Windows Server Active Directory

Creating New Infrastructure

khan - 27 Mar 2010 2:48 PM - 5 messages

Respected EveryOne In my office we have a Primary Server (192.168.0.52) as a Active Directory server.A secondary server for stand by(192.168.0.198).We have internal Exchange mail server (192.168.0.53).And a ISA 2004 ...

Schema User attribute question

voodooking - 26 Mar 2010 10:24 PM - 3 messages

i have a business requirement to accomplish the following. parent domain A child domain b create a mandatoru user attribute that would be applied to all users A & B but is only editable by Domain a domain admins - no domain b users ...

Starter GPOs

Venkat - 26 Mar 2010 6:42 PM - 5 messages

Windows Server 2008 R2 documentations states that there are enhancements to the Group Policy settings as compared to Windows Server 2008, however i fail to see the differences in Group Olicy preferences in both 2008 and r2. Can you assit here ...

Authentication Mechanism Assurance

Venkat - 26 Mar 2010 11:36 AM - 5 messages

With Auth Mech Assurance enabled, what if a users Certificate Linked Group is provided access to a resource and the user is also a member of a normal domain group which is restricted access to the same resource. Let me give an ...

ADAC

Venkat - 26 Mar 2010 10:22 AM - 5 messages

Can Active Directory Adminsitrative Center be extended, since its completely based on powershell? For e.g. can i include AD Sites and Subnets Management in ADAC? ...

Sites and Services Questions

tkutil - 25 Mar 2010 8:11 PM - 4 messages

Bringing up AD in our remote plants and I want to make sure I understand the Subnet portion. Is it as simple as entering the IP and Subnet mask we user per location? Once I create sites and associate subnets to the site do I need to also ...

Remove child domain after child domain DC has failed

Jefffff - 25 Mar 2010 6:22 PM - 2 messages

Active Directory: Domain Functional Level: 2008 Forest Functional Level: 2003 I used to have a dev domain, which was a child domain of our production domain (dev.domain_name.local). This dev domain had a single domain controller and that domain controller has died. Now I would like to remove ...

jpegphoto not loading in Windows 7

Alex Pearce - 25 Mar 2010 4:46 PM - 2 messages

I have set up the AD Attribute jpegphoto to look at an image for a user. When i log onto my windows 7 device the image is not loading. I'm using Windows Server 2008 R2. The user has permission to the photo which is a http ...

Forest trust

Dylan Armstrong - 25 Mar 2010 10:25 AM - 2 messages

Good morning. We have created a trust between two domains in different forests, enabled sid history and successfully migrated test users. It has now come to light that we need to create a forest trust because we have an app ...

Change password of local Administrator on all workstations in doma

Marcin - 25 Mar 2010 9:50 AM - 9 messages

Hi, How to do this ? I have two propositions: 1) through GPO ( startup user or computer script ) 2) through script run from server by administrator Is any other possibility to do this ? Best regards, Marcin ...

AD ACL Cache

Miadf - 25 Mar 2010 1:53 AM - 2 messages

This is for SQL 2005 RS and win 2003 AD I created a number of roles in Active Directory to limit access to reports in the Management Portal for Job X. Initially, I created a role for each report and then added groups to those roles. After getting ...

Interforest migration - minimal permisions formigration account

Marcin - 25 Mar 2010 1:28 AM - 24 messages

Hi, I want to know what exactly and minimal permissions migration account needs to migrate users, service account workstation and servers ( known as resource ) with two way trust ( no filtering, source and target is 2003 Active Directory Domain) I ask because there are differences in sources ( ADMT GUIDE 3.0, ADMT Help, ...

file replication service log

Miadf - 24 Mar 2010 11:13 PM - 2 messages

On one of our DCs ( 2003 sp2 ) I havent seen any new entries in the file replication sevice log for several months. All replication appears to be working, just wondering if there is something possibly wrong. ...

sites and services servers

MRNews - 24 Mar 2010 11:06 PM - 6 messages

Hi I recently went into our AD site and services and noticed under servers there are about 4 servers that havent been online for months. Is it safe to just remove/delete them here? Also our licensing server is listing a dead ...

Active Directory and DFS

RC - 24 Mar 2010 7:52 PM - 3 messages

General question that I cant seems to find an answer to. (without me testing it out to find the answer) It it possible to setup dfs/dfsr on a 2008 server that is running in a 2003r2 domain/forest function level? ...

systems can not find local DC

Help me - 24 Mar 2010 6:13 PM - 6 messages

Help I have 2 locations... 192.168.1.x and 192.168.254.x 2 servers - server1 192.168.1.1) and server2 (192.168.254.253) which are dcs They are not on the same network I connect via VPN to sync AD and if I leave vpn up all works correctly. ...

Re: Access Denied error while edit some of the GPOs in Windows 200

Laljeev M - 24 Mar 2010 6:02 PM - 4 messages

Hi All We removed the DC from the 2nd site and also removed all the occurences of the removed DC from AD, DNS. Even before this we noticed one thing, immediately after restarting the DC we can able to edit all GPOs. Same is ...

AD Conversion Tools

tkutil - 24 Mar 2010 1:52 PM - 3 messages

We have about 140 remote users that we need to get added to AD. They all work out of their homes and have Cisco VPN access. Are there any tools from Microsoft or 3rd party that might make it easier to get these users on AD? I ...

LDAP Issue - LDAP BIND against Windows 2008 DC does not work

QuesionVB - 24 Mar 2010 9:03 AM - 2 messages

Hello, We work with an Authentication Service which does LDAP Connections to 3 different Domains. The Server with the Authentication Service is in a separate Domain and Network zone. The Server is running Windows Server 2003 R2. Tha Authentication Service retrieves information from the 3 domains: ...

Windows 2008 and Prevent IIS Installation GPO setting

GregInMI - 23 Mar 2010 3:05 PM - 3 messages

I need 2 things. First of all I'd like to confirm the Prevent IIS Installation GPO (Computer Configuration\Administrative Templates\Windows Components \Internet Information Services) setting doesn't work on Windows Server 2008. I've got 2 servers receiving the same GPO configuration and the ...

Re: domain server releated issue

Alexyy - 23 Mar 2010 7:03 AM - 2 messages

Dear Paul, I have tried the said option, my both dc and adc is having dns installed and configured (ad integrated)when i unplug the nic cable from dc, still users are not able to access the filesever.i have tested the nslookup from client ...

OU named users

MRNews - 22 Mar 2010 10:23 PM - 5 messages

Any problem creating an OU named users? (nested a few levels down in another OU) reserved name ? thanks carl ...

Statistics on the popularity of Workgroups vs. Active Directory

GLT101 - 22 Mar 2010 4:56 PM - 12 messages

Hi All, I am looking for statistics on the use of Workgroups vs. Active Directory. The licensing model for our product depends upon whether the client is a member of an Active Directory Domain. Supporting Workgroups may be problematic for us in the ...

GPO cause slow logon on desktop redirect

Andrea - 22 Mar 2010 4:47 PM - 2 messages

Hi guys, I have create new policy for redirect users folder on network shared, after this when user logon the loading desktop is very slow (30 seconds about only for desktop redirect). I've activate debug on GPO and this is log result in the last rows: ...

Remote Control from ADUC

tkutil - 22 Mar 2010 3:43 PM - 3 messages

What is the tool/file needed to be able to right click on a computer object and Remote Control that object? I lost this capability when I rebuilt my computer. ...

Inheritance of permissions on a user account keeps changing

Fritz - 22 Mar 2010 3:33 PM - 3 messages

When I select a user in ADUC and go to their Security tab/Advanced and check the "Inherit the parrent..." checkbox, it stays checked for a little while but then it becomes unchecked. This happens to all the users that I've ...

Problem setting up Windows Storage Server 2008 as a domain control

Panagiotis - 22 Mar 2010 2:02 PM - 2 messages

Description: We have a domain with a Windows Server 2003 machine acting as the PDC (it is also the onyl domain controller). We bought a new machine (a Dell Powervault NX-3000) which has Windows Storage Server 2008 installed. We ...

Server Performance Advisor

Kevin Gallagher - 22 Mar 2010 11:27 AM - 8 messages

I am using Server Perfromance Advisor on my Windows 2003 Domain Controllers and noticed that two of the four DC's have considerably higher DS Search Sub-operations/sec. Visibly it is quite significant but I am not sure where ...

Permissions and Roles question

MRNews - 21 Mar 2010 6:39 PM - 4 messages

This may be a Reporting services question, sorry if wrong NG. I created a number of roles in Active Directory to limit access to reports in the Management Portal for Job X. Initially, I created a role for each report and then added groups to those roles. After getting ...