Windows Server Active Directory

Gurus, Is Lsass.exe the "heart" of the Active Directory engine? ...

Is there any way of changing the ACLs on the builtin objects? (e.g. to grant a domain group the permission to add users to the builtin administrators group on a workstation).  (Other than SubinACL, cause that doesn't work.) ...

Hi I'm upgrading AD 2k to 2k3 soon and we have numerous applications which reply on LDAP and account attribute names. Do any of these change or are they modified somehow when the upgrade takes please?  Anything like this I need ot be aware of? ...

In the past I've always ran the DCPROMO on site to pull down active directory, then fully configure. Has anyone DCPROMO in local site, then changed the IP settings to a remote subnet? I know I'll need to move server in sites and services.  But has anyone ...

I am looking for some pros and cons of using 64 bit DC's for a small to medium sized companies. My understanding is that a 64 bit DC is a good candidate for only Large AD Deployments where the number of objects are very ...

Hi, Problem: I can't associate an external email to user. The given information is that the email (smtp) already exists on the exchange. Source of the problem: The scenario is a parent domain with several child domains and each one with its Exchange server. ...

Hi All, I'm a software developer, and a newbee on system/network things. how can i setup my Active directory running on win2003 server that allows my client computers to be able to connect even if Active directory server is ...

Bump ...

Hi, We have 2 Windows 2000 SP4 DC's in our domain in the same subnet. Both these DC's have dual NIC's, primary NIC for the DC Operations and Secondary NIC for our Backup Infrastaructure (Netbackup). We have initially seen that both Same as Parent and Host Records of the Secondary NIC Card are registered in DNS, however after unchecking the option "Register this connections address in DNS" on the Secondary card TCP/IP Properties the Host Record of the secondary Interface was Removed, however the Same as Parent A Record was still existing. ...

Hello I'm looking for some informations about AD restauration when one DC is crashed. This is my configuration : 2 dc under Win2003 SP2 : dc1 and dc2. - dc1 hold all the FSMO tasks. - dc1 and dc2 are both Global Catalog. ...

Hi all, I just introduce one windows 2008 domain controller to windows 2003 functional forest.  Do I have to migrate to DFSR SYSVOL?  If so, Will it require wINDOWS 2008 FOREST AND DOMAIN FUNCTIONAL LEVEL? Thank you! ...

Hello all I am running Windows 2008 DC, all DC are DNS servers. I need to be able to audit users manually deleteting records out of DNS. What i have done so far is setup auditing on ever 2008 DC by running the auditpol command. Example ...

Can computer's be renamed in bulk? If so can you point me to some resources which can help me develop one or may be leverage an existing one. ...

Hello all Mysteriously a critcal A record was removed or deleted from an AD 2008 dns zone. I do have some auditing running on the DC's but i'm not sure if what i have currently being audited would show me who or what deleted the record. ...

We're working with another vendor who provides some hosted services. However they'll only work with ldap and ldaps (which is fine). They're running on server 2003 as well. In order for them to perform ldaps queries, against our domain(we have our ...

Where i can find some aplications to use in a "demo" for AD FS and AD LDS technologies? I would like to demonstrate LDS and FS and i need an application to show how an application can use that technologies ...

Hi, I'm getting complaints that LDAP queries are slow, how can I test this?  I was wondered if there was a tool to help me. ...

I have a single forest single domain Windows Server 2003 EE Active Directory environment. At my main site I have 3 DC's. One of the three is stuck in loop where it constantly reboots when it either reaches the splash screen, after ...

I've got a Windows 2008 box that was my only DC in my test network that is on some rather aged hardware.  I've built a new box to replace the old DC with, installed Server 2008 on it, added it to the domain, ran dcpromo, kicked it ...

Have 2 DC's W2K3, DC1 with all FSMOS's. DC2 with no roles, booth are GC's. Users can't logon when DC1 is down. Is this right behavior? Jordan ...

Hi all, I need to let computers to automatically request and instal computer certificates from CS server, should I configure the user or computer configuration of policy? Thank you! ...

Hello all I have enabled systemstate backups of my DC by using the wbadmin tool "wbadmin enable backup -addtarget:{00000081-0000-0000-0000-000000000000} -allcritical -schedule:06:00" from looking at the event logs for these backups the job runs fine without ...

I was able to deploy Root CA in the lab running on a Member Server Windows 2003 Enterprise.  All went cool.  This was one one forest with one domain Now its time to deploy in the production.  ...

I'm working in a project to merge operations of two domains (companies merging) site 1 has Domain A (DC with all operation master) (win 2003 SP1  x32) site 2 has domain B (DC with all operation master + a DC from domain A) (win ...

Hello We currently have a single 2003 active directory forest with one root empty domain and 2 child domains. We are going to create an offline standalone root CA (on a workgroup server) then one issuing Enterprise CA (on a DC). ...

I am managing a network with 2 gateways and a proxy server.  Mostly using static IP addresses Gateway 1 is the main gateway and has port 80 blocked except for the proxy server. Gateway 2 has port 80 open. ...

We are facing a problem in a Domain Controller that the File Replication service and KDC service is not getting started and it is giving error " Could not start File Replication Service" Due to this we are not able to demote DC, Force demote DC. The last option ...

I need to set same expiration date to all passwords for all users in my domain ... Could anyone help me ?! I am able to find how to ... Thanks in advance. ...

Hi, I have just type nslookup 'AD domain name' and it returned a list of DC's but also a strange IP of a subnet. For example: Name:    gb.vo.local Addresses:  192.168.21.4 ...

Hi, after have made transition of AD from old hardware to new hardware, two MSDTC warnings appear in the event log with the following text: FIRST WARNING ************** Type : warning Source: MSDTC Category:SVC Event ID: 53258 MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC ...

Is there a tool available to output a list of group members.   I would like to have something that could be run by a few users without programming experience. thanks Carl ...

Hi, Recently, I have make transition of AD from _OLD_ to _NEW_ server. All fsmo roles are now on _NEW_ server. _OLD_ server is still GC (together with _NEW_ server). If I query fsmo roles, I get the following: netdom query /domain:DOMAIN_NAME fsmo ...

Hi friends, I have 4 new HP server with Windows Server 2008 Std for distincts customer instaled and promoted for more than 1 year. but two of then start getting AD down. when i restart the server the things are ok. last weak i need to make ...

Hi, Here are a few things I am struggling to know 1] How can I know thru Command line which DC's are GCS in my AD Forest\Domain 2] How can I list contents those are stored\cached by the GCS? ...

*Running WSUS 3.1 on a standalone Win 2k3 server. Issue - The imaged clients (macbooks) are all showing up in the admin console. Everything seems to be working fine except that that all the computers in the wsus group shows the "Installed/Not Applicable Percentage" as always 97% or 99% . I have tried approving, declining & many other things to the updates in console but this percentage just stays the same. Maybe I am doing something wrong here or is this how the percentage would stays all the time? Any help is appreciated. Thanks in advance. -- jasonthat ------------------------------------------------------------------------ jasonthat's Profile: [link] View this thread: [link][link] ...

How can I get a copy of acctinfo2.dll?  This is the newer version of the dll that adds the "Additional Account Info" tab to Active Directory Users and Computers.  All I can find on Microsoft's site is the original version that ...