7 messages
I'm doing a upgrade of a forrest with a singel domain from Windows 2003 Native Mode to Windows 2008 ADDS. My XP clients can't authenticate against my new Windows 2008 DC:s. They get access denied when I try nltest /sc_reset:DomainName. ...
Score install software
Computer Chick - 6 Mar 2009 4:51 PM - 6 messages
sorry my english is not very good - is there way i to block all users from installing software? i remove everyone from local admin and power user groups and still able to install. should i use a poolicy? ...
Score Group being added to Local Admins (Workstations) that shouldn't
Kit - 6 Mar 2009 4:11 PM - 4 messages
Right now I have my Destop Support Section complain that that there grou DOMAIN\Workstations Admins is being added when they place a PC on the Domain. Instead NT AUTHORITY\Authenticated Users is being added.  Where in Group Policy should I look for this?  I have already looked through most Group ...
Score Disabling some Admins from creating new user objects
Pierre - 6 Mar 2009 2:19 PM - 5 messages
We use a software product to provide user provisioning to multiple AD forests. We have been having issues where admins skip this process and create all sorts accounts directly in the domain -We need to limit the majority of our administrators from creating user objects in certain OU's, How do we ...
Score Unattended DCPROMO on Server Core
Jeff - 5 Mar 2009 9:54 PM - 7 messages
Can anyone help me with creating a generic unattended answer file for a dcpromo on server core? In particular, I am wondering what the installDNS option is? I have a server 2003 domain with existing DNS servers.  Everything I;ve ...
Score roaming profiles and pop3 emails
Jerry - 5 Mar 2009 9:54 PM - 4 messages
i have created roaming profiles for our users, but the C:\Documents and Settings\%username%\Local Settings\Application Data\Microsoft\Outlook\    directories do not copy over while the office is relatively small (30 users) it would make it much easier ...
Score AD Mass Field Update
Jason - 5 Mar 2009 9:44 PM - 7 messages
I am working on a email signature program and I need to update the Custom Attribute fields under Exchange. Is there an easy way of doing this using DSMOD, ADSIEdit, or another tool? I also need to change all of the "-" in the ...
Score Inter-Forest Migration/Consolidation
Erasmo - 5 Mar 2009 6:18 PM - 3 messages
What is the best way/ steps to consolidate 2 Windows 2003 domains into one? Parent company wants to merge an acquisition company into its 2003 domain, but the company to bring to domain contains an Exchange 2003 org and Blackberry server, plus some Terminal Servers and File Servers. What is the ...
Score Moving AD, DHCP, DNS to new server
Big Passeron - 5 Mar 2009 5:04 PM - 11 messages
My network (single domain) has 2 DCs: 1) ServerA has all of FSMO roles 2) ServerB is GC Both server are also DHCP and DNS servers. Server B also acts as a fileserver and is running SQL Server 2005 Standard ...
Score Group Policy: RDP as Designated file type isn't working
slayer-19 - 5 Mar 2009 4:16 PM - 4 messages
Hello, in our Windows Server 2003 domain we don't want to allow via GPO that certain users (or group) can run *.rdp files (except some special folders --> folder redirection configured). We have added RDP extension in "Designated File types" (user confiuration - windows settings - software restrictions) ...
Score Removing the last of my 2000 AD DCs
Scott Townsend - 5 Mar 2009 3:36 PM - 9 messages
So I think I'm finally finished with the usefulness of my last Win2000 AD DC.  We've had some good times and have gone from Physical to a Virtual Relationship, but now its time for us to part our ways. ...
Score What happens If add AD role to existing server just in a workgroup
Ouback Matt - 5 Mar 2009 2:50 PM - 9 messages
What would happen if I were to add a role of Actice Directory to a server that has been in use for five years? Will all existing user account detail including preferences be lost? What I really want to do is migrate to a new Server 2008 64 bit machine from ...
Score Certificates
NICO Rodriguez Sanchez - 5 Mar 2009 10:31 AM - 3 messages
The question is simple, but I don't find any article that answers it. If I renew the root certificate authority (that ends on December 2009), what will happen with the certificates emited before by this root certificate authority (they end also in December 2009)? Will they continue working ...
Score PATH is lost when loggin into a domain
david carvalho - 5 Mar 2009 10:01 AM - 8 messages
Hi ! I have classroom with windows XP installed, connected to a windows 2003 server domain. Users mostly use a local account on those machines to log in. I have lots of installed software there, so the path is quite large. ...
Score How to allow users to create groups and shares
Ronnie - 5 Mar 2009 9:30 AM - 12 messages
Hi, I started in a new company some time ago, and I'm now looking at the policies etc. During this work I found that 10 users are member of the administrators group in the domain. Now there's no way this is necessary so I ...
Score Renewal root certificate authority, what happens to user certifica
NICO Rodriguez Sanchez - 5 Mar 2009 8:48 AM - 2 messages
8:52:03  Nicolas Pregunta inicial/Comentarios: Renewal root certificate authority, what happens to user certificates created before? 8:52:03  Sistema https://technet.microsoft.com/subscriptions/manage/default.aspx 8:52:09  Sistema ¡Ice Lee se ha unido a esta sesión! ...
Score force all users profiles on the computer
gira - 5 Mar 2009 7:09 AM - 4 messages
We have a 2003 Active Directory domain with XP clients. In one of our locations, we have hundreds of users that roam about who only need read-only (mandatory) profile. We'd like to accomplish something like below. Any users who logon to the computers on the first floor to get this profile ...
Score Server 2008 member server in a 2000 Active DIrectory Domain frequent UNC share disconnects to 2008 s
Little Help Please... - 4 Mar 2009 10:45 PM - 3 messages
Hello, We've set up a Windows 2008 server as a member server in a 2000 domain which is our DMZ.  It is functioning as our web server. The name of the DMZ domain is DMZ answering  to (*.*.com) ...
Score Delegation of Authority User Object "title" not working
Carpadum - 4 Mar 2009 7:53 PM - 6 messages
Using delegation of authority we have setup approx. 14 properties that users who are member of a certain group can manage (through a web application).  One of the properties is "title".  Title is however the only one of these ...
Score Group Policy - W2008 / Vista - IE Security Zones - Sites List
Jefffff - 4 Mar 2009 6:28 PM - 4 messages
Active Directory: Server 2008 native mode Workstations: Windows Vista I have a large number of sites that I need to automatically assign to IE Security Zones (some for the Intranet zone, and some for the Trusted Sites zone).  I am looking for a way to automate this via group policy so that I do ...
Score User must change password next logon
skip - 4 Mar 2009 5:13 PM - 5 messages
Hello I am noticing something very strange with how AD enforces the attribute "user must change password at next logon" We are running in a Windows 2003 native mode domain with a mix of 2008 and 2003 DC. The Domain naming master ...
Score installing printers in clients using AD
argie01 - 4 Mar 2009 5:10 PM - 9 messages
Hello, I'm using a Windows 2003 standart as printer server. I'd like to know how to install automatically printers in clients XP, depending of the physical place on they are, and using AD for it. thank you! -- argie01 ------------------------------------------------------------------------ argie01's Profile: [link] View this thread: [link][link] ...
Score Can AD LDS use accounts defined in the AD DS?
Xiaoping Zhang - 4 Mar 2009 11:28 AM - 3 messages
Hi, I'm now struggling with the AD LDS in Windows Server 2008. I was told "When AD LDS is installed on a domain member, the AD DS users accounts can be directly assigned to ACLs in AD LDS or added to AD LDS groups ...
Score shutdown a remote PC in my domain
Mirs - 4 Mar 2009 8:46 AM - 5 messages
I'm a new administrator with a DC running on Windows2003 advanced server. I need to shutdown a remote PC in my domain(running a Windows 200) using software tools. Is it possible and how? Regards Mirs ...
Score Delegate rights in AD?
chrbar - 4 Mar 2009 8:36 AM - 4 messages
Hello, I've create a Domain for a small school. The Domain is managed by one Windows Server 2003R2 SP2. The workstations run Windows XP Pro SP3. I have to delegate some rights to the teachers: - rights to create/manage Students' accounts in AD, ...
Score Recovering AD
SP_1 - 4 Mar 2009 4:15 AM - 3 messages
Hi My server crashed, and I didn't have a clone of the hard drive.  So, now I'm doing a fresh install of the domain controller.  I do have a full backup of BackupExec tape (including the C drive, System State, and Service State).  I ...
Score LDAP Query for memeber of one group
vop - 3 Mar 2009 11:29 PM - 8 messages
Hello, I'm trying to set a saved query that will return the members of on group. So I've created the follwing query to get all the users which are member of the *group* Internet from the *domain* mydomain.local in the *OU* Bucharest ...
Score FSMO Roles question
Jeff - 3 Mar 2009 9:34 PM - 4 messages
I have a single Windows 2003 domain with three DC's in it. One DC is across a WAN link and serves as the DC for the computers on that subnet. How should I configure FSMO roles to ensure that computers on the subnet with the ...
Score Domain controller trying to communicate with itself via outside ip address
Andrew Knoke - 3 Mar 2009 8:09 PM - 8 messages
I have two windows domain controllers that are behind a firewall. Recently I was looking at the logs of my firewall and noticed that both of my domain controllers are trying to send a message from their inside ip address to their outside ip address on ports 1025 and 135.  This is ...
Score Auto enrollment Domain Certificate not working (error 13)
Cristian - 3 Mar 2009 6:53 PM - 3 messages
Hi we have problem with getting the domain controller to get Certs. The error in the log is Error 13 If we manually try to get a cert from a dc(Certificate Enrollment,Domain Controller) we get the result "The RPC server is unavailable" (and error 13 ...
Score 2008 replication
Cindy B - 3 Mar 2009 5:51 PM - 38 messages
Hi - I have an issue I am stuck on... I'll try to keep the explaintion fairly short. I have 2 new 2008 servers that I have added AD to.  These are being added to a Domain that currently has 2 -2003 DC's.   I did the Adprep for forest, ...
Score Deploying images..RIS?
MLtt - 3 Mar 2009 10:26 AM - 3 messages
Hey guys, I would like to know how I can setup a server to serve as an image providerthat is clients connect to it and they receive an image from itRIS perhaps? Or there is a better 3rd party solution? ...
Score Installing files and updates using GPO
GriTZ-TeCH - 3 Mar 2009 10:25 AM - 9 messages
Hi! I have a network which is composed of around 100 PCs and I am alone in charge of administering it. Its lately becoming a real pain to update programs and install software into each PC, running around with the CD ...
Score AD Replication / Random Errors on a DC?
UselessUser - 3 Mar 2009 9:49 AM - 3 messages
Hi, Let me first explain the setup. 3 Windows 2003 SP2 Servers, 2 in site A and 1 in site B. Yesterday 1 of the servers in Site A started acting incredibly weirdly... here are the symptoms.. Some users were not getting group policy, they would login ok but in their ...
Score Auditing in ADAM 2003
Sudhir - 3 Mar 2009 8:42 AM - 4 messages
1 user object in my ADAM store keeps getting disabled every 48 hrs. I would like to know is there any way to audit objects in ADAM as we can do in active directory, besides the standard auditing via GPO's. ...
Score How to Keep My Job with Microsoft Certification, in This Economic Crisis Moment.
pass4surenl2 - 3 Mar 2009 6:04 AM - 2 messages
Hi friend I passed the exam of 70-086 yesterday and scored 956/1000, which is satisfying, but the most important thing is that I passed the exam. About the preparations: I spent three weeks on preparation, two weeks are used to study the ...
Score AdminCount keeps getting reset
kendaln - 3 Mar 2009 4:19 AM - 9 messages
We are running an Windows 2003 AD with the latest SP and patches.  All our users created prior to Oct of 2006 keep getting their admincount setting reset to 1.  If we clear this value and select the user to inherited, within ...
Score not advertising as time server
DD - 3 Mar 2009 3:49 AM - 10 messages
when i do the dcdiag one one of the DC, a GC , there is warning. serverxxxx is not advertising as time server. ...
Score Event ID 13508
DD - 3 Mar 2009 3:49 AM - 2 messages
I couldn't expand my post on event is 13508, please post your reply again. ...
Score Domain Security policy
DD - 3 Mar 2009 2:04 AM - 9 messages
I made changes on the domain policy , but it does not apply to user pc when they login. eg , i allowed change the system time for a specific user. when i login to the user pc, from the local policy, chnage the system time, only show ...
Score [windows 2008]: c_auditpol.exe_en_français.
pmx - 2 Mar 2009 9:13 PM - 4 messages
J'essaye d'utiliser AUDITPOL.EXE, mais les subcategory avec apostrophe ne fonctionnent pas. Les subcategory sans apostrophe fonctionnent. Ai-je oublié de faire une manip ? Quelqu'un a une idée? Merci d'avance. Pascal ...
Score How to control enable/disable user account rights
RVirene - 2 Mar 2009 8:50 PM - 7 messages
Greetings, I would like to stop Account Operators from being able to enable user accounts residing within a particular OU. I have tried adding the deny permission for the "Write userAccountControl" property for user objects for the Account Operators group. The effective permissions continue to show full ...
Score Delegating permissions
gscanga - 2 Mar 2009 3:21 PM - 6 messages
I'm looking for some simple, effective, and creative ways to allow our helpdesk to reset passwords for different domains (all within same forest). The problem is, the helpdesk logs into one of the child domains every day- then they gets calls to reset passwords for accounts in other domains ...
Score Investigating who enabled GPO block inheritance
daliringmalikot - 2 Mar 2009 1:41 PM - 4 messages
Hello Sir's, i would like to ask how will i know who among the member of admins enabled the block inheritance  of a specific OU? thanks for the reply in advance.. -- daliringmalikot ------------------------------------------------------------------------ daliringmalikot's Profile: [link] View this thread: [link][link] ...
Score best domain conifg for school?
nico - 2 Mar 2009 1:16 PM - 15 messages
Hello, we have now 2 domains @ our school 1. administration    1 terminal 2003server with AD and 15 clients domain1.com 2. studenten           200 clients and 1 win2003server with AD ...
Score New site DC..
southpaw - 2 Mar 2009 1:15 PM - 6 messages
Hi All, I have a site with one DC and unfortunately the server lease is about to expire as a result I need to add a new DC to this site. So far I have built the  new box and ran dcpromo and added the new DC . I have made the new DC a ...
Score Investigating who enabled GPO block inheritance
daliringmalikot - 2 Mar 2009 12:19 PM - 2 messages
Hello Sir's, i would like to ask how will i know who among the member of admins enabled the block inheritance  of a specific OU? thanks for the reply in advance.. -- daliringmalikot ------------------------------------------------------------------------ daliringmalikot's Profile: [link] View this thread: [link][link] ...
Score permiossions question
Kim K - 2 Mar 2009 11:34 AM - 3 messages
I am setting up a 2008 server, and treading slowly doing so.  My users do not use exchange server (yet) but are set up as users in AD.  In their invividual email they are using the outlook backup tool to save their pst files to a ...
Score Group Policy Screensaver in W2003 Servers
Pablo Pizarro - 2 Mar 2009 11:03 AM - 13 messages
Greetings, I created a policy to put the screensaver in black on Windows 2003 servers. The problem is not covered by the policy. Even give an error. On the computer gives the resulting GP refused because it is empty but the ...
Score Server/Domain Permissions
GlenV - 2 Mar 2009 10:09 AM - 9 messages
What permissions/roles are sufficient to enable Windows 2000/2003 Server services? Thanks in advance. ...
Score I want a microsoft certification dumps
bluce888@gmail.com - 1 Mar 2009 11:53 AM - 2 messages
I want a microsoft  certification dumps Who bought the products of this website? [link] ...
Score Domain Controller Security Policy error
Andy - 1 Mar 2009 7:03 AM - 17 messages
Dear All, I have a Win 2003 Std Server (A), as main domain controller and a Win 2003 Std Server (B), as secondary domain controller. I am planning to shut off Server A, and switch it permanently to Server B, i ...
Next » 2 3 4 5 6 7 8 9 10