Windows Server Active Directory

GAL sync issue

ed - 17 Jun 2010 2:18 PM - 3 messages

Hi all, two exchange 2003 organizations by following this link [link] About the GALsync and these are exact steps I did as the link: Forest A Forest B ...

DCDIAG Error inconsistency in the DS.

ADSadmins - 17 Jun 2010 9:46 AM - 2 messages

I have an AD environment in forest and child domains domains, all running Windows 2003 R2. Lately when I run DCDIAG command in one of the DC in the forest level I've got this very strange error: c:\>dcdiag ...

OU level restrictions

sureshpalani - 17 Jun 2010 7:10 AM - 2 messages

Hi There, Is there a way I can restrict user access to the OU they are in and restrict access to other OU's. When we create a user, they would be part of Domain users, with read-only access on all domain objects. I want to override this and give them read permission on the OU they are part of. ...

Active Directory Communication Directions

BrantRaven - 17 Jun 2010 1:22 AM - 2 messages

Hello Everyone, I am trying to discover somthing about desktop client communications with Active Directory. One can imagine that an AD client would initiate communications to an AD server...for authentication say....but once authenticated...does the client maintain a session with the server? Also...does (or can) the server ever ...

Active Directory Federation Services 2.0 RTW

Patrick Markiewicz - 16 Jun 2010 8:52 PM - 2 messages

Hi, Is ADFS 2.0 RTW the official release of ADFS? Or is there another release I should be relating for to use in a production environment? Also, does ADFS support FIPS-compliant algorithms? Thanks. ...

2003 Server: Changing from 2000 mixed mode to 2003 mode

hretif - 16 Jun 2010 7:04 PM - 6 messages

Hello, In the same domain, 2 DCs with replication. Both are currently in 2000 mixed mode and I have to raise them to 2003 mode. 1/ is it enough that I do it only on one of them and through replication the ...

Adprep

paperhat - 16 Jun 2010 4:15 PM - 6 messages

Hi, We are currenlty looking to introduce server 2008 R2 x64 domain controllers into an existing 2003 forest. All 2003 dcs are 32 bit. We have already upgraded the schema to introduce 2008 Read Only DCs so my question is: ...

Raise domain and forest functional levels to 2008 native

sawyer - 16 Jun 2010 3:53 PM - 2 messages

Hello Currently all of our DC's (5 of them) are running Windows 2008. The DC's have been running windows 2008 for a year now. The domain and forest functional levels however are still at 2003 native. I would like to raise ...

Active Directory 2003 Account Disable Bypass trick

amertayeh - 16 Jun 2010 11:08 AM - 3 messages

Dear All, I have Windows server 2003, DC installed on it. When I disable an account in active directory users and computers, the user cant log, but then if he removes LAN cable or turns the WLAN switch off, he will be able to log in normally. ...

move dhcp service from a DC to a member server

tree leafs - 15 Jun 2010 11:12 PM - 2 messages

Our DHCP service is running on a DC. We are planning to move it to a member server dedicated as DHCP server. Just wondering whether there are any issues to be aware, especially any issues with the DNS dynamic updates. ...

Print Server Cname

tkutil - 15 Jun 2010 5:25 PM - 2 messages

Is it possible to use a DNS alias for a windows print server? I'm creating a simple redundant pair of print servers and want to create an alias for the server so if the primary server should go down I can just switch the DNS to ...

Is this possible?

ed - 15 Jun 2010 1:46 PM - 7 messages

Hi all, We built a forest trust (two way)with three companies. Is there a way to export their users to our AD and shown as contacts? Is there a way to set default login domain for each company as each company ...

"encountered an error while parsing" in gpmc

inenewbl - 15 Jun 2010 7:58 AM - 2 messages

Hi all, I am running gpmc from win7 to manage my win2003 AD. However under administrative templates in my gpo i saw the errors eg "encountered an error while parsing. incorrect document syntax. File c:\windows\policydefinitions\printing.admx". How can i solve this? Pls advise ...

Proxy Settings for Desktops versus Laptops

Bikini Browser - 15 Jun 2010 2:54 AM - 3 messages

Hello Folks: We just installed a new proxy/firewall server and I have run into a problem... We are going to use a PROXY.PAC file to configure the computers on the LAN to use our proxy server. We want to prevent the users from changing the ...

Disable changing proxy settings

Bikini Browser - 15 Jun 2010 12:30 AM - 2 messages

Hello Everyone... I am a complete novice but I have to learn how do to this so any help would be apprecaited if it is a step by step of how to do it... We are using a windows 2003 Standard Server with active directory. I don't know anything ...

Using external email address for AD user

ELCracko - 14 Jun 2010 8:55 PM - 7 messages

We have certain users that we would like to use an external email address for and give access to resources in the domain. The only solution I have found so far is to create an account they will use for access and then to add a ...

Ports

Gary - 14 Jun 2010 5:56 PM - 3 messages

I am planning to use ADMT 3.1 for migration. I want to know what are the different firewall ports that are required to open between: ADMT and Source Domain Controller ADMT and Target Domain Controller ADMT and SQL Server ...

DNS Replacement in migration to 2008R2

Brett - 14 Jun 2010 5:22 PM - 4 messages

I have two DCs as the forest root with one the primary DNS for the domain and the other the secondary DNS. All the servers and DCs point to these two for primary and secondary DNS entries. I want to replace ...

DCDiag test questions

Grunt - 14 Jun 2010 5:00 PM - 6 messages

I'm planning to migrate my 2003R2 Forest to 2008R2 soon and based on advice posted here I'm starting that process. I'm documenting what I need to do for reference and future. 1. Step 1 is to test the forest and domains so I ran dcdiag using ...

Windows 7 GPO Settings incomplete and broken?!

Ben Humpert - 14 Jun 2010 3:56 PM - 4 messages

Hi, we finally finished our "upgrade" from Srv2k3 ADM template based AD to Srv2008R2 ADMX template based AD (with schema upgrade). We noticed that many settings are not present in the new templates anymore, eg. Computer settings\Administrative templates\Windows components\Windows Movie Maker ...

ADMT 3.1

Gary - 14 Jun 2010 1:39 PM - 2 messages

Can ADMT 3.1 be used to migrated users/groups.comps from NT 4.0 domain to Windows 2003/2008 domain? ...

Terminal Services 2000

storlogic - 14 Jun 2010 11:55 AM - 2 messages

I'm looking for the following file: TermSrvr.mst It says to download it from [link] but the site doesn't exist. Anyone able to send me this file or point me in the right direction? ...

Remove builtin\administrator domain account from "domain admins gr

Chris - 14 Jun 2010 10:45 AM - 10 messages

Hi, I want to control where "domain admins" can log on. I will deny this group to logon locally on the domain except from a set of well controlled workstations. Since builtin\administrator is a member of "domain admins", it ...

mandatory profile netlogon

WMB - 13 Jun 2010 9:10 PM - 2 messages

Dear All We use one mandatory profile for all of our students. We also have 2 DC running windows 2003 r2. I was looking to place and share this mandatory profile within the netlogon share so that the path in the users profiles ...

Adding a first 2008 R2 64 bit DC into 2003 R2 Domain

Hubert Rétif - 13 Jun 2010 8:52 PM - 11 messages

Hello, A very similar question has been recently posted, but my situation is a bit different. I have only one domain with two 2003 R2 DC (replication). We want to get better hardware and centralize all (Virtualisation + Remote Desktop). All ...