Defragmenting Client PCs Windows 2003 server

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - SYSVOL not replicating Hi there, I have a problem with my domain controllers. I have two, dep-s-dc(Win 2k3 Ent) and dep-s-004(Win 2k8 Ent) dep-s-dc was our main server when the company started out and as such hosted nearly everything, DNS, DHCP, Exchange, AD and DC Over time we have got bigger and bought more servers. I installed dep-s-004 as a domain secondary controller. recently we have had problems with dep-s-dc and it was looking bad so I moved the FSMO roles to dep-s-004 making this the primary. All roles were transfered without problems. I have now noticed however that new client when logging on take an age to populate the domain list. Also group policy has stopped working. When you click on a policy you get the following message "The network name cannot be found". You get this message on dep-s-dc and dep-s-004. There are also errors relating to NTfrs in the event logs on both machines. I have done a lot of research and can't seem to pinpoint the error. Replication does seem to be working. If I create an account on dep-s-004 and check dep-s-dc it appears. ping and nslookup are ok between the two servers. It just seems to be the sysvol and netlogon that are not being replicated. they are on dep-s-dc but not on dep-s-004 How can I solve this? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130690
  - 2
    - AD Home Folder We were having problems with performance for some Citrix users. After removing the home folder settings on their AD account their performance improved drastically. Now I realize this may be a very basic question but I really can't seem to find anything about this. What exactly does the home folder setting do, and why would it impact user performance? Thanks in advance! Tag: Defragmenting Client PCs Windows 2003 server Tag: 130674
  - 3
    - Password Length I have changed the password length from Min 6 characters to 8 Characters.but somehow it id not working can set password for 6 characters..Can someone guide what needds to be checked and where to enforce this policy... Tag: Defragmenting Client PCs Windows 2003 server Tag: 130663
  - 4
    - Domain Controller Reinstall I have a domain controller which has Enterprise edition win2k3 installed..need to reinstall it wih win2k3 r2.It has Wins DHCP,DNS installed.Can anyone suggest a method wherin i can reinstall without impacting the enviroment or users..Step by step method is what is required .Help will be apprceiated in this... Tag: Defragmenting Client PCs Windows 2003 server Tag: 130662
  - 5
    - Property sheet not visible when using Find in ADUC Hello, I have made a property sheet extensions for ADUC, which shows some data from MIIS. Everything is fine and my property sheets are visible for Users and Groups when using browser in ADUC, but when I use Find from ADUC context menu and search for the same Users or Groups to see theirs properties, my property sheet is missing. This is how it looks using ADUC browser (MIIS tab is visible) http://img179.imageshack.us/img179/1627/usingbrowseree0.png This is how it looks using ADUC Find (MIIS tab is not visible) http://img340.imageshack.us/img340/3456/usingfindzu3.png Do you have any ideas? Regards Tag: Defragmenting Client PCs Windows 2003 server Tag: 130654
  - 6
    - Slow authetication and GPO processing for remote site that without DC Need some advise, we are running single forest single domain on our Active Directory. Recently we notice our workstation login take very long time in our site that do not have Domain controller. From our investigation, the workstation seems to randomly select any available DC for their login process including the GPO, these has become a problem when the workstation try to connect to a DC that is very far away. I am trying to look for solution on the net on how do I force particular site to use a dedicated remote DC, no luck in getting a solution, appreciate some one could shed some light here ... rgds, Tag: Defragmenting Client PCs Windows 2003 server Tag: 130648
  - 7
    - Change a field-label in the GUI "Active Directory users and comput I would like to change a field-label in the GUI "Active Directory users and computers". For example: Changing the label "Pager:" to "Short-dial No.:". In Exchange you can modify the adrress templates in the system manager. Is there something similar in AD? Thank you in advance for any help, Simmix -- stephan.simmen -at- martiag.ch Berne, Switzerland Tag: Defragmenting Client PCs Windows 2003 server Tag: 130646
  - 8
    - Active Directory Domain Services has detected and deleted some possibly corrupted indices as part of initialization Hello, I'm playing around with my first 2008 server setup. So far the only role I've added was AD. It is in a new domain (not a production environment) and is the sole server. It automatically installs DNS during the process. After the AD wizard ran it rebooted and I see this error along with a few others in the server manager under the ad role. The name of my local area domain is abc.lan Log Name: Directory Service Source: Microsoft-Windows-ActiveDirectory_DomainService Date: 6/12/2008 4:00:54 PM Event ID: 1463 Task Category: Internal Configuration Level: Warning Keywords: Classic User: ANONYMOUS LOGON Computer: ABC-6700.abc.lan Description: Active Directory Domain Services has detected and deleted some possibly corrupted indices as part of initialization. These deleted indices will be rebuilt. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" /> <EventID Qualifiers="32768">1463</EventID> <Version>0</Version> <Level>3</Level> <Task>7</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2008-06-12T23:00:54.603Z" /> <EventRecordID>48</EventRecordID> <Correlation /> <Execution ProcessID="696" ThreadID="6488" /> <Channel>Directory Service</Channel> <Computer>ABC-6700.abc.lan</Computer> <Security UserID="S-1-5-7" /> </System> <EventData> </EventData> </Event> Tag: Defragmenting Client PCs Windows 2003 server Tag: 130641
  - 9
    - The local domain controller could not connect with - 2008 Hello, I'm playing around with my first 2008 server setup. So far the only role I've added was AD. It is in a new domain (not a production environment) and is the sole server. It automatically installs DNS during the process. After the AD wizard ran it rebooted and I see this error along with a few others in the server manager under the ad role. The name of my local area domain is abc.lan The local domain controller could not connect with the following domain controller hosting the following directory partition to resolve distinguished names. Domain controller: Directory partition: abc.lan Additional Data Error value: 1355 The specified domain either does not exist or could not be contacted. Internal ID: 3200d50 Tag: Defragmenting Client PCs Windows 2003 server Tag: 130640
  - 10
    - how to revoke local administrators authority through AD Hi: I want to revoke local administrators authority from domain users. How can I do through AD group policy? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130639
  - 11
    - AD users export I need to export the usernames of an AD server to put at a spreadsheet. IÂ´m having some dificulties at using the comand ldifde. How can I use this comand to export the whole list os user and groups to a file? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130624
  - 12
    - 2003 Active Directory Services and 2008 Terminal Services I currently have a Server 2003 Active Directory domain environment. I would like to introduce Terminal Server 2008 into that environment. Are their any incompatibility issues I should be concenred about between TS2008 and AD2003? Do I have to upgrade my 2003 AD domain controllers in order to run TS2008? Any information you can provide is greatly appreciated. -- Paul D. Oneill, CISSP, MCSA Tag: Defragmenting Client PCs Windows 2003 server Tag: 130612
  - 13
    - No external time source for Windows Time Service We're a multi-domain environment with one root domain and several child domains. The root domain's DC that's also a PDCE operations master is the authoritative time server for the whole forest right? -What happens if you don't set up the external time source on the root domain's DC that's also a PDCE master? Does it just rely on itself then for the time or does it use MS's NTP by defalut? -If there are 2 DCs in the root domain, is it recommended to set up the external time source on both of them even though one of them is not a PDCE master in case the one with PDCE master goes down and seize the PDCE master role when this happens? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130600
  - 14
    - Need script to list various groups and there users Hello, I was hoping to get a script that can scan AD for any groups that have "admin" the name, but then I also need it to list the members of the groups it finds. I was hoping t modify this script to do what I want: On Error Resume Next Const ADS_SCOPE_SUBTREE = 2 Set objConnection = CreateObject("ADODB.Connection") Set objCommand = CreateObject("ADODB.Command") objConnection.Provider = "ADsDSOObject" objConnection.Open "Active Directory Provider" Set objCommand.ActiveConnection = objConnection objCommand.Properties("Page Size") = 1000 objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE objCommand.CommandText = _ "SELECT Name FROM 'LDAP://DC=fabrikam,DC=com' WHERE objectCategory='group' " & _ "AND Name='*admin*'" Set objRecordSet = objCommand.Execute objRecordSet.MoveFirst Do Until objRecordSet.EOF Wscript.Echo objRecordSet.Fields("Name").Value objRecordSet.MoveNext Loop Would it be very easy to add the user membership lookup to this script? If so, how and if not, then what is a good script that will? Thanks! Tag: Defragmenting Client PCs Windows 2003 server Tag: 130596
  - 15
    - EFS MS¹¤³ÌÊ¦£¬ÄúºÃ£¡ ÎÒÔÚÎ¢ÈíÍøÕ¾ÉÏ¿´µ½¹ØÓÚEFSµÄÃèÊö£ºµ±Ò»¸ö±»EFS¼ÓÃÜ¹ýµÄÎÄµµ£¬±»´«Êäµ½±¾µØ»òÕßÁíÒ»Ì¨Ã»ÓÐÊ¹ÓÃEFSµÄ·þÎñÆ÷ÉÏÊ±£¬Õâ¸öÎÄµµ½«±»×Ô¶¯½âÃÜ¡£ ÕâÊÇ²»ÊÇ¾ÍÊÇËµ£¬Èç¹ûÕâ¸öÎÄµµÀë¿ªÁËÔÀ´¼ÓÃÜµÄÎÄ¼þ¼Ðºó£¬¾Í²»ÔÙ±»±£»¤£¿ÄÇEFSÏµÍ³Ö÷ÒªÊÇÓÃÀ´×öÊ²Ã´µÄÄØ£¿ Tag: Defragmenting Client PCs Windows 2003 server Tag: 130591
  - 16
    - how to create a new AD tree or forest? win2k3 At home here I have a little network consisting of a winXPpro machine and another machine running win2k3 (evaluation). I've configured the win2k3 machine to be the domain controller in my AD. I'm doing this for the purpose of learning AD. Now I want to create another tree or another forest in my AD... when I run dcpromo on the win2k3 machine, the only option I got is to remove the AD... And all the info I've come a cross on the Internet says I should use dcpromo to create a new tree or forest.... I'm a bit confused here.... any suggestions? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130582
  - 17
    - TO KNOW LATEST UPDATES OF MICROSOFT CLICK HERE TO DOWNLOADS LATEST UPDATES HERE http://polticsinfs.blogspot.com/ Tag: Defragmenting Client PCs Windows 2003 server Tag: 130576
  - 18
    - Prevent users from joining Computers to domain? I am planning to rework how our users join PC's to our domain for security/management purposes. I know that by default users can join up to 10 workstations to the domain without any special permissions required. I am guessing that as a first step I would need to use ADSI Edit on the PDC and change the "ms-DS-MachineAccountQuota" value to "0". This would then allow only the Account Operators group (and higher) to join PC's to the domain. Ultimately, we would like the process to be as follows: 1 - User requests to helpdesk to join a PC to the domain (user cannot join the PC to the domain on their own). 2 - Helpdesk creates the Computer object with specified name in AD and assigns domain join permissions to the specific user. ("the following user or group can join this computer to a domain"). 3 - User then joins the Computer with the same name to the domain. I would appreciate any feedback and/or sound advice on this. Thanks very much. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130568
  - 19
    - specifying DC to use during a promo? I have an issue with a remote site where it complains about a schema update needed.. i'd like to force this machine when it promo's to use my FSMO dc as its original replication point. I understand theres an /adv switch with DCPROMO.. I ran it in my test environment but I didn't see a place where I could specify which DC to replicate from. I saw that I could pick either replication from a DC or from a file backup.. so I chose DC.. but was never able to specify.. anyone have any idea? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130563
  - 20
    - GUI folders missing in \\sysvol\domain\policies Long short story. One domain - 1 DC 1 month ago created the 2nd DC -> 1 domain 2 DCs One of the DC become hw unstable (the 1st dc in the domain - old machine) and I had to demote it using /forcedemote switch. Cleaned up AD using ntdsutil. status: 1 domain - 1 DC 1 week ago promoted another DC -> 1 domain - 2 DCs Immediately after I found out that sysvol folder was missing. I've recreated the sysvol folder and subfolders using the D2 and D4 reg values. Yesterday after I checked the sysvol folder and I noticed that under \\sysvol\domain\policies there were no folders (GUI with brackets). I checked the advanced tab in AD\users and computers\system\default domain policy also nothing there but tones of event id :1030 source:usernv. "Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this." GPMC cannot find path in group policy objects for DC policy, domain policy and sp users logon deny. At this point I do have only a copy of the sysvol folder that was taken 1 month ago from the 1st DC that has been forcedemoted. The GUI folders all three of them are there. They seem to be intact. 1. Is there any possibility to restore those policies having those folders from backup? 2. If not what would be the consequences if I use dcgpofix? Thank you very much in advance. Andrei Tag: Defragmenting Client PCs Windows 2003 server Tag: 130560
  - 21
    - Mass update of sapUsername attribute Hi there, I have a list of users (not all) in one of my OUs that I need to updat by adding the attribute sapUsername with the value specific for them. e.g. sAMAccountName is Test.User1 then sapUsername is TUSER1 sAMAccountName is Test.User2 then sapUsername is TUSER2 However, i have over 300 users to update and doing this manually is no an ideal situation! Is their any way i can mass upload these? Thanks, Boul -- sin.e.boul ----------------------------------------------------------------------- sin.e.bouli's Profile: http://forums.techarena.in/member.php?userid=5142 View this thread: http://forums.techarena.in/showthread.php?t=98465 http://forums.techarena.i Tag: Defragmenting Client PCs Windows 2003 server Tag: 130559
  - 22
    - clean up old DHCP server entries we replaced some old DHCP servers. But when trying to add new DHCP servers into AD console we still can see those old DHCP server names onthe "authorized DHCP server" list. How to remove them from AD? Also, is there a way to remove it automatically when shutdown a DHCP server? Thanks. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130550
  - 23
    - GPO to Disable a Computer at a Future Date Is there any way via a GPO to disable a computer on a specified future date? We have students that are issued laptops and if they do not return the laptop we are looking for a way to disable the machine on a given future date. Any thoughts/help would be much appreciated. Thanks. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130544
  - 24
    - Forcing replication after tombstone cleanup Hi all, Does anyone have any experience of getting site replication working again once two DC's have exceeded their tombstone life? I have inherited a network where the replication was a real mess and several servers were not replicating properly. I have set this all up now and got everything working except for one site as it had been disconnected so long it had exceeded it's tombstone life and so would not replicate. All servers are running 2003. I have run repadmin /removelingeringobjects to sync the two AD's again and have got replication working one way, ie, from HQ to Site1 however I can't get it to replicate the other way. I get; "The following error occurred during the attempt to synchronize naming content siteaddress.co.uk from domain controller SITE1 to domain controller HQ: The naming context is in the process of being removed or is not replicated from the specified server." Also if I run repadmin /showreps I get: "Source: Site\Server ******* 1 CONSECUTIVE FAILURES since 2008-06-11 15:18:02 Last error: 8614 (0x21a6): Can't retrieve message string 8614 (0x21a6), error 1815." Error 8614 appears to be linked to the tombstone life so even though I have run repadmin /removelingeringobjects it still will not play ball. I tried the registry key HKLM\System\CurrentControlSet\NTDS\Parameters\Allow Replication With Divergent and Corrupt Partner, but that didn't allow it to work either. Anyone got any idea how I force replication in this case? I am happy there are no lingering objects remaining so I don't believe there should be an issue with these replicating again if only I could get it to happen. Many thanks Dave Tag: Defragmenting Client PCs Windows 2003 server Tag: 130542
  - 25
    - link down to trusted DC causes netlogon failure? scenario: two domains, production and corporate, linked via a tree-root trust. Production has two sites, one DC each, linked via a VPN. Production and corporate also linked via VPN. The tree-root trust allows the convenience of managing production servers from the corporate network without entering a separate set of credentials, but none of the non-management functions in production require credentials from coporate. In other words, production should continue to work completely, evn if corporate totally disappeared. Production is primarily housed in a datacenter which has been having some power issues of late, as in there are UPS and generator issues which have caused all our servers to power off. During these events, the co-lo's upstream network equipment isn't fully back online until after our servers are back up. The production DC, which is the only one in this site, comes back up before it can see either the DC in the second production site, or the corporate site. This DC owns all the FSMO roles. The problem we're having is that, on startup, the netologon process appears to start, but fails to service any logon requests. It logs the following in the system event log with ID 5719 and source NETLOGON: "This computer was not able to set up a secure session with a domain controller in the domain CORPORATE due to the following: There are currently no logon servers available to service the logon request." That much is true, but the DC fails to process any authentication requests for either its own services, or any other service accounts in the production domain. LsaSrv throws a good many SPNEGO/40960 errors for the succeeding ten minutes. Then netlogon seems to recover and authentication works. Of course, by this point, all the services on the non-DC servers have tried and failed to start, meaning we have to touch 20+ servers to manually bring them online. Is this normal behavior for a tree-root trust? Should the DC be more resilient than this, and at least authenticate its own domain's accounts? If this is the normal behavior, can it be altered though anything other than breaking the trust? Is having a corporate DC in the production network required? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130540
- Next
  - 1
    - Home directory - Windows\system folders appear? Hi, When I create a home folder for a user, Windows and System folders (empty) are created within it. Is this expected behaviour? Can it be prevented or is it required? Thanks -- Tag: Defragmenting Client PCs Windows 2003 server Tag: 130535
  - 2
    - Computer Attribute? Is there a way to find out who joined a computer to the domain? Thank you in advance. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130527
  - 3
    - docs on AD authentication process Any suggestions on docs that have clear and detailed explanations on how a member in the process from power on to sucdcessfully log into AD, and roles played by DNS (SRV), Netlogon, GC, Site, DC, etc? Thanks! Tag: Defragmenting Client PCs Windows 2003 server Tag: 130520
  - 4
    - Windows 2008: Can't create new GPOs Hello NG, in my Windows 2008 domain (2008 native mode) I'm not able to create any new GPOs using the GPMC. I receive the error message "data present in the reparse point buffer is invalid". I already checked the reparse points like described on http://forums.technet.microsoft.com/cs-CZ/winserverGP/thread/191f7695-5af9-49af-9b3c-4bf90c4ecbcd/ Everything is correct. The creation of GPOs doesn't work neither on the DC locally nor on any other server. All FSMOs are working well. Has anyone an idea to solve that? Regards Marc Tag: Defragmenting Client PCs Windows 2003 server Tag: 130515
  - 5
    - Domain Group backup Operators Hello, just a small question, because I did not find the answer on the net: Is the built-in Domain group "backup-Operators" by default added to the local "backup-operators" group on every server on the domain or do I have to manually create a group an add it via GPO to the "backup- operators"-group on every server? Thanx in advance PR Tag: Defragmenting Client PCs Windows 2003 server Tag: 130510
  - 6
    - problem with child domain hello i have a win2003SP2-- DC to manage my domain "mycompany.com" in which i have created my users and joined some clients PC Users can regularly logon to that domain from clients Pc Now i have created a child Domain on a new server win2003SP2 named "test.mycompany.com" and i have noticed that users at "mycompany.com" domain can't logon now to that doman from the same clients PC if i disconnect a client Pc from "mycompany.com" and join it to "test.mycompany.com" users can regularly logon to "mycompany.com" anyone knows why? i am forgotting something? thank you Mmc Tag: Defragmenting Client PCs Windows 2003 server Tag: 130505
  - 7
    - NTDS event id 509 For the past week I am getting a " NTDS (412) NTDSA: A request to read from the file "C:\WINDOWS\NTDS\ntds.dit" at offset 24190976 (0x0000000001712000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (94 seconds) to be serviced by the OS. In addition, 0 other I/O requests to this file have also taken an abnormally long time to be serviced since the last message regarding this problem was posted 58919 seconds ago. " and some of the same error for other files in that directory from a windows sbs 2003 sp2 server. Users also get disconnected from the server ( offline files/folders ) and after one minute or so everything is back to normal. The disk drives are consisted from a Raid-5 with and Intel SRCS16 and there are no errors whatsoever in the event logs of the controller.... Could it be that the files are corrupted and just need a defrag? Or should I look for a hardware problem more? Thanks in advance Tag: Defragmenting Client PCs Windows 2003 server Tag: 130500
  - 8
    - Can I use ADAM in this scenario Hi, I have one service running on 2003 server. This service talks wit AD and gets the members of some groups from whole forest. This servic gets user attributes also of those members from AD. I want to exten User schema to add this service specific attributes to User objects Whenever there is any change in any user attributes then I need to ge those users list from AD. Now here the extend user schema is the problem as not al administrators allow to touch user schema. So I thought may be I ca ADAM to extend schema and then use the same ADSI calls which I am usin in this service to query users, groups, and their attributes throug ADAM. Please let me know if this is possible? Is ADAM is good choice? If yes, then I have one more question. Right now I am using Active Directory Users and computers snapin. O user properties I have added my custom tab where I allow users to se extended attributes of users. If I use ADAM then can I talk with m ADAM instance from ADUC domain and get the extended attributes of tha user from ADAM and display here in ADUC. And once user sets th attributes, can I set it back to the instance of ADAM? Please help, as depending on your answer I can decide the developmen directio -- asawar ----------------------------------------------------------------------- asawari's Profile: http://forums.techarena.in/member.php?userid=5138 View this thread: http://forums.techarena.in/showthread.php?t=98428 http://forums.techarena.i Tag: Defragmenting Client PCs Windows 2003 server Tag: 130499
  - 9
    - Folder redirection & offline files Hello I have a single win2003 domain with 2 DCs and 20 winxp clients. Until now clients use DCs just for authentication and some mappings via batch scripts. I want to utilise folder redirection (my documents and desktop only) for the clients so their files will be stored on a single location. My question is: 1. The clients have already files in their my documents folder and some on their desktop.If i activate folder redirection they will be transferred on the server or will remain locally and just the new ones will be redirected there. 2.If for some reason there is a hard disk failure on the server they will lost all these files? Is it better to activate offline files to these folders so they will be kept locally and on the server also? thank you Tag: Defragmenting Client PCs Windows 2003 server Tag: 130497
  - 10
    - Urgent help needed!! Hi, I have a fully functioning W2K3 domain at our head quarters. Due to a buyout I was asked to build a DC and bring it to the new company. I built the DC at our HQ with our IP scheme and everything was fine. After a week I disconnected the DC and brought it to the new site along with two other member servers. Once we got it to the new company I re-IP'ed the box and updated the DNS server with the new settings My issue is that the DC cannot add new boxes to the domain and Term services to the other member servers doesn't work. The error when adding boxes to the domain says the "server is not capable of this function" or something like that. When I try to term service to the DC it wokrs but the other boxes give me an "RPC server is unavailable error". At this point I'm stumped. There is no connection from our HQ to the new company so I decided to seize all the FSMO roles but that didn't help. Any help is greatly appreciated!! Tag: Defragmenting Client PCs Windows 2003 server Tag: 130496
  - 11
    - Server 2003 SP 1 adm in a 2003 domain We have a 2003 domain that was upgraded from 2000. Both DC's currently have 2003 SE installed, with no service packs. We have a few 2003 servers with sp1 or sp2 installed that we'd like to administer via group policy and take full advantage of the 2003 sp1 adm file that is available. Is it safe to add the adm template and create a policy or will the DC's have to be upgraded to SP1 first? If the latter is true are there any caveats that I should be aware of prior to upgrading the DC's? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130490
  - 12
    - extensionAttribute1 field limit Can any one tell me the max character limit on the extensionAttribute1 AD attribute? I found an MSDN article listing various info about AD attributes, but this one was not included. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130486
  - 13
    - Screen Saver with GP Prefs Having installed Group Policy preferences client-side extension on xp Clients, I added a Vista client for necessary configuration to the domain. Rather than using Policy, the ScreenSaver is being configured through Preferences to afford the user certain priviledges. The idea actually is for user to be able to remove PWD protection when needed, but this setting should be reenabled by default when the user logon again. The problem is I do not see the settings in preferences being applied at all. Is there any additional configuration needed? Thanks topokin Tag: Defragmenting Client PCs Windows 2003 server Tag: 130471
  - 14
    - Find AD UserName by email address? Is it possible to query AD with an Email address (either primary or alias) and find out what account it is linked to? I have done this the other way many times IE provide Username and retreive all the emails associated with the account. I just have a few emails and I cannot find the correct AD account. Thanks in Advance, ~ck Tag: Defragmenting Client PCs Windows 2003 server Tag: 130466
  - 15
    - Active Direcory and Domain name Hi All, We have Active Directory Domain Name is mycompany.gr (wrong decision) and also we have a site hosted externally as www.mycompany.gr and finally pop3 to get email from the provider www.mycompany.gr Because mycompany.gr is Act Dir Domain name and web site is not possible to get emails Is there any solution ? Thanks Tag: Defragmenting Client PCs Windows 2003 server Tag: 130454
  - 16
    - NTDS Replication Event ID 1411 Goodmorning, our new Windows Server 2003 Domain Controller is showing this error in Directory Service Event Viewer. I think that somewhere it's searching for an object that is not here anymore. I looked in DNS, in ADU&C, ADS&S, ADD&T but it never shows up. How can i find it ? Thanks in advance for your replies. Event Type: Error Event Source: NTDS Replication Event Category: DS RPC Client Event ID: 1411 Date: 6/10/2008 Time: 8:46:41 AM User: NT AUTHORITY\ANONYMOUS LOGON Computer: ATSRV10 Description: Active Directory failed to construct a mutual authentication service principal name (SPN) for the following domain controller. Domain controller: 65b718a0-92fc-45eb-8790-ab69fd63853a._msdcs.domain.local The call was denied. Communication with this domain controller might be affected. Additional Data Error value: 8589 The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the corresponding server object in the local DS database has no serverReference attribute. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130450
  - 17
    - domain controlllers using non-domain/standard profile settings hi - i recently set our domain to set the firewall off for all PC's connected using group policy. settings are in computer config> administrative templates > network connections > windows firewall from here you can choose "domain profile" settings, and "standard profile" settings. Domain Profile applies when computers are connected to the domain and standard profile settings apply when computers are not connected to the network, ie laptops and other mobile devices on the road. the problem i am having is that my domain controllers are using the standard profile, which in my case turns the firewall on as it is intended for the laptops in the company, and in turn causes all ssorts of problems. As soon as i set the standard profile to not configured on all settings the DC's still use the standard profile but function correctly again due to the firewall being turned off. has anyone seen this before - how can a functioning DC think that it is not connected to the network. thanks in advance Tag: Defragmenting Client PCs Windows 2003 server Tag: 130449
  - 18
    - Group Policy and AD trust Win2k3 I'm wondering if a trust is established between 2 active directories, can group policy for one AD be used for users in another AD.. Lets say a one way trust is etablished between AD1 and AD2. (where AD1 is trusting and AD2 is trusted). both domains have Group Policy. What happens if a member of AD1 logs in on the AD2 domain, will Group Policy for AD2 be used for that user? Jeff Tag: Defragmenting Client PCs Windows 2003 server Tag: 130447
  - 19
    - Discount EDhardy Men's Underwear, Women's EDhardy Underwear, Smet, Discount EDhardy Men's Underwear, Women's EDhardy Underwear, Smet, COOGI Underwear Supply in China ( www.g lobwholesale.com.cn ) Tag: Defragmenting Client PCs Windows 2003 server Tag: 130439
  - 20
    - DC's GPOs won't set without DNS entry? Here's our situation... Our landlord doles out IP config over DHCP and we must be on this network. We have a static IP as our DC's address, and it runs DNS. If we point a client at the domain, and add the DC as a DNS server (in place of those given out over DHCP), all works fine. If we remove the DC from the DNS servers on the client and just put the DC in the hosts file, logging on to the domain works ok, but the GPO won't be enforced (running gpupdate indicates it can't locate the DC). This is really annoying because if we hardcode people's DNS to our DC, then their networking at home/hotel becomes a problem. What's the correct solution here? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130435
  - 21
    - Custom password filters Is there way to create custom password filters? I'd like to set the limit of characters and also make it so no number (1-9) is the first character. Anyone done this? TIA Tag: Defragmenting Client PCs Windows 2003 server Tag: 130429
  - 22
    - Active Directory self service can anyone reccomend any AD self service software? i want to build a web based portal to alllow users with delegated permissions to create users and groups in AD. I came across Quests Active Roles Server which seems to do the trick but looks like it requires a lot of custom tweaking. thoughts? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130419
  - 23
    - DHCP, DDNS, and PTRs Hi, We have an issue with PTR records for DHCP client workstations. When the systems are first imaged, they come up in a workgroup with a temporary name. As part of the imaging process, the systems are renamed and joined to our Active Directory domain. But the reverse zone for the subnet which the systems are imaged in clutters up with the temporary names. The other issue is that these temporary names are registered without a DNS suffix. So you will see records like: 10.1.12.100 (PTR) temp-62e83. 10.1.12.100 (PTR) temp-123a7. 10.1.12.100 (PTR) temp-azc12. 10.1.12.100 (PTR) us-laptop01.contoso.corp Where the only "valid" record is the last one with the FQDN. We are using Windows Server 2003 R2 SP2 servers for DC's, DNS, and DHCP. The DHCP service is configured with service account credentials for DDNS registrations, as it is running on a domain controller. DHCP options include 006 with the two DNS servers, 015 as our primary DNS suffix, and 081 via the DNS tab. The DNS tab is configured as Enabled, Always update, Discard .. when lease deleted, and Dynamically Update for clients which do not request. Lease duration on this scope is 2 days. I *believe* what is happening is that the DHCP service creates a lease for the temporary name, and registers on behalf of the client in the DNS reverse zone. Since the fresh install of Windows does not have a primary DNS suffix, nor does Windows come with the 'Register this connection's suffix in DNS' box checked, the client does not append a domain name to the hostname when replying with the option 81 data. Then, when the computer name is changed and joined to the domain, a new record is created with the new computer name including the primary DNS suffix. This is where I am unsure, but normally the DHCP service would remove the old record on an expired lease. But this lease is not expired, the option 81 data has simply changed on the lease renewal, so the DHCP service creates a PTR record with the new data but does not remove the old? Is there some way to force DHCP to only create RRs for clients which return a fully qualified domain name? Tag: Defragmenting Client PCs Windows 2003 server Tag: 130418
  - 24
    - RAS server dial in issue -- unable to figure out what is wrong? Hello all, I am trying to connect a medical device (with standard modem) to RAS windows 2003 server by RAS dial in. The device is mostly closed and probably running some sort of scaled down Linux. When I dial out from the device, sometimes it just times out after several rings on the server. Sometimes it reaches 'authenticating..' status on the server RAS monitor process but doesn't go further. I wish to call a web service running on the server after connection is established. I am able to successfully accomplish all the above tasks when I dial in using a PC. I have been debugging this issue for couple of weeks now. One thing I suspect is there is a 'no carrier' response from the device modem. I have pasted the modem log below. ----begin 06-06-2008 17:18:11.172 - Recv: <cr><lf>RING<cr><lf> 06-06-2008 17:18:11.172 - Interpreted response: Ring 06-06-2008 17:18:11.172 - TSP(0000): LINEEVENT: LINE_NEWCALL 06-06-2008 17:18:11.172 - TSP(0000): LINEEVENT: LINECALLSTATE_OFFERING 06-06-2008 17:18:11.172 - TSP(0000): LINEEVENT: LINEDEVSTATE_RINGING(0x1) 06-06-2008 17:18:17.203 - Recv: <cr><lf>RING<cr><lf> 06-06-2008 17:18:17.203 - Interpreted response: Ring 06-06-2008 17:18:17.203 - TSP(0000): LINEEVENT: LINEDEVSTATE_RINGING(0x1) 06-06-2008 17:18:17.203 - TSP(0000): Accepting Call 06-06-2008 17:18:17.203 - TSP(0000): LINEEVENT: LINECALLSTATE_ACCEPTED 06-06-2008 17:18:17.203 - TSP(0000): Answering Call 06-06-2008 17:18:17.203 - Answering the call. 06-06-2008 17:18:17.219 - Send: ATA<cr> 06-06-2008 17:19:17.328 - Recv: <cr><lf>NO CARRIER<cr><lf> 06-06-2008 17:19:17.328 - Interpreted response: No Carrier 06-06-2008 17:19:17.328 - Hanging up the modem. 06-06-2008 17:19:17.344 - Send: ATH<cr> 06-06-2008 17:19:17.344 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.344 - Interpreted response: OK 06-06-2008 17:19:17.359 - Send: at#ud<cr> 06-06-2008 17:19:17.359 - Recv: <cr><lf>DIAG 06-06-2008 17:19:17.359 - Interpreted response: Diagnostic Info 06-06-2008 17:19:17.359 - Recv: <2A4D3263 0=10><cr><lf><cr><lf>DIAG <2A4D326 06-06-2008 17:19:17.359 - Unknown Response 06-06-2008 17:19:17.359 - 9600,8,N,1, ctsfl=1, rtsctl=2 06-06-2008 17:19:17.359 - Initializing modem. 06-06-2008 17:19:17.359 - Recv: 3 1=4><cr><lf><cr><lf>DIAG <2A4D3263 2=0><cr><lf><cr><lf>DIAG <2A4D3263 3=0><cr><lf><cr><lf>DIAG <2A4D3263 4=""><cr><lf><cr><lf>DIAG <2A4D3263 5=""><cr><lf><cr><lf>DIAG <2A4D3263 10=0 11=0 12=0><cr><lf><cr><lf>DIAG <2A4D3263 13=0><cr><lf><cr><lf>DIAG <2A4D3263 14=0><cr><lf><cr><lf>DIAG <2A4D3263 06-06-2008 17:19:17.359 - Unknown Response 06-06-2008 17:19:17.359 - Recv: =FF 23=0 25=FFFF><cr><lf><cr><lf>DIAG <2A4D3263 26=0 27=0><cr><lf><cr><lf>DIAG <2A4D3263 30=0 31=0><cr><lf><cr><lf>DIAG <2A4D3263 32=0 33=0><cr><lf><cr><lf>DIAG <2A4D3263 34=0 35=0><cr><lf><cr><lf>DIAG <2A4D3263 40=0><cr><lf><cr><lf>DIAG <2A4D3263 41=80><cr><lf><cr><lf>DIAG <2A4D3263 42=0><cr><lf> 06-06-2008 17:19:17.359 - Unknown Response 06-06-2008 17:19:17.547 - Send: AT<cr> 06-06-2008 17:19:17.547 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.547 - Interpreted response: OK 06-06-2008 17:19:17.563 - Send: AT&F&A0X4E0V1S0=0&C1&D2+MR=2;+DR=1;+ER=1;W2<cr> 06-06-2008 17:19:17.703 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.703 - Interpreted response: OK 06-06-2008 17:19:17.719 - Send: ATS7=60S30=0M1+ES=3,0,2;+DS=3;+IFC=2,2;X4<cr> 06-06-2008 17:19:17.734 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.734 - Interpreted response: OK 06-06-2008 17:19:17.734 - Waiting for a call. 06-06-2008 17:19:17.750 - Send: at+vcid=1<cr> 06-06-2008 17:19:17.766 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.766 - Interpreted response: OK 06-06-2008 17:19:17.781 - Send: ATS0=0<cr> 06-06-2008 17:19:17.797 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:19:17.797 - Interpreted response: OK 06-06-2008 17:19:17.797 - TSP Completing Async Operation(0x000103d1) Status 0x80000048 06-06-2008 17:19:17.797 - TSP(0000): LINEEVENT: LINECALLSTATE_DISCONNECTED(0x40) 06-06-2008 17:19:17.797 - TSP(0000): LINEEVENT: LINECALLSTATE_IDLE 06-06-2008 17:19:17.797 - TSP(0000): Dropping Call 06-06-2008 17:19:17.797 - TSP Completing Async Operation(0x0001039d) Status 0x00000000 06-06-2008 17:19:17.797 - TSP(0000): Closing Call 06-06-2008 17:20:56.438 - Recv: <cr><lf>RING<cr><lf> 06-06-2008 17:20:56.438 - Interpreted response: Ring 06-06-2008 17:20:56.438 - TSP(0000): LINEEVENT: LINE_NEWCALL 06-06-2008 17:20:56.438 - TSP(0000): LINEEVENT: LINECALLSTATE_OFFERING 06-06-2008 17:20:56.438 - TSP(0000): LINEEVENT: LINEDEVSTATE_RINGING(0x1) 06-06-2008 17:21:02.500 - Recv: <cr><lf>RING<cr><lf> 06-06-2008 17:21:02.500 - Interpreted response: Ring 06-06-2008 17:21:02.500 - TSP(0000): LINEEVENT: LINEDEVSTATE_RINGING(0x1) 06-06-2008 17:21:02.500 - TSP(0000): Accepting Call 06-06-2008 17:21:02.500 - TSP(0000): LINEEVENT: LINECALLSTATE_ACCEPTED 06-06-2008 17:21:02.500 - TSP(0000): Answering Call 06-06-2008 17:21:02.500 - Answering the call. 06-06-2008 17:21:02.516 - Send: ATA<cr> 06-06-2008 17:21:15.641 - Recv: <cr><lf>+MCR: V21<cr><lf> 06-06-2008 17:21:15.641 - Interpreted response: Informative 06-06-2008 17:21:15.641 - Recv: <cr><lf>+MRR: 300<cr><lf> 06-06-2008 17:21:15.641 - Interpreted response: Informative 06-06-2008 17:21:15.641 - Recv: <cr><lf>+ER: NONE<cr><lf> 06-06-2008 17:21:15.641 - Interpreted response: Informative 06-06-2008 17:21:15.641 - Recv: <cr><lf>+DR: NONE<cr><lf> 06-06-2008 17:21:15.641 - Interpreted response: Informative 06-06-2008 17:21:15.641 - Recv: <cr><lf>CONNECT<cr><lf> 06-06-2008 17:21:15.641 - Interpreted response: Connect 06-06-2008 17:21:15.641 - Connection established at 300bps. 06-06-2008 17:21:15.641 - Error-control off or unknown. 06-06-2008 17:21:15.641 - Data compression off or unknown. 06-06-2008 17:21:15.641 - TSP Completing Async Operation(0x0001007a) Status 0x00000000 06-06-2008 17:21:15.641 - TSP(0000): LINEEVENT: LINECALLSTATE_CONNECTED 06-06-2008 17:21:45.641 - Read: Total: 1096, Per/Sec: 13, Written: Total: 317, Per/Sec: 6 06-06-2008 17:21:47.922 - CD dropped--Remote modem hung up. ModemStatus=00000020 06-06-2008 17:21:47.922 - While processing CD dropping, CTS or DSR was found low. 06-06-2008 17:21:47.922 - TSP(0000): LINEEVENT: LINECALLSTATE_DISCONNECTED(0x1) 06-06-2008 17:21:47.922 - TSP(0000): Dropping Call 06-06-2008 17:21:47.922 - Hanging up the modem. 06-06-2008 17:21:47.922 - Recv: <ff>}#<c0>!}!}!} }.}"}&} } } <eb><11><aa>@<DLE><94><cr><14><02><a7>@<DLE>8<01><05><c0><lf>(<04>N@<DLE><88><02><05>@<15>P<08><a4><01>A <05>B<01>$ <DLE><08><04><02><00>A 06-06-2008 17:21:47.922 - Unknown Response 06-06-2008 17:21:48.016 - Recv: <cr> 06-06-2008 17:21:48.016 - Unknown Response 06-06-2008 17:21:48.016 - Recv: <lf>NO CARRIER<cr><lf> 06-06-2008 17:21:48.016 - Unknown Response 06-06-2008 17:21:48.203 - Send: ATH<cr> 06-06-2008 17:21:48.203 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.203 - Interpreted response: OK 06-06-2008 17:21:48.219 - Send: at#ud<cr> 06-06-2008 17:21:48.219 - Recv: <cr><lf>DIAG 06-06-2008 17:21:48.219 - Interpreted response: Diagnostic Info 06-06-2008 17:21:48.219 - Recv: <2A4D3263 0=10><cr><lf><cr><lf>DIAG <2A4D326 06-06-2008 17:21:48.219 - Unknown Response 06-06-2008 17:21:48.219 - 9600,8,N,1, ctsfl=1, rtsctl=2 06-06-2008 17:21:48.219 - Initializing modem. 06-06-2008 17:21:48.219 - Recv: 3 1=7><cr><lf><cr><lf>DIAG <2A4D3263 2=0><cr><lf><cr><lf>DIAG <2A4D3263 3=0><cr><lf><cr><lf>DIAG <2A4D3263 4=""><cr><lf><cr><lf>DIAG <2A4D3263 5=""><cr><lf><cr><lf>DIAG <2A4D3263 10=38 11=38 12=A0><cr><lf><cr><lf>DIAG <2A4D3263 13=A0><cr><lf><cr><lf>DIAG <2A4D3263 14=A0><cr><lf><cr><lf>DIAG <2A4 06-06-2008 17:21:48.219 - Unknown Response 06-06-2008 17:21:48.219 - CTS is low while initializing modem. 06-06-2008 17:21:48.219 - Recv: <2A4D3263 21=1 23=12C 25=1750><cr><lf><cr><lf>DIAG <2A4D3263 26=12C 27=12C><cr><lf><cr><lf>DIAG <2A4D3263 30=0 31=0><cr><lf><cr><lf>DIAG <2A4D3263 32=0 33=0><cr><lf><cr><lf>DIAG <2A4D3263 34=12C 35=12C><cr><lf><cr><lf>DIAG <2A4D3263 40=0><cr><lf><cr><lf>DIAG <2A4D3263 41=80><cr><lf><cr><lf>DIAG 06-06-2008 17:21:48.219 - Unknown Response 06-06-2008 17:21:48.422 - Send: AT<cr> 06-06-2008 17:21:48.422 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.422 - Interpreted response: OK 06-06-2008 17:21:48.438 - Send: AT&F&A0X4E0V1S0=0&C1&D2+MR=2;+DR=1;+ER=1;W2<cr> 06-06-2008 17:21:48.578 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.578 - Interpreted response: OK 06-06-2008 17:21:48.594 - Send: ATS7=60S30=0M1+ES=3,0,2;+DS=3;+IFC=2,2;X4<cr> 06-06-2008 17:21:48.609 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.609 - Interpreted response: OK 06-06-2008 17:21:48.609 - Waiting for a call. 06-06-2008 17:21:48.625 - Send: at+vcid=1<cr> 06-06-2008 17:21:48.641 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.641 - Interpreted response: OK 06-06-2008 17:21:48.656 - Send: ATS0=0<cr> 06-06-2008 17:21:48.672 - Recv: <cr><lf>OK<cr><lf> 06-06-2008 17:21:48.672 - Interpreted response: OK 06-06-2008 17:21:48.672 - TSP(0000): LINEEVENT: LINECALLSTATE_IDLE 06-06-2008 17:21:48.672 - TSP Completing Async Operation(0x000100d0) Status 0x00000000 06-06-2008 17:21:48.672 - TSP(0000): Closing Call ---end Is there a way to find failed logon attempts in windows? Also, I tried to enable device.log file to find the issue but it does not create that file. Please help. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130415
  - 25
    - Upgrade to Native Mode causing problems? Since upgrading my site to Server 2003 Native Mode (the last site in a multi-site enterprise to do so), we've seen some strange things in several different corporate child domains, mostly related to accessing resources (possible authentication issues), but just this morning some (but not all) users in my site/domain were reporting the inability to login to their workstations, getting an "unable to log you on due to account restriction policies" message. Which is weird because there are no account restrictions in place. Looking through the System log on the affected machines (all WinXP), I noticed a number of event ID 40960/40961 messages, which were universally preceded by a 1003 event message complaining about a DHCP semaphore timeout. The 1003 event is recorded after booting but before the 40960/40961 messages. The quick fix is to login to the workstation as another user and release and renew the DHCP-assigned IP address, then the user can login to his/her workstation. But I'm concerned that there's something larger at work here, irregardless of the fact that we don't need dozens of users calling the HelpDesk each morning to report that they can't login. Any ideas? Much appreciated. Tag: Defragmenting Client PCs Windows 2003 server Tag: 130411

We want to set up disk defragmentation of our client machines from active
directory for Windows 2003 server. Does microsoft have an add in to do this?
I don't want to spend the money for diskeeper if Microsoft already had an
adm or other way of doing this.

Thanks.

--
Valerie

Top

Re: Defragmenting Client PCs Windows 2003 server by Meinolf

Meinolf
Fri Jun 13 13:44:23 PDT 2008

Hello Valerie,

Check out this articles, the command line tool defrag.exe allows you to setup
a scheduled task via GPO:
http://support.microsoft.com/kb/283080

http://support.microsoft.com/kb/314848

http://www.microsoft.com/technet/scriptcenter/topics/win2003/defrag.mspx#EUH

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We want to set up disk defragmentation of our client machines from
> active
> directory for Windows 2003 server. Does microsoft have an add in to
> do this?
> I don't want to spend the money for diskeeper if Microsoft already
> had an
> adm or other way of doing this.
> Thanks.
>

Top

Re: Defragmenting Client PCs Windows 2003 server by DevilsPGD

DevilsPGD
Fri Jun 13 16:22:53 PDT 2008

In message <ff16fb66a10f78ca9bbe293de630@msnews.microsoft.com> Meinolf
Weber <meiweb(nospam)@gmx.de> wrote:

>Check out this articles, the command line tool defrag.exe allows you to setup
>a scheduled task via GPO:
>http://support.microsoft.com/kb/283080
>
>http://support.microsoft.com/kb/314848
>
>http://www.microsoft.com/technet/scriptcenter/topics/win2003/defrag.mspx#EUH

Any idea about the reverse, any way to kill Vista's built-in scheduled
defrag via GPO or GPP?

Top