|
Limit access to Active Directory Users and Computers
I need to limit the access to the Active Directory Users and Computers MMC.
How would I do that. The user is not in there, but Authenicated Users can
read. Do I need to remove Authenicated Users from read ability?...
|
11 |
12/23/2008 1:43:40 PM |
|
|
my documents
hi,
we are working with an windows 2003 active directory.
We had my documents folders pointing to a folder in a server, and we´d like
to move to another.
With some users I have been able to set the new folder, but with other ones
I can´t write it in the destination folder.
Does any body how can I do it?
thank you very much.
...
|
8 |
12/23/2008 1:32:40 PM |
|
|
Active Directory Firewall
Hi,
I have a Windows 2003 server and a domain controller separated by a
firewall.I'm trying to join the windows 2003 server to the domain but I get
the below error message,
"There are no more endpoints available from the endpoint mapper".
Can you help me in fixing this issue.
begin 666 error.JPG
M_]C_X `02D9)1@`!`0$`8 !@``#_X0`617AI9@``24DJ``@```````````#_
MVP!#``@&!@<&!0@'!P&l...
|
6 |
12/23/2008 1:30:10 PM |
|
|
Strange problem with 2003 AD All accounts locked out
I came into work this morning to find all accounts both UK and worldwide all
locked out ( including Domain admins and all service accounts) A couple of
people hadn't logged out from Friday so were able to unlock key accounts.
We are running a single worldwide domain 2003 Version.
I am struggling to find out the cause. Would it be that somebody created a
strange group policy? or is it a...
|
5 |
12/23/2008 1:19:11 PM |
|
|
changing the netlogon folder's permissions
Do you see any issues with changing the share and ntfs permissions on the
netlogon folder (windows\sysvol\sysvol\domainname\scripts)?
I need to let the support people have modify access to the netlogon folder
as our logon scripts are store there.
...
|
4 |
12/23/2008 1:17:29 PM |
|
|
Batch script to move users to different OUs
Hi there,
We're almost ready to re-direct the default computers location and to
set up a GPO startup script to move the machines from the default
location to a OU based on their hardware type. This move is based on a
file which is created when the machine is imaged.
Here is the batch script, please let me know if you see any
problems...
I've replaced all site specifics with placeholders in [...
|
6 |
12/23/2008 1:15:14 PM |
|
|
Find my time server.
Is there a command to find out which one of our servers is running as the
time server. All the DC's are Windows 2003....
|
5 |
12/23/2008 9:06:20 AM |
|
|
AD Intersite replication interval < 15 minutes - Possible?
Hi Folks,
Hoping one of your knowledgeable people can set my mind at rest on this one.
The AD intersite replication interval has a minimum value of 15 minutes.
However I'd like to create a new site that enjoys the benefits of intra-site
like replication (virtually instant) but has its own site affinity from its
partner "hub" site.
Through the wonders of google I came across change n...
|
9 |
12/23/2008 5:37:08 AM |
|
|
GPO to disable XP desktop background option
Suddenly all our user's XP desktop got backupground option greyed out. I
want to check if there is a GPO could cuase that. Where could it be?
Thanks....
|
4 |
12/22/2008 11:03:01 PM |
|
|
add to ads via ip
I have many stand alone pc over my network which I just inherited it has
about 20 to 30 stand alone pc I know the local admin but I donot want to go
to each physical computer and join to the doamin is there a way to do this
via ads and first I want scan ips since I do not know all there names then
join them
please help
...
|
3 |
12/22/2008 9:00:07 PM |
|
|
Copy members to a group
We are running Active Directory on Windows 2003 server. Is there a way to
copy all the users in one group to another existing group or a new group?
This one particular group has more than 50 users and I don't want to
manually type the name of the each user.
Thanks.
...
|
9 |
12/22/2008 8:27:33 PM |
|
|
Problems with adamsync between one AD LDS and two AD DS services
I am trying to use adamsync to sync user data from two separate ad forests
into a single AD LDS instance. I need all the user data to be in the same
partition because I want to add those users to groups within that same
partition.
I first started to experiment with ADAM SP1 on server 2003. I had a single
ADAM instance with a single application partition…dc=myadam,dc=myappdomain. I
h...
|
5 |
12/22/2008 6:51:02 PM |
|
|
Troubleshooting Trusted security zones in internet explorer gpo
Good Day
My enviroment is a windows 2003 with forest and domain functional
level windows 2003 , we have a GPO for applying bussiness favorites and
trusted security zone websites in the following location :
User Configuration > Internet Explorer Maintenance > URLs/Favorites
and Links
User Configuration > Internet Explorer Maintenance > Security/
Security Zones ...
|
2 |
12/22/2008 3:17:01 PM |
|
|
ADAM: Problem installing cert and enabling SSL
Hi, I am resetting up my ADAM and have trouble getting SSL to work on
ADAM. My enterprise CA/Sub CA is in the AD-domain - xxx.com.
My ADAM is in a separate AD-forest, partners.xxx.com. Somehow when
requesting certificate, the certificate always gets install in the
Current User\Certificates store.
I had copied the cert to the Service\adam instance and local computer
cert. I even export th...
|
6 |
12/22/2008 2:59:03 PM |
|
|
Group Policy to disable StandBy Mode in windows XP SP2
Hello everyone,
I need to disable "Standby mode" in windows XP SP2. Is there any policy out
there to disable this function.
Thanks ...
|
7 |
12/22/2008 2:51:49 PM |
|
|
LockoutStatus.exe Tool
I tried using it and it works fine for unlocking accounts, but it will not
reset a domain password.
No matter what you put in as a password it says it doesn't meet complexity
requirements.
If you use the exact same password elsewhere, it works fine.
What is the problem? I did a Google search and I see other people reporting
the same problem, but the threads died with no resolution.
...
|
3 |
12/22/2008 1:45:10 PM |
|
|
FSMO
HI,
Due o some windows 2003 upgrade issue, I demote one AD serverB to member
server, this server previously hold the schema ower and domain role
owner.server A hold another 3 roles. I sieze the schema owner for server A.
before demote server b, i still can see the 5 roles , but after I demote
server A ,
When i typt netdom query fsmo, only see the schema master role been
trasferred t...
|
8 |
12/22/2008 1:19:01 PM |
|
|
NT4 to Active Directory 2003 Qs
Hi,
I have several migration questions for a NT 4 migration:
I plan to migrate to AD 2003 in the following way:
-Add BDC to NT 4 domain, remove from production network and promote as PDC.
-Upgrade PDC to Win2003R2.
-Build a permanent Domain controller on Win2003R2 sync with upgraded
Win2003R2, then remove the upgraded machine.
-If i Have the Win2003R2 on the same network as teh ori...
|
8 |
12/22/2008 1:17:40 PM |
|
|
ADAM Question: How to create a new ADAM role
Hi,
I created a new role in CN=Roles called Writers (CN=Writers, CN=Roles). I
want the role be able to read and write into all items within the ADAM
instance.
I added all possible ACL rights through Dsacls.exe to the new role. Dsacls
reports successful execution. But the role's members cannot do anything on
any objects. The role members should be windows accounts.
Is there any gui...
|
4 |
12/22/2008 3:11:03 AM |
|
|
ADAM Question: Windows users cannot login unless they are member of local admins
Hi,
I made a local machine user part of ADAM's Reader role; however, the user
cannot login through ADSIEdit.
Basically I found that unless a windows user is not part of local admins, it
cannot login into ADAM.
Not sure what I am missing here. Is there any procedure explains how to add
a normal windows user part of ADAM's Reraders Role?
Any help would be appreciated,
Max
...
|
3 |
12/22/2008 2:54:45 AM |
|
|
error in generic host
hi guys
this is the error that occurs on all my server machine (8): Windows 2003 srv
STD SP1 or ENT R2; when it occurs the "server" and "workstation" services
stop itself. Maybe a virus?!? I've tried to run a scan with 2 antivirus but
no viruses detected:
Tipo evento: Errore
Origine evento: Application Error
Categoria evento: (100)
ID evento: 1000
Data: 24/11/2008
Ora: 17.22.4...
|
12 |
12/20/2008 5:50:04 AM |
|
|
Trust
Hello,
We have a external trust 2 way set up on a 2003 AD domain.
Are users need access to a proxy server in the other domain.
We add the users to a global group in AD and it takes serveral hours before
the user gets access. How do we speed up this process ? Is there a setting in
sites and services are domains and trusts? Also the other domain hosts the
Exchange Server and the users st...
|
9 |
12/19/2008 8:15:02 PM |
|
|
Transfer Win2K3 DC to New Hardware.
Hi,
We have a Win2K3 Domain, Single Forest & Domain. We also have secondary DC
for backup in case the primary fails.
The first DC holds all the FSMO roles and is also a DHCP server. It is
installed in a high-end server hardware. We want to transfer this DC to a
low-end server hardware.
We want to have the same DC, as it is, to be available in the other low-end
server hardware. Sam...
|
10 |
12/19/2008 4:44:15 PM |
|
|
Network Load Balance problem
Network Load Balance problem
Hi all
I am trying to use load balancing between two windows 2003 servers and a
windows xp client and all three are running IIS. The following is the
config:
SERVER-A : 192.168.2.1 - leasing DHCP IP from 192.168.2.5-100
SERVER-B : 192.168.2.2
PC-A : 192.168.2.6
I created a cluster with the IP 192.168.3.1 but I am having problems to add
the hosts to ...
|
6 |
12/19/2008 4:43:55 PM |
|
|
AGPM
Had AGPM installed for a a few weeks on 2k8 server & now the service won't
start. I get belowmmsg when trying to view change control folder on server
with agpminstalled locally.Restoring server back to date when it all worked
has not solved the issue.
The following error occurred:
Could not connect to net.tcp://%servername%:4600/AGPM. The connection
attempt lasted for a time span of 00...
|
1 |
12/19/2008 4:41:00 PM |