Scheduled Tasks Through Group Policy?

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - FREE GODADDY COUPON CODES FreshDrop.net has been helping the domain community so much from offering our data services for free. We want to continue to help the domain community grow and as such we feel that it is very appropriate to help community members by letting them know how they can save on their GoDaddy renewals and registrations. This is less about FreshDrop and more about helping each other out to grow. With that in mind, here are yet even more GoDaddy coupon codes where everyone can use to get savings. cjc695dom . . . . . $6.95 COM Renewals and Registrations cjcsave10 . . . . . Receive 10% off all Godaddy purchases. cjcsave . . . . . . . Receive $5 off on orders of $30 or more at Go Daddy. cjctenoff . . . . . . Receive $10 off on orders of $50 or more at Go Daddy. cjcdeal . . . . . . . Receive 15% off on orders of $75 or more at Go Daddy. Many thanks to everyone and I hope you continue to do well as domainers. For the latest GoDaddy Coupon Codes visit: http://www.freshdrop.net/coupons_godaddy.php Warm Regards, Your Friends at FreshDrop Tag: Scheduled Tasks Through Group Policy? Tag: 128465
  - 2
    - Outlook points to old DNS-name after domain rename Hello, I did a domain rename of a W2K3-Domain including Exchange 2003. At the right point I ran XDR-fixup. All steps were successful. Only the rendom /clean will be done in a few days because lots of clients have to restart first. Everything is working fine in the moment. I saw, that all Outlook Clients point to the old dns-name of the exchange server. Outlook is actually working. What happens, when I run rendom /clean and remove the old dns-name of the domain from dns? Will the Outlook Clients still work? We have 300 Clients and I wouldn't like configuring them manually. Has anyone had this case already? Thanks and regards, Marc Tag: Scheduled Tasks Through Group Policy? Tag: 128458
  - 3
    - Mapping printers to particular machines Hi All Hope you can help. Basically I need to map a printer to certain PCs so that all the PCs on the first floor have the ability to print to one printer and all the PCs on ground level can print to another. To do this, I tried the following: a) Created a new OU in AD called 'Upstairs PCs'. b) Drag and dropped one particular PC from the default Computers folder to my new OU. c) Went into GPO editor and created a new GPO for this OU called 'Upstairs PCs'. d) Went to User Config > Windows Comp > Logon and dropped in a script file that uses the usual printdll command line to map the upstairs printer. However when I log onto the relevant test PC, the printer doesn't map. I get no error messages, but I don't get a printer either. Is it not possible to execute my usual user config OU scripts AND this new Upstairs PC script? I also tried putting my new script file in the Startup part of Computer Config > Windows Comp of my Upstairs OU, but this also didn't make a diff. NOTE: I have done gpupdate every time I've tried the above. Am I doing something daft? Rgds Laphan Tag: Scheduled Tasks Through Group Policy? Tag: 128456
  - 4
    - Technomarine Squale Watches - Technomarine Watches Minimum Price Technomarine Squale Watches - Technomarine Watches Minimum Price Hot Watch : http://www.hotwatch.org Technomarine Watches : http://technomarine.hotwatch.org/ Technomarine Squale Watches : http://technomarine.hotwatch.org/Technomarine-Squale.html Technomarine Squale Watches All Products : Technomarine Squale Unisex Watch SST16 : http://technomarine.hotwatch.org/Technomarine-Squale-Unisex-Watch-SST16.html Technomarine Squale Burgundy Mens Watch SST13 : http://technomarine.hotwatch.org/Technomarine-SST13.html Technomarine Unisex Squale Watch SST12 : http://technomarine.hotwatch.org/technomarine-sst12.html The Same Technomarine Watches Series : Technomarine Abyss Watches : http://technomarine.hotwatch.org/Technomarine-Abyss.html Technomarine Alpha Watches : http://technomarine.hotwatch.org/Technomarine-Alpha.html Technomarine Apnea Watches : http://technomarine.hotwatch.org/Technomarine-Apnea.html Technomarine Butterfly Watches : http://technomarine.hotwatch.org/Technomarine-Butterfly.html Technomarine Cruise Watches : http://technomarine.hotwatch.org/Technomarine-Cruise.html Technomarine Hummer Watches : http://technomarine.hotwatch.org/Technomarine-Hummer.html Technomarine Lady Sport Watches : http://technomarine.hotwatch.org/Technomarine-Lady-Sport.html Technomarine Jubilee Watches : http://technomarine.hotwatch.org/Technomarine-Jubilee.html Technomarine KRA Watches : http://technomarine.hotwatch.org/Technomarine-KRA.html Technomarine Maori Watches : http://technomarine.hotwatch.org/Technomarine-Maori.html Technomarine Raft Watches : http://technomarine.hotwatch.org/Technomarine-Raft.html Technomarine Redsquare Watches : http://technomarine.hotwatch.org/Technomarine-Redsquare.html Technomarine Reef Watches : http://technomarine.hotwatch.org/Technomarine-Reef.html Technomarine Squale Watches : http://technomarine.hotwatch.org/Technomarine-Squale.html Technomarine TechnoDiamond Watches : http://technomarine.hotwatch.org/Technomarine-TechnoDiamond.html Technomarine TechnoSquare Watches : http://technomarine.hotwatch.org/Technomarine-TechnoSquare.html Technomarine TMC Watches : http://technomarine.hotwatch.org/Technomarine-TMC.html Technomarine TMY Ceramique Watches : http://technomarine.hotwatch.org/Technomarine-TMY-Ceramique.html Technomarine TMY Watches : http://technomarine.hotwatch.org/Technomarine-TMY.html Technomarine TS Magnum Watches : http://technomarine.hotwatch.org/Technomarine-TS-Magnum.html Technomarine US Navy Watches : http://technomarine.hotwatch.org/Technomarine-US-Navy.html Technomarine XS Magnum Watches : http://technomarine.hotwatch.org/Technomarine-XS-Magnum.html Just Added and Hard to Find Technomarine Watches : http://technomarine.hotwatch.org/Just-Added-and-Hard-to-Find-Technomarine.html Tag: Scheduled Tasks Through Group Policy? Tag: 128451
  - 5
    - Movado Museum Horwitt Mens Watch 0605151 Movado Museum Horwitt Mens Watch 0605151 Movado Museum Horwitt Mens Watch 0605151 Link : http://movado.hotwatch.org/Movado-0605151.html Movado Museum Horwitt Mens Watch 0605151 Information : Brand : Movado Watches ( http://movado.hotwatch.org/ ) Gender : Unisex Code : Movado-0605151 Item Variations : 605151, 0605151, Movado-605151, Movado-0605151 Movement : Automatic Bezel : Fixed Case Material : Stainless Steel Case Diameter : 37mm Dial Color : Silver Crystal : Scratch Resistant Sapphire Clasp : Stainless Steel Water Resistant : 30m/100ft Round Polished Stainless Steel Case Has A Skeleton Crystal Back That Reveals The Watch's Intricate Automatic Movement. High Polished Stainless Steel Horwitt Brick Link Bracelet. Self-Winding Automatic Movement Never Needs Batteries. Perfectly Round Polished Steel Bezel Frames The Silver Colored Dial With Silver Tone Dauphine Hands And Baton Hour Markers. Scratch Resistant Sapphire Crystal. Water Resistant To 30 Meters (100 Feet). Bracelet Has A Push-Button Clasp For Added Convenience. Case Is 37MM In Diameter And 8MM Thick. Movado Watch Model Numbers 605151 / 0605151. The Same Movado Watches Series : Movado Junior Sport Mens Watch 0605746 : http://movado.hotwatch.org/Movado-0605746.html Movado Junior Sport Ladies Watch 0604587 : http://movado.hotwatch.org/Movado-0604587.html Movado Junior Sport Ladies Watch 0601862 : http://movado.hotwatch.org/Movado-0601862.html Movado Junior Sport Mens Watch 0605105 : http://movado.hotwatch.org/Movado-0605105.html Movado Juro Diamond Two-tone Steel Black Mens Watch 0605722 : http://movado.hotwatch.org/Movado-Juro-Diamond-Mens-Watch-0605722.html Movado Juro Diamond Steel Black Mens Watch 0605721 : http://movado.hotwatch.org/Movado-Juro-Mens-Watch-0605721.html Movado Juro Ladies Watch 0605031 : http://movado.hotwatch.org/Movado-0605031.html Movado Juro Mens Watch 0605030 : http://movado.hotwatch.org/Movado-0605030.html Movado Juro Ladies Watch 0605046 : http://movado.hotwatch.org/Movado-0605046.html Movado Juro Ladies Watch 0605024 : http://movado.hotwatch.org/Movado-0605024.html Tag: Scheduled Tasks Through Group Policy? Tag: 128450
  - 6
    - Bypassing domain and OU GPO settings using the Security Configuration and Analysis MMC Gurus, This is a re-post of a message sent solely to the group_policy NG. I'm copying a wider audience here to engage some discussions amongst you IT Security Managers/security consultants out there. Running Windows Server 2003 SP2 in a single Active Directory domain (Lab environment). I am experimenting with the Group Policy Security database, secedit.sdb If you run the Setup Security INF in the Security Configuration and Analysis Snapin against this database, you will bring your system back Windows security default settings and it will remain that way until the next Group Policy Refresh interval. You must be an admin on the machine to do this. My question is, isn't this a security risk in it's own right, bypassing domain and OU GPO settings? A respondent in the Group Policy newsgroup (Marcin) stated that if my sole goal is to prevent use of Security Configuration and Analysis, I have ability to restrict access to arbitrarily selected snap-ins via GPO. In addition I could restrict ability to execute Secedit (which one can do by following http://support.microsoft.com/kb/323525). While I agree this is a major technical challenge, has anyone else in these other NGs I've copied on this message ever worried about this? Or should I just let it pass? -- Spin Tag: Scheduled Tasks Through Group Policy? Tag: 128448
  - 7
    - Deploying Group Policy Preferences I have an AD domain with W2K3 Servers and XP clients. I have installed Group Policy preferences client-side extension on all the systems, but I cannot see the possibility to configure the policy through GPMC on a XP-client. There is practically no difference in GUI of the GPMC Do I need another tools to configure Policy preferences. Thanks, topokin Tag: Scheduled Tasks Through Group Policy? Tag: 128442
  - 8
    - missing DC computer accounts A while back I had a bad situation and the fix was to reset the kerberos password for a 2k3 dc which is part of an nt4 domain. During the process of trying to solve the problem, I had reset the domain group policy to the default settings and I'm thinking this was a bad move in an nt4 environment. I rebuilt the dns...and all seemed well. Recently both the computer accounts for the 2k3 and nt4 machines are missing. Can these be re-added with netdom? Is there anything that's vital to existing in an nt4 domain that I should pay attention to? I had to disable smb signing just to view gpo. Advice is much appreciated. js -- jsanders ------------------------------------------------------------------------ jsanders's Profile: http://forums.techarena.in/member.php?userid=48857 View this thread: http://forums.techarena.in/showthread.php?t=965531 http://forums.techarena.in Tag: Scheduled Tasks Through Group Policy? Tag: 128426
  - 9
    - How to make regular user a default admin for Computers under his Hello, On Win2003 Server I created an Organizational Unit TEAMOU and I delegated control of it to the TEAMOU_Admins group. Under that OU I added a Computers OU for them to add their computers. That all works fine, but I also want them to be the default Admins of those computers in that TEAMOU\Computers folder so that they can login remotely and locally. I don't want to add this group to my default Domain_Admins group. How else can I give them this ability ? I've tried putting a GroupPolicy on TEAMOU to set the groups allowed to login locally, through the network and through terminal services (Administrators, Remote Deskop Users, Mydomain\TEAMOU_Admins). But as soon as they try to login through terminal services to their machines, they get an error about the local policy not allowing them to login interactively. Any hints? Thanks David Tag: Scheduled Tasks Through Group Policy? Tag: 128414
  - 10
    - New DC, Not the DC! I am migrating from my old Win 200 SP4 server to a Win 2003 R2 x64 server & Exchange 2007. I did the dcpromo and all step that I was aware of to the new server and I thought things were fine. But, when I shut down the old DC I lost all my domain abilities (not even able to log into the new server). So I started looking into it, and I'm lost as to what is happening. There are lot's of error messages in my logs, I don't see a SYSVOL share on the new server, even though the new server is supposed to be the GC it's not. I've checked and the new server SEEMS to have all the FSMO roles. I have been doing research online, and frankly I'm lost as to the best path to proceded. Here is a list of errors I am seeing (Note - All real server and domain names have been replaced... I'm a bit of a security freak): Event Type: Error Event Source: NTDS General Event Category: Global Catalog Event ID: 1126 Date: 5/9/2008 Time: 3:12:12 AM User: NT AUTHORITY\ANONYMOUS LOGON Computer: KEGERATOR Description: Active Directory was unable to establish a connection with the global catalog. Additional Data Error value: 1355 The specified domain either does not exist or could not be contacted. Internal ID: 3200cf3 Event Type: Warning Event Source: NtFrs Event Category: None Event ID: 13508 Date: 5/9/2008 Time: 1:46:03 PM User: N/A Computer: KEGERATOR Description: The File Replication Service is having trouble enabling replication from {OLDSERVERNAME}.{DOMAIN-NAME}.com to {NEWSERVERNAME} for c:\windows\sysvol\domain using the DNS name {OLDSERVERNAME}.{DOMAIN-NAME}.com. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name {OLDSERVERNAME}.{DOMAIN-NAME}.com from this computer. [2] FRS is not running on {OLDSERVERNAME}.{DOMAIN-NAME}.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. Event Type: Warning Event Source: NTDS KCC Event Category: Knowledge Consistency Checker Event ID: 1308 Date: 5/9/2008 Time: 4:15:50 AM User: NT AUTHORITY\ANONYMOUS LOGON Computer: KEGERATOR Description: The Knowledge Consistency Checker (KCC) has detected that successive attempts to replicate with the following domain controller has consistently failed. Attempts: 2 Domain controller: CN=NTDS Settings,CN={OLDSERVERNAME},CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC={DOMAIN-NAME},DC=com Period of time (minutes): 122 The Connection object for this domain controller will be ignored, and a new temporary connection will be established to ensure that replication continues. Once replication with this domain controller resumes, the temporary connection will be removed. Additional Data Error value: 1722 The RPC server is unavailable. There are no DNS errors, both system are running DNS, and pointed to the correct servers (I do have my ISP's DNS also listed). This is a single server install so it will do everything for the domain. Any help is GREATLY apprecated, and more info will be supplied if needed. Thanks!! Tag: Scheduled Tasks Through Group Policy? Tag: 128412
  - 11
    - GPO to remove lock workstation option What GPO will hide, remove or grey out the option "lock computer" when users do ctrl+alt+del? thanks. Tag: Scheduled Tasks Through Group Policy? Tag: 128411
  - 12
    - LimitLogin 1.0 Installation Problems Hello I am currently trying to install LimitLogin 1.0 from Microsoft on a test domain. The installation went smoothly and both IIS and AD .msi both ran without any errors. My current problem is that no information seems to be sent from the client to the AD database. I have come to this conclusion because when examining a test user via the AD console. Tt states that no login information was found for the test user. Even though I have personally log in as this user. I have made sure that the login logoff scripts are ran whenever the test user is log into a computer. I am suspecting that something is stopping the data from going from the client to the server. But I have no clue where the problem truly lies. Has anyone ever experience this problem or knows how to solve it? I have the following IIS settings set up. But I do not know if these are the correct settings. IIS settings WSLimtLogin IIS Server is set to read write and directory browsing I have Enable Anonymous access I have checked the Integrated windows authentication Tag: Scheduled Tasks Through Group Policy? Tag: 128410
  - 13
    - adaminstall.exe answer file Can I add my own LDF to the adaminstall.exe answer file? I tried but the installation just quits. Tag: Scheduled Tasks Through Group Policy? Tag: 128403
  - 14
    - DHCP Hello techies, My DC is the only DHCP in our subnet and we have 2 gateways to connect to the data centre.My idea is to utilize both the links(2 gateways)...loadabalance them or rather utilize both the links... If my DHCP can give half the PC's the gateway as the first and the other half pc's the second gateway....It would be great! 2 gateways and one subnet...is there a way to do it?Scripting? Tools?anything?? Is there any way to do that with Windows 2003 DHCP server? Thanks in advance for any help... cheers Tag: Scheduled Tasks Through Group Policy? Tag: 128402
  - 15
    - Old computer name showing in group membership I recently renamed a server, lets just say from ServerA to ServerB. This server was a member of some local groups on another comptuer, lets call this WorkstationA. It was also a member of some groups in AD. Now all the groups in AD currently show the server with the new name "ServerB". Howerver the local group membership on WorkstationA still shows "ServerA". When I try to remove "ServerA" it lets me delete it just fine, I click Add, type in "ServerB" and it finds it ok, I then see it in the list. But as soon as I click Apply, it changes the name back to "ServerA" Does anyone know why this is happening and how to fix it? DNS shows everything is correct, group membership in AD is all correct. It's only this one workstation which keeps showing the old computer name. Thanks Tag: Scheduled Tasks Through Group Policy? Tag: 128400
  - 16
    - authentication with password hash only (.net) Is there any way to authenticate against AD with a user name and password hash (MD5) only? The code provided below authenticates with a password, but unfortunately I only have the hash (it's provided by a connecting system). Thanks in advance. private bool ActiveDirectoryAuthenticate(string userName, string password, string domain) { bool isAuthentic = false; try { DirectoryEntry entry = new DirectoryEntry("LDAP://" + domain, userName, password); object nativeObject = entry.NativeObject; isAuthentic = true; } catch (DirectoryServicesCOMException) { } catch { } return isAuthentic; } Tag: Scheduled Tasks Through Group Policy? Tag: 128397
  - 17
    - Changing replication partners mess I was formerly a single site, single domain, using 5 Windows 2000 DCs. For a couple of reasons, I'm placing Windows 2003 R2 DCs at my two remote sites (we'll call them REMOTE1 and REMOTE2). Both are connected back to main site (we'll call it MAIN) by 100MB microwave links (hub and spoke, if you will). I created two new sites, and associated the correct subnets to them, but I think I made a mistake by leaving the default site link with all three sites in them. The auto generated replication that took place was fine for REMOTE1 - it found a partner on a DC at MAIN. But REMOTE2 created a link to REMOTE1. Besides the extra hop and traffic on the microwave, problem is, since my physical connections are hub and spoke, if the microwave to REMOTE1 goes down, so does replication to REMOTE2. I tried manually creating replication partners the way I thought they should be (DC at REMOTE1 to DC at MAIN, DC at REMOTE2 to another DC at MAIN), but it doesn't appear as though the DCs at the remotes are picking up on the changes. And if I try to replicate manually, I get this error: The following error occurred during the attempt to synchronize the domain controllers: The naming context is in the process of being removed or is not replicated from the specified server. Then I got to thinking about the site links. If I had two site links, one with MAIN and REMOTE1 and the other with MAIN and REMOTE2, the auto generated replication partners probably would have come out fine, right? So I've done that...two site links now, each with two sites as above...but I still need to fix the above error. Should I just DCPROMO down the two DCs at the remote sites, delete the links I manually made, and because I have two site links properly defined everything should be okay? Thanks in advance, Bruce Tag: Scheduled Tasks Through Group Policy? Tag: 128390
  - 18
    - Home Folder Creation Is there away to create a homefolder using the display name instead of %username%. We have student account that are going to be numbers and we would like to have the display name as the home folder for easier lookup on the server folders. Is there a variable I can use instead of %username%? Thanks Ed Tag: Scheduled Tasks Through Group Policy? Tag: 128389
  - 19
    - PDC down - Strange Behaviour I have 2 domain controllers. Dc1 has PDC Emulator, RID Master and Infrastructure. Dc2 has the Schema Master and Domain Naming Master roles. yesterday for some reason Dc1 went down. We lost our internet connectivity as a result - for some reason ISA 2004 was not able to use DC2 and maintain internet connectivity. Also I was not able to connect to any for the servers via RDP - I just got the error that the domain is not available. However Dc2 is up and running? Is this normal behaviour? thanks Tag: Scheduled Tasks Through Group Policy? Tag: 128387
  - 20
    - NTDS KCC 1265 Can anyone help me figure out how to get rid of this event? It shows up every 15 minutes on each of 4 DC's in their respective sites. Win2K Server, 1 forest, 3 domains, 5 sites. The main hq site is unaffected. The problem is with the 4 remote sites connected by 256K links. They are all in the forest root domain. Star topology. The connectivity is fine between the sites. Any help is most sincerely appreciated. Event Type: Warning Event Source: NTDS KCC Event Category: (1) Event ID: 1265 Date: 5/9/2008 Time: 8:44:48 AM User: N/A Computer: SERVER02 Description: The attempt to establish a replication link with parameters Partition: DC="domain02 CNF:1294ba43-29dc-4b36-992c-b90ce93a0112",DC=local Source DSA DN: CN=NTDS Settings,CN=SERVER04,CN=Servers,CN=Site,CN=Sites,CN=Configuration,DC=domain01,DC=local Source DSA Address: 85913531-194c-4049-b02f-27c8dc6712d6._msdcs.domain01.local Inter-site Transport (if any): CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=domain01,DC=local failed with the following status: The file pointer cannot be set on the specified device or file. The record data is the status code. This operation will be retried. Data: 0000: 84 00 00 00 ?... Tag: Scheduled Tasks Through Group Policy? Tag: 128385
  - 21
    - Log into Active Direoctory with DOS? I am not sure if this can be done. Can you actually use a bootable network floppy to log into a domain? I can get an IP address, and I can actually map a drive using a local username and password on a Member Server, but I can't seem to log into the Active Directory Domain. Now i am thinking- is it even possible w/ Dos? Tag: Scheduled Tasks Through Group Policy? Tag: 128381
  - 22
    - Local Group Membership Removed - Restricted Groups Hi We have an issue where by a very small percentage of clients (no more than 30 out of 40,000) are having members removed from their local groups. We control most of the group members locally on these clients via restricted groups in a single GPO. We can see "policy change" and " account management" events on these clients that show the members being removed but we don't know by what. We do currently have a typo in the restricted groups of this GPO introduced by a migration table typo. This typo maps a service account (just a local user account on the client) as if its a local group on the client. This generates a Eventid1202 but can be explained I've seen this article, that refers to a AD object that has been removed being refereced in the resticted group causing a problem but can't actually get my head round whether its relavent. http://support.microsoft.com/kb/320099/en-us Can anyone suggest a way of captured whats actually removing these group members, bearing in mind that its only happening on a very small number of clients. We already have the event tracking the removal just don't know by what Craig ps, the clients do eventually fix themselves which Im assuming is after the 16hours security settings refresh Tag: Scheduled Tasks Through Group Policy? Tag: 128372
  - 23
    - Cannot able to create child domain I am trying to create child domain to a exiting domin i am getting below error the operation failed because Active directory could not create object CN=schild,CN=Partions,CN=Configaration,DC=cmttest,DC=com,check the event log for posible system errors. The FSMO roles ownership could be verified because its directory partitions has not replicated successfully with utlist one replication partner. And event log Details. Internal error: An active directory error has occured Addtional data error value decimal -1073741823 error id 3000e54 Please help me to slove this problem Tag: Scheduled Tasks Through Group Policy? Tag: 128368
  - 24
    - AD Domain Trust is unsafe! Hi. We are facing a situation with a particular subsidiary company. We have a sort of a resource Forest with a centralized Sharepoint Server. We requested each subsidiary to create a one-way AD trust with the resource forest in order to authenticate their users on the site. All but one subsidiary is giving us problems. Mostly because they semi-outsource many aspects of their IT operations including security; and the oursourcing company is worried about any breaches that it might be accountable for. The main concern it seems is with opening the RPC ports; but all we need is for them to open up one of their domain controllers to the resource forest DCs and some servers and apply a registry setting that fixes the AD RPC port. Still, they won't budge and instead had us implement ADFS. We have implemented ADFS ok and they can authenticate, but we are having issues with ADFS and MOSS user profiles. And I would like them to get onboard with the AD Trust. In their recent response, they claim: 1- ADFS is the world wide accepted method for connecting companies to exchange information over the Internet. ** But we have a private link that doesn't go through the Internet and is protected by firewalls! 2-They calim their security policy does not allow using AD trust becuse is it not safe and can facilitate the hacking of their data?!! 3-They also claim that Microsoft recommended we standardize on ADFS for authenticating all of our subsidiaries instead of AD trust!! (I will have to investigate with the local MS reps) So, my question is, if we are all companies under the same umbrella and a reasonable amount of trust/security policies can be agreed on, then would an AD Trust (one-way at that!!) be considered that un-safe? Tag: Scheduled Tasks Through Group Policy? Tag: 128366
  - 25
    - How to list which users have been authenticated to a specified DC ? Hello, I would like to know how can we list which users have been authenticated to a specified DC please ? Is there any command that will do that ? I am not talking about an echo %logonserver% command as this is more for a client point of view. I would like to know that from the DC itself. Thank you -- Pascal Tag: Scheduled Tasks Through Group Policy? Tag: 128365
- Next
  - 1
    - Query - Export Enabled / Disabled and Created Date I am using Active Directory Users and Computers. I've created a Query to show all of my users. I would like to export Name, enabled / disabled and the date the user object was created. The name is fine. * Disabled shows as a red x, but I would like to show it as a column so I can export it. * Is there a way to add a column for the date the user was created? Tag: Scheduled Tasks Through Group Policy? Tag: 128356
  - 2
    - Sessions listing shows connected computers as IP address, not mach Windows Server 2003 native Domain and all users are XP SP2. Users having difficulties sporadically accessing file servers and roaming profiles getting corrupted. When checking sessions via Computer Management on File server containing roaming profiles, listing identifies connected computers with IP address, not with machine name. Is this normal? Is the server having difficulties translating IP addresses to machine name? Tag: Scheduled Tasks Through Group Policy? Tag: 128354
  - 3
    - USN Rollback Event ID 2103 Hi, We had a USN rollback on one of our main DC (called DC1)( only two DCs into our Active Directory). Problems started to occure with the login process, adding new users and link to exchange mailboxes. We had to removed the DC2 from the AD and kept the DC1 as the only DC of our Active Directory. Now that I have only one domain controller and everytime I reboot that server, a Event ID 2103 comes up. ( The Active directory database has been restored using an ussupported procedure. Active Directory will be unable to log on users while this condition persist. As a result the Net logon service as paused.) Except that error everything is fine, no more problems with my users. Now my question: Can I fix that error now that I have only one DC with USN rollback? tx -- Serge Lavictoire Networking Consultant Tag: Scheduled Tasks Through Group Policy? Tag: 128351
  - 4
    - GPO defned Interactive Logon message truncated Hi all, I am facing a strange behavior which I think is a sort of bug. I have a interactive logon legal notice which has one line in French and another one in English. It appears that each line shows the first 512character and truncated after. But all together is more than 512 char... Also in the GPMC, the text shows properly. 633 chars + 539 chars of each line. Editing the GPO itself does not show the proper lenght at first but it does show everything if I actually add or modify a char. Does anyone know of any fix for that? Tag: Scheduled Tasks Through Group Policy? Tag: 128349
  - 5
    - Changing user name yields inconsistent results with folder redirec Hi, I am having an issue with redirected folders after changing user names. Here's the history: We created folders using â??home foldersâ??, as follows: \\server\users\office\joe_cool Then we manually created the â??My Documentsâ?? folder as follows: \\server\users\office\Joe_cool\My Documents After the first logon/logoff, the â??My Documentsâ?? folder name changes to the user nameâ??s docs: \\server\users\office\Joe_Cool\Joe_Coolâ??s Documents Then we use a group policy to redirect the My Documents to the following path: \\server\users\office\%username%\My Documents That has worked great, for years. Now we are changing the user names to the format â??joe1234â??. After logon/logoff with the changed name, some of the userâ??s â??My Documents are changing to the following format: \\server\users\office\joe_cool\joe1234â??s documents While others remain as: \\server\users\office\joe_cool\joe_coolâ??s Documents This is happening with users that are in the same OU and have the same NTFS permissions on their home folders. In most cases it doesnâ??t matter but in one case the user was locked out of his â??My Documentsâ?? folder because of an issue with the path. Can you think of any reason why we are getting different results although we are doing the same thing with every user? -- bb Tag: Scheduled Tasks Through Group Policy? Tag: 128346
  - 6
    - 2003 Forest Trust Issues - Please Help Dear All, We have two native Windows 2003 Forests with a two way non-transitive trust configured between them. Certainly functionality especially within AD isn't available i.e we cannot add groups/users from Domain A to Domain B or vica-versa. The only exception is local groups we can add users or groups from Domain A and Domain B to the other. But this functionality isn't available for global or universal groups which would enable us to effectively share resources between both organisations. DCDIAG's result in the Outbound Secure Channels test failing. There was an issue with time synchronisation between the two forests an approximate four minute difference. This has now been addressed but upon rerunning the DCDIAG the exact same errors occur. I believe it could be DNS related, even though we have secondary zones for Domain A in Domain B and vica-verca. Can anyone advise? Below are the errors we receive in a DCDIAG: Could not Check secure channel from DC1 Domain A to Domain B Win32 Error 1355 Could not Query Trusted Domain :Win32 Error 2 Any help or advice is greatly received. Regards, Darren Tag: Scheduled Tasks Through Group Policy? Tag: 128341
  - 7
    - Password complexity policy Hello: I have a Windows 2003 domain with multiple domain controllers. What is the best approach to configure the password complexity and replicate the policy to the domain controllers? I am a novice to Active Directory. Thanks, Mark Tag: Scheduled Tasks Through Group Policy? Tag: 128338
  - 8
    - Administrator Account Locking Out Hi Everyone, We have found a developing problem in our mixed mode environment of Windows 2003 Servers and Windows 2000 servers. On both of my Windows 2000 servers, I can watch using the ALTools from Microsoft, specifically the lockout status tool, the Administrator account count up and lock out every few minutes. This does not seem to affect performance of any of my system dramatically, but I'm concerned why it is doing this. I have looked in both the event logs, turned on netlogon logging, etc. but can find no reason for it. Can someone point me in the correct direction for finding a log that will show me where the source of the attempted login is coming from? Then I can possibly troubleshoot the cause... Thanks in advance, Ken Tag: Scheduled Tasks Through Group Policy? Tag: 128325
  - 9
    - Domain DC Time I thought that all computers on a Domaain were supposed to sync up with their DC as their primary NTP server. Why is it that when i run net time /querysntp i get this then: The current SNTP value is: time.windows.com ; shouldnt it be the ip or hostname of my DC? Tag: Scheduled Tasks Through Group Policy? Tag: 128321
  - 10
    - windows 2000 gp & vista Hi, Is it possible to use windows 2000 server group policy to deploy a software on windows vista? I did add an msi packeg to gp, when we log to win XP sp2 the software start to install, but when log to our windows vista, nothing heppend. Thanks, Shahin Tag: Scheduled Tasks Through Group Policy? Tag: 128314
  - 11
    - DNS is Causing real Problems please help..! Dear all I think my issue is dns related as no permission changes have changed on sysvol etc. Network is running really slow. Getting the standard errors on workstations 1097 (Windows cannot find the machine account, No authority could be contacted for authentication. .) 1030 (Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine) 1054 (Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. . Group Policy processing aborted. ) have 3 DCs in total (one is 2000svr) the 2 Win 2003 DCs act as DNS servers. when logged on as a std user, i can ping the domain name, the servers by FQDN, access the sysvol folders by \\DC_servername\sysvol and \\domainname\sysvol RSOP.msc (ComputerConfiguration) however returns the error ----------------------------------------------------------- Group Policy Infrastructure failed due to the error listed below. No authority could be contacted for authentication. Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available. can anyone please help..! kr Paul.. -- PaulK ------------------------------------------------------------------------ PaulK's Profile: http://forums.techarena.in/member.php?userid=48567 View this thread: http://forums.techarena.in/showthread.php?t=964016 http://forums.techarena.in Tag: Scheduled Tasks Through Group Policy? Tag: 128313
  - 12
    - Which FSMO role is critical Hi, I just want to know, in a production environment which FSMO role will cause more critical issue immediately if it is down Regards RANG Tag: Scheduled Tasks Through Group Policy? Tag: 128311
  - 13
    - creating trust relationship with only DC=Domain Hi. this company has just bought out another company, i now need to create a trust relationship between the two companys, ours is DC=domain1,DC=com the other companys domain is DC=domain2 my question is will the trust relationship work with a domain without the .extension. if not how can i set up the trust. They are both WIN2K3 Domains Thanks Tag: Scheduled Tasks Through Group Policy? Tag: 128310
  - 14
    - Sysvol missing on 2nd DC Greetings, After running a netdiag on my second domain controller, i seem to be missing the sysvol volume on it, and also the dns test is faling as well. how could this happen? do i have to demote dc2 and then re-promote it? Tag: Scheduled Tasks Through Group Policy? Tag: 128293
  - 15
    - There are currently no logon servers available This is a multi-part message in MIME format. ------=_NextPart_000_0006_01C8B096.4B4E8840 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable heres what happend, i have 2 Win 2K3 DC's both of which are running dns. = Dc-01 went down and i couldnt logon to the domain with Dc-02 because it = said "there are currently no logon servers available". Should this have = NOT happend since DC-02 is using its IP as the primary dns server, and = it should've been able to authenticate to itself. Heres what was in the = event log: The Security System detected an authentication error for the server = LDAP/dc-02. The failure code from authentication protocol Kerberos was = "There are currently no logon servers available to service the logon = request. dc-01 - ip. 192.168.1.2 < uses it's IP as the primary DNS server dc-02 - ip. 192.168.1.3 < uses it's IP as the primary DNS server, and = uses dc-01's ip as the secondary dns server ------=_NextPart_000_0006_01C8B096.4B4E8840 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.6000.16608" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY> <DIV><FONT face=3DArial size=3D2>heres what happend, i have 2 Win 2K3 = DC's both of=20 which are running dns. Dc-01 went down and i couldnt logon to the domain = with=20 Dc-02 because it said "there are currently no logon servers available". = Should=20 this have NOT happend since DC-02 is using its IP as the primary dns = server, and=20 it should've been able to authenticate to itself. Heres what was in the = event=20 log:</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>The Security System detected an = authentication=20 error for the server LDAP/dc-02. The failure code from authentication = protocol=20 Kerberos was "There are currently no logon servers available to service = the=20 logon request.</FONT></DIV> <DIV> <P><FONT face=3DArial size=3D2>dc-01 - ip. 192.168.1.2 < uses it's IP = as the=20 primary DNS server</FONT></P></DIV> <DIV><FONT face=3DArial size=3D2>dc-02 - ip. 192.168.1.3 < uses it's = IP as the=20 primary DNS server, and uses dc-01's ip as the secondary dns = server</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV></BODY></HTML> ------=_NextPart_000_0006_01C8B096.4B4E8840-- Tag: Scheduled Tasks Through Group Policy? Tag: 128284
  - 16
    - Active Directory interoperability with other systems. Hi, I am not too much familiar with Active Directory capabilities, my question is: 1. Is it possible to configure Active Directory in a trigger like mode where if a new user is created AD would add this info into a csv file or SQL Server table, or if a user was deleted from AD it would also export this info somehow. We would like to use this info in other systems and to build that kind of automation. 2.If this is not possible are there any built-in tools in AD that could be scheduled to run automatically to export certain fields for all the users in AD into a csv file or Sql Server Table Please let me know if my questions are not clear, essentially I am looking for automated solution where other systems would be synchronized with AD info when users are added/deleted from AD, so other systems would be aware of that. Thank you, Vadim Tag: Scheduled Tasks Through Group Policy? Tag: 128276
  - 17
    - Duplicate name on network, but cannot find object I have a Netware server with CIFS running called "WTWGRAPHICS2." It's not connected to the Windows 2003 AD. I would like to remove this computer and replace it with a windows box, also called "WTWGRAPHICS2." However, I get the error message "You were not connected to the network because a duplicate name exists on the network." I searched AD U&C, DNS and WINS,and hosts file for mention of WTWGRAPHICS2, but I can't find anything. Any ideas appreciated. Jim Tag: Scheduled Tasks Through Group Policy? Tag: 128275
  - 18
    - Find easy what you need for windows(98, ME, xp, vista) If you need some tools for windows or you have a problem, this is the right spot ... http://microsoft-windows-tips.blogspot.com/ Tag: Scheduled Tasks Through Group Policy? Tag: 128271
  - 19
    - Moving File Server Into New Domain Good Afternoon Everyone, Iâ??m going through a domain migration and Iâ??ve done users, workstations, Exchange, and now its time for the file servers. I have a trust between Domain OLD and Domain NEW. For the file servers Iâ??ve replicated user permissions on each folder so that any folder with an entry for dOLD\user now also has an entry for dNEW\user. This has worked great but since my goal is to retire Domain OLD I want to move the file sever into the new domain. My question is this: If I move the file server from Domain OLD to Domain NEW will my permission erase? TIA, Ray Tag: Scheduled Tasks Through Group Policy? Tag: 128268
  - 20
    - dcgpofix doesn't work Hi All- I have a corrupted domain gpo and so i ran dcgpofix as a method of disaster recovery (i don't have a backup - that's a different story). I ran the following command: dcgpofix /ignoreschema /target:domain I get an error that says the following: Unable to read EFS certificate from registry.pol Does anyone have any ideas on what to do next? I'm seeing that the domain policy is no longer being applied to any of the computers in the domain. Thanks. Tag: Scheduled Tasks Through Group Policy? Tag: 128260
  - 21
    - Quesiton on Group Policy Loopback Processing Hi all, I am new to GPOs and I have a problem with Group Policy Loopback Processing. I am dealing with two OUs, one called LAB101 (which only has computer accounts in it) and one called STAFF (which houses all of my users). For the STAFF OU I added a GPO called "STAFF GPO" but I have not configured anything in it. For the LAB101 OU I added a GPO called "LAB101 GPO". In the LAB101 GPO I enabled Group Policy Loopback Processing (mode = replace). I did this because I want a User logon script to run whenever a user logs into the machine. So, I also added a logon script in the user configuration of the LAB101 GPO. However, when I log into a LAB101 machine, the script never runs. Am I missing a step? Any help is appreciated, thanks. Tag: Scheduled Tasks Through Group Policy? Tag: 128257
  - 22
    - Accounts randomly loosing membership to a group in DL's security Hi, We have a Windows 2003 shop. We have two servers where one user looses his membership to a Security Group that we have setup under DLs Security. Why is this happening? The PC's in question are different operating systems (2000 and Vista) so I highly doubt that that has anything to do with it. Both servers are 2003 Standard R2. Thoughts? Thank you. -Rachel Tag: Scheduled Tasks Through Group Policy? Tag: 128255
  - 23
    - Dfs problem Hi all, I have 2 domain controllers in my network (hq.company.srh, fsv.company.srh) . Operations master role (RID,PDC,Infrastructure) belongs to only one domain controller-hq.company.srh. I am creating a DFS root on hq.company.srh something like company. I can log in to the domain using my domain account from a computer which is not a domain computer without problems but when I try to enter the directory of DFS I get an error saying "Configuration information cannot be read from the domain controller either because the machine is unavailable or access has been denied" Normally if I wrote \\company.srh to open up the dfs root. Instead of hq.company.srh comes up fsv.company.srh. I have tried to create dfs root on fsv.company.srh. I can log on from the client computer with no problems What do you think the problem is? Thank you. Tag: Scheduled Tasks Through Group Policy? Tag: 128254
  - 24
    - DHCP dynamically updating internal DNS servers instead of authoritative? Hi there. Say you have a domain: domain.com which is out there on the Internet doing its thing, et cetera but you also use that domain internally for your active directory (which is probably not ideal). Domain.com is hosted on your cluster of authoritative nameservers and has records related to your online presence such as MX records, A records for your website and other public services, et cetera. Lets say that you're running DHCP/DNS in your active directory and you would like new registrations to only be added to the 'local' version of domain.com and not the Internet version of domain.com, I realize that the DHCP server (and perhaps windows in general) sends dynamic updates to the authoritative nameservers, but I would rather not for reasons of security through obscurity publish our internal DNS to the Internet. I realize the right way to do this would've probably been to use a subdomain such as internal.domain.com or corp.domain.com but this was all established 10 years ago. So the question is, is it possible to have the DHCP server send updates to the local DNS servers rather than the actual authoritative DNS servers? thanks, Andy Tag: Scheduled Tasks Through Group Policy? Tag: 128247
  - 25
    - GPO Queston Hi all, I have a batch script that I need to run that sets the default printer, it contains the following line: rundll32 printui.dll,PrintUIEntry /y /n "115 Lab 4200" My thinking is that I would make an OU for the Room 115 lab and put all of the machines in that lab in the OU. I then made a GPO for that OU and added the script to User Configuration -> logon Scripts, hoping it would execute this script along with the logon script set in the properties of the users. However, it does not. What am I doing wrong? Any help is appreciated, thanks. Tag: Scheduled Tasks Through Group Policy? Tag: 128246

Hi all,

Is it possible to setup a Scheduled Task using Group Policy? I need to make
a task that shuts down all of the computers at the School, and I would like
to be able to change the time I set in case something comes up. Is that
possible?

Any help is appreciated, thanks.

Top

Re: Scheduled Tasks Through Group Policy? by Meinolf

Meinolf
Mon May 12 10:02:10 PDT 2008

Hello supersonic_oasis,

See your other posting and please do not multipost, if possible use a real
newsgroup reader and crosspost.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi all,
>
> Is it possible to setup a Scheduled Task using Group Policy? I need
> to make a task that shuts down all of the computers at the School, and
> I would like to be able to change the time I set in case something
> comes up. Is that possible?
>
> Any help is appreciated, thanks.
>

Top