Windows Server 2008 and 2003 GC's + Exchange 2003

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - EVT ID 1053 at logon Dear All i constantly receive event id 1053 when logging on to my 2003 domain. Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. swiftly followed by ID 1054 Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. This results in logon scripts not running. Also if i try to have someone else log on to my pc they get specified domain could not be contacted.. (i am domain admin and this only appears on my pc as far as i know) GPupdate from the command line works fine its just at logon... Anyone have any ideas at all !!! Help please Kr Paul Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128173
  - 2
    - clear current members of a distrib grp and add new members from a 2003 AD, Native forest and Domain. XP SP2 clients. I need to script up a way of clearing all current members for an AD Distribution Group and then adding back in all the members from a .txt or .csv file. The script needs to be able to be run by users that have permissions to the AD group object. Any ideas? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128166
  - 3
    - question about domain rename Hello, I just finished reading the Step-by-Step Guide to Implementing Domain Rename publication from Microsoft. Wouldn't it be easier to just remove the hosts from the domain, demote the domain controllers, rename the DCs, and re-promote them? Thanks! Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128157
  - 4
    - Delegated account control is getting access denied Hi everyone, I'll skip over some of the things I have tried. But basically the situation is this: I create a barnd new account and delegate these controls for the account specifically:- allow reset account allow read pwdLastSet allow write pwdLastSet Now that user can select and tick the box for 'user must change password at next logon' for any user in the container that delegation has been set up for. However once this has been selected and applied that user cannot remove the tick form the tick box - same object. You get an error - The following Active Directory error occurred: Access is denied But there are no explicit denies for this user and the delegation that has been set up. Plus if there was surely you would not be able to tick the option in the first place. Anyone have experience with this sort of issue? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128154
  - 5
    - deleted group policie still active hi, i have a strange problem. i created a group policie to deploy printers. after a while i decided to use another strategie and deleted the policie. strange thing is: meanwhile i already deleted the gp AND the printers but they still get deployed to all the workstations. so it seems that even i can not access the policie anymore, it still ist active somewhere. how can i get rid of this. i have no idea where to look at. please help!! regards nico Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128148
  - 6
    - Kerberos NTLM Is there a reason that IE(IE7) would send NTLM instead of KERBEROS after setting IE as follows? Is thee something else i have to lok for? 1. put the requesting site in IE to local-network 2. in the IE extended security option enable Integrated Windows Authentication To configure Intranet Authentication: 1. Click the Security tab, click Local intranet, and then click Custom Level. 2. In the Security Settings dialog box, scroll down to the User Authentication section of the list. 3. Select Automatic logon only in Intranet zone. This setting prevents users from having to re-enter logon credentials; a key piece to this solution. 4. Click OK to close the Security Settings dialog box. In addition to the previous settings, one additional setting is required if you are running Internet Explorer 6.0. 1. In Internet Explorer, click Tools, and then click Internet Options. 2. Click the Advanced tab. 3. Scroll down to the Security section. 4. Make sure that Enable Integrated Windows Authentication (requires restart) is checked, and then click OK. 5. If this box was not checked, restart the browser. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128145
  - 7
    - Child domain and DNS Hello list. In a Windows 2003 R2 forest I've added with dcpromo a child domain of my root domain. On the Root's DNS, the child domain appears as a subdomain. I'd like it to appear as a deleagate zone of the child domain pointed to the child DC's DNS server. my idea is 1. create the zone on the child DC's DNS by manually copying all entries from the root's DNS 2. delete the subdomain on the root DNS 3. create a delegated zone in the root domain for the child zone. Is it a good solution? Is there any better solution with a 2003 (native mode) forest? thank you. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128141
  - 8
    - How to default to using KCC Hi, we are running into some issues with replication in AD- apparently some manual entries have been added to our replication topology - we are talking 13 sites all across the US Is there a way to default to only using the KCC to fix all this manual stuff? What is the correct procedure.? any help will be appeciated? Pierre Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128138
  - 9
    - Restricting FTP access via windows Explorer You guys may have some trick to do this. I use Group policy to restrict almost everything. I would like to restrict users to stop using FTP access from their machine. I used GPO to restrict ftp, http, in connection setting. That restrict the user from internet explorer or other browser. However, user can still access using windows explorer and type in address bar like ftp://servername .com. and this will ask username and password and can easily access. Is ftp client also built in windows explorer ? If I want to restrict ftp for those particular users in OU how do i do this ? Thanks AT Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128131
  - 10
    - Error Userenv Netlogon without WINS Hello, I have a ADS in Win2k3 Mode. Computers are correctly registred on DC. If I log onto a Membercomputer the following Errors appear - even if WINS is not registred on the NIC. Netlogon "Der Computer konnte eine sichere Sitzung mit einem DomÃ¤nencontroller in der DomÃ¤ne TEST aufgrund der folgenden Ursache: Es sind momentan keine Anmeldeserver zum Verarbeiten der Anmeldeanforderung verfÃ¼gbar. nicht einrichten. ..." Userenv "Der Benutzer oder der Computername kann nicht ermittelt werden. (Die angegebene DomÃ¤ne ist nicht vorhanden, oder es konnte keine Verbindung hergestellt werden. ). Die Verarbeitung der Gruppenrichtlinie wurde abgebrochen." If Wins is activated on the ComputerNIC no Error apears What's the matter? Thanks Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128126
  - 11
    - AD Sync Problem Hi, I have a situation. I just got customer who had deployed 2 x 2K3 R2 AD and had it sync with each other at the main office. They also deployed exchange 2007 at the main office. However, they split the network between 2 sites and have moved 1 of the AD to a site office, but these 2 AD have not been connected for the last 3 months. To access the domain and exchange, they create the same new user account on the 2 AD server and exhange 2007. So site office users login in to the site office AD, but access exchange via the main office AD and exhange. Question: If they connect the network together now and tried to sync the 2 AD, will the new accounts created on both sites conflict with each other or will they just sync with each other and the users on both sides would continue to work as per normal? Thanks. Gilbert Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128123
  - 12
    - The domain name has not been registered with InterNIC Hi, We have a single domain with 2 DCs at the Datacentre. No other DC at present. While running command - "dcdiag" or "netdiag" there are no errors. When i run "dnslint" command i get the below error. we are using 198.x.x.x range for our internal users. ############ C:\Documents and Settings\ABC>dnslint /d domain.com DNSLint will attempt to verify the DNS entries for: domain.com This process may take several minutes to complete................... No match for domain name found The domain name has not been registered with InterNIC ############# Please guide. Thanks. abc. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128119
  - 13
    - NTDS Automatic Entries We are just emerging from resolving issues with lingering objects and now have A/D replicating without errors in replmon. When I look at Sites and Services under one of my domain controllers, the NTDS Settings show a few <automatically generated> connections and about six others that show the server name in both the Name and From Server columns. I am thinking these are there because we manually moved these connections during the process of troubleshooting our replication issues (and we had plenty). My question is, can I delete these non-automatic entries and have A/D reconnect everything using the automatically generated type? We have had solid, reliable replication for about 5 days now and I am confident that all DCs are communicating properly across my WAN. Thanks in advance for any thoughts or comments! Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128117
  - 14
    - add a trusted domain Hello, I have a central local domain, servers W2003, AD, .... We recently buy a company, equiped with a SBS2003, AD, ... We are linked to this company via MPLS/SDSL. But employee located at the company can't access ressource on our local domain without relogin to our domain. So, I'm looking to make a trust. But from my local domain, when I try to add it, it say that the remote domain can not be contacted. In my local domain, I added a dns entry like "Name.local" (it's the name of the remote AD) pointing to the SBS2003. so, I can't ping name.local. What should I do more to add this trust ? Thx Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128116
  - 15
    - Linux Users Problems Ok the basic layout: We are currently running a Samba 3 based domain, and slowly moving towards a 2003 based AD. Almost everything is in place and working, except for one thing.. Unix/Linux systems, and getting them on the domain, properly. The Unix attributes tabs show UP in Users and Computers, and all the options are there, you can make selections, etc. But the moment you hit the ol apply and ok, the window closes, and every setting you've made.. vanishes. No errors, no nothing, but NO changes made on the Unix attributes for users/group/computers, none of those changes seem to save in anyway. I'm at a bit of a loss anyone have any background with this? Or have an idea that I've missed? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128114
  - 16
    - Domain Controller Failover Hello. We have 2 DC in our forest. Today after shutting down the 1st for maintenance, all users were unable to login. Are there any whitepapers you can suggest? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128110
  - 17
    - ADAM Service Account I am trying to install ADAM in our domain on two seperate servers. One will be the Master and the other will be a replica. I will be using a domain account for the service. What permissions are necessary for the ADAM service account in a domain? Do I just need to make it an admin on the local box? Please advise.... Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128105
  - 18
    - What is ADLDS Hello I'm wondering what ADLDS (previous named ADAM) can be used for? I can't seem to find a good document that explains it pro's and con's. Could anyone please assist? Regards Per-Torben Sørensen Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128104
  - 19
    - How to know when an AD object has been deleted ? Hi, I would like to know which day and approximatively at what time an object has been deleted. I think that it is possible with the repadmin command but I dont find how. Please could you help me ? Thank you -- Pascal Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128103
  - 20
    - Removing failed DC from AD Integrated Zones Hi there, One of our Windows 2000 domain controllers died last week so we had to remove it from AD as per the following article -> http://support.microsoft.com/kb/216498. The problem is we have approximately 100 Active Directly integrated DNS zones & the 'old' DC is still listed as a Name Server (NS) in all of them. Is there a quick & easy to remove this entry or do we need to remove it manually from all of the zones? Any suggestions/comments are greatly appreciated. Regards, Veets Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128096
  - 21
    - HOWTO merge multiple GPO's to one new GPO Does anyone know a way howto merge multiple GPO's to one new GPO. I want to merge multiple GPO's with some security, system and administrative policies to one new GPO. I also want to merge the multiple "regedit.pol" files that are now part of individual GPO's into one new GPO. The GPMC does not provide this function with import. The import overwrites the whole GPO. VB scripts are also welcome. Thanx in advance Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128095
  - 22
    - prevent some users to download mp3 and specified files Hi how can prevent some users to download mp3 and specified files to desktop and their home folder. Thanks Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128092
  - 23
    - Hot Shop Tissot Watches Ballade - Tissot Minimum Price Hot Shop Tissot Watches Ballade - Tissot Minimum Price Hot Watch Shop : http://www.hotwatchshop.com Tissot Watches : http://www.hotwatchshop.com/Tissot-Watches.html Tissot Watches Ballade : http://www.hotwatchshop.com/Tissot-Watches-Ballade-Watch.html Tissot Watches Ballade All Products : Tissot Men's Ballade III watch #T97148152 : http://www.hotwatchshop.com/Tissot-wristwatch-9033.html Tissot Men's Ballade III watch #T97.5.483.31 : http://www.hotwatchshop.com/Tissot-wristwatch-9034.html Tissot Men's Ballade III watch #T97148331 : http://www.hotwatchshop.com/Tissot-wristwatch-9035.html Tissot Men's Ballade III watch #T97148142 : http://www.hotwatchshop.com/Tissot-wristwatch-9036.html Tissot Men's Ballade III watch #T97148132 : http://www.hotwatchshop.com/Tissot-wristwatch-9037.html Tissot Men's Watches Ballade III T97.1.483.31 - AA : http://www.hotwatchshop.com/Tissot-wristwatch-9038.html Tissot Men's Watches Ballade III T97.5.483.31 - AA : http://www.hotwatchshop.com/Tissot-wristwatch-9039.html Tissot Men's Ballade III watch #T97248132 : http://www.hotwatchshop.com/Tissot-wristwatch-9040.html Tissot Men's Ballade III watch #T97148351 : http://www.hotwatchshop.com/Tissot-wristwatch-9041.html The Same Tissot Watches Series : Tissot Happy Chic Baguette : http://www.hotwatchshop.com/Tissot-Happy-Chic-Baguette-Watch.html Tissot Happy Chic Rectangular : http://www.hotwatchshop.com/Tissot-Happy-Chic-Rectangular-Watch.html Tissot Porto Chronograph : http://www.hotwatchshop.com/Tissot-Porto-Chronograph-Watch.html Tissot Watches Ballade : http://www.hotwatchshop.com/Tissot-Watches-Ballade-Watch.html Tissot Watches Ballade III : http://www.hotwatchshop.com/Tissot-Watches-Ballade-III-Watch.html Tissot Watches Bascule : http://www.hotwatchshop.com/Tissot-Watches-Bascule-Watch.html Tissot Watches Belle Tonneau : http://www.hotwatchshop.com/Tissot-Watches-Belle-Tonneau-Watch.html Tissot Watches Flower Power : http://www.hotwatchshop.com/Tissot-Watches-Flower-Power-Watch.html Tissot Watches Generosi-T : http://www.hotwatchshop.com/Tissot-Watches-Generosi-T-Watch.html Tissot Watches Grain De Folie : http://www.hotwatchshop.com/Tissot-Watches-Grain-De-Folie-Watch.html Tissot Watches Le Locle : http://www.hotwatchshop.com/Tissot-Watches-Le-Locle-Watch.html Tissot Watches Navigator : http://www.hotwatchshop.com/Tissot-Watches-Navigator-Watch.html Tissot Watches Oval T : http://www.hotwatchshop.com/Tissot-Watches-Oval-T-Watch.html Tissot Watches PR100X : http://www.hotwatchshop.com/Tissot-Watches-PR100X-Watch.html Tissot Watches PR50 : http://www.hotwatchshop.com/Tissot-Watches-PR50-Watch.html Tissot Watches PRC100 : http://www.hotwatchshop.com/Tissot-Watches-PRC100-Watch.html Tissot Watches PRC200 : http://www.hotwatchshop.com/Tissot-Watches-PRC200-Watch.html Tissot Watches Precious Flower : http://www.hotwatchshop.com/Tissot-Watches-Precious-Flower-Watch.html Tissot Watches PRS200 : http://www.hotwatchshop.com/Tissot-Watches-PRS200-Watch.html Tissot Watches PRS516 : http://www.hotwatchshop.com/Tissot-Watches-PRS516-Watch.html Tissot Watches Quadrato : http://www.hotwatchshop.com/Tissot-Watches-Quadrato-Watch.html Tissot Watches Seastar : http://www.hotwatchshop.com/Tissot-Watches-Seastar-Watch.html Tissot Watches Six-T : http://www.hotwatchshop.com/Tissot-Watches-Six-T-Watch.html Tissot Watches T-Moments : http://www.hotwatchshop.com/Tissot-Watches-T-Moments-Watch.html Tissot Watches T-Race : http://www.hotwatchshop.com/Tissot-Watches-T-Race-Watch.html Tissot Watches T-Round : http://www.hotwatchshop.com/Tissot-Watches-T-Round-Watch.html Tissot Watches T-Tonneau : http://www.hotwatchshop.com/Tissot-Watches-T-Tonneau-Watch.html Tissot Watches T-Touch : http://www.hotwatchshop.com/Tissot-Watches-T-Touch-Watch.html Tissot Watches T-Touch Nascar : http://www.hotwatchshop.com/Tissot-Watches-T-Touch-Nascar-Watch.html Tissot Watches T-Tracx : http://www.hotwatchshop.com/Tissot-Watches-T-Tracx-Watch.html Tissot Watches T-Wave : http://www.hotwatchshop.com/Tissot-Watches-T-Wave-Watch.html Tissot Watches TXL : http://www.hotwatchshop.com/Tissot-Watches-TXL-Watch.html Tissot Watches V8 : http://www.hotwatchshop.com/Tissot-Watches-V8-Watch.html Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128089
  - 24
    - Hot Shop Invicta Lupah Watches - Invicta Minimum Price Hot Shop Invicta Lupah Watches - Invicta Minimum Price Hot Watch Shop : http://www.hotwatchshop.com Invicta Watches : http://www.hotwatchshop.com/Invicta-Watches.html Invicta Lupah Watches : http://www.hotwatchshop.com/Invicta-Lupah-Watches-Watch.html Invicta Lupah Watches All Products : Invicta Lupah Classic Diamond Mens Watch ZW9896 : http://www.hotwatchshop.com/Invicta-wristwatch-9671.html Invicta 9820 Lupah Unisex Watch : http://www.hotwatchshop.com/Invicta-wristwatch-9672.html Invicta Lupah Diamond Chronograph Mens Watch ZW9895 : http://www.hotwatchshop.com/Invicta-wristwatch-9673.html Invicta Lupah Chronograph Mens Watch 9816 : http://www.hotwatchshop.com/Invicta-wristwatch-9674.html Invicta Baby Lupah Watch 2007 : http://www.hotwatchshop.com/Invicta-wristwatch-9675.html Invicta 8008 Lupah Mens Watch : http://www.hotwatchshop.com/Invicta-wristwatch-9676.html Invicta 2663 Lupah Horizon Chrono Mens Watch : http://www.hotwatchshop.com/Invicta-wristwatch-9677.html Invicta Lupah Watch 2183 : http://www.hotwatchshop.com/Invicta-wristwatch-9678.html Invicta Lupah Chronograph Mens Watch 9814 : http://www.hotwatchshop.com/Invicta-wristwatch-9679.html Invicta Lupah Watch 9818 : http://www.hotwatchshop.com/Invicta-wristwatch-9680.html Invicta Lupah Watch 9817 : http://www.hotwatchshop.com/Invicta-wristwatch-9681.html Invicta Lupah Watch 9815 : http://www.hotwatchshop.com/Invicta-wristwatch-9682.html Invicta Men's Lupah Metal Goldplated Chronograph Watch 3386 : http://www.hotwatchshop.com/Invicta-wristwatch-9683.html Invicta Women's Lupah Pink Ribbon Diamond Watch 2261/IS529 : http://www.hotwatchshop.com/Invicta-wristwatch-9684.html The Same Invicta Watches Series : Invicta Lupah Diver Watches : http://www.hotwatchshop.com/Invicta-Lupah-Diver-Watches-Watch.html Invicta Lady Lupah Watches : http://www.hotwatchshop.com/Invicta-Lady-Lupah-Watches-Watch.html Invicta Baby Lupah Watches : http://www.hotwatchshop.com/Invicta-Baby-Lupah-Watches-Watch.html Invicta Infinity Watches : http://www.hotwatchshop.com/Invicta-Infinity-Watches-Watch.html Invicta Diver Watches : http://www.hotwatchshop.com/Invicta-Diver-Watches-Watch.html Invicta Pro Diver Watches : http://www.hotwatchshop.com/Invicta-Pro-Diver-Watches-Watch.html Invicta Time Square Watches : http://www.hotwatchshop.com/Invicta-Time-Square-Watches-Watch.html Invicta Camelot Watches : http://www.hotwatchshop.com/Invicta-Camelot-Watches-Watch.html Invicta Charmed Watches : http://www.hotwatchshop.com/Invicta-Charmed-Watches-Watch.html Invicta Elite Watches : http://www.hotwatchshop.com/Invicta-Elite-Watches-Watch.html Invicta Speedway Watches : http://www.hotwatchshop.com/Invicta-Speedway-Watches-Watch.html Invicta Ocean Ghost Watches : http://www.hotwatchshop.com/Invicta-Ocean-Ghost-Watches-Watch.html Invicta Transatlantic Watches : http://www.hotwatchshop.com/Invicta-Transatlantic-Watches-Watch.html Invicta Ocean Pro Watches : http://www.hotwatchshop.com/Invicta-Ocean-Pro-Watches-Watch.html Invicta Lupah Watches : http://www.hotwatchshop.com/Invicta-Lupah-Watches-Watch.html Invicta Lupah Grand Watches : http://www.hotwatchshop.com/Invicta-Lupah-Grand-Watches-Watch.html Invicta Lupah Dragon Watches : http://www.hotwatchshop.com/Invicta-Lupah-Dragon-Watches-Watch.html Invicta Chronograph Watches : http://www.hotwatchshop.com/Invicta-Chronograph-Watches-Watch.html Invicta Abyss Watches : http://www.hotwatchshop.com/Invicta-Abyss-Watches-Watch.html Invicta 10 Collection Watches : http://www.hotwatchshop.com/Invicta-10-Collection-Watches-Watch.html Invicta Lefty Chronograph Watches : http://www.hotwatchshop.com/Invicta-Lefty-Chronograph-Watches-Watch.html Invicta Corduva Watches : http://www.hotwatchshop.com/Invicta-Corduva-Watches-Watch.html Invicta Vintage Watches : http://www.hotwatchshop.com/Invicta-Vintage-Watches-Watch.html Invicta Russian Diver Watches : http://www.hotwatchshop.com/Invicta-Russian-Diver-Watches-Watch.html Invicta Multi-Function Watches : http://www.hotwatchshop.com/Invicta-Multi-Function-Watches-Watch.html Invicta Extreme Watches : http://www.hotwatchshop.com/Invicta-Extreme-Watches-Watch.html Invicta Signature Watches : http://www.hotwatchshop.com/Invicta-Signature-Watches-Watch.html Invicta Caprice Watches : http://www.hotwatchshop.com/Invicta-Caprice-Watches-Watch.html Invicta Curlo Melody Watches : http://www.hotwatchshop.com/Invicta-Curlo-Melody-Watches-Watch.html Invicta Corduba Watches : http://www.hotwatchshop.com/Invicta-Corduba-Watches-Watch.html Invicta II Watches : http://www.hotwatchshop.com/Invicta-II-Watches-Watch.html Invicta Just Added Watches : http://www.hotwatchshop.com/Invicta-Just-Added-Watches-Watch.html Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128088
  - 25
    - question about GPO in domain 2003 Hi I have an OU with "Block Inheritance" is tagged. I have a server 2003 R2 SP2 in this OU, I configured the local GPO of this server(security optins), when I'm running the RSOP on this server I get "NOT definded", I run the GPUPDATE command, did'nt solv the problem. why is that? Lior Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128087
- Next
  - 1
    - win 2003 ADS Password change I setup a win 2008 ADS Domain with 2 DC's/DNS & 2 Member machines. The 1st DC plays all FSMO roles. Then I disconnected the 1 DC from the network & logged on from my Member machines to the domain as enterprise admin. I was authenticated by the 2nd DC that was availiable. I then attempted a password change of my enterprise admin AC from my member machine & i was allowed to change the password. Later I brought the 1st DC in the network . Now I could logon as enterprise admin from any of my member machine with the old enterprise admin pwd as well as the new pwd [Strange]. With the old pwd the 1st Dc authenticates me & with the new pwd the 2nd Dc authenticates me. This shouldnt be the case. Could someone explain the strange behaviour? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128085
  - 2
    - One DC has died. How to remove it from the DC quorum? One of our 3 DC's has died. How can we demote/remote this DC from Active Directory? Thanks. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128074
  - 3
    - Migration inter-forests I have to move users , workstations and security groups from a win2k3 domain to another corporate w2k3 domain (already trusted 2 ways).Servers will not be migrated. Users are really few (35-40) so I would like to know if I can find white papers or simple tools (Quest migration is too complicate) to perform the migration even manually. New users should go on accessing shared resources on a file server of the old domain. Exchange will also remain on the old domain for the moment. TIA Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128073
  - 4
    - Changing from Novell to Active Directory We have recently done a major system overhaul and changed from using Novell to usin Server 2003 with AD. It has all gone smoothly except for one constant problem on a small number of machines. We are an educational facility and becuse of this the computers the students useare protected using protection cards that return the computers to their previous state at reboot. Even though changes have been saved to the cards and the computers have been accepted as part of the AD network every couple of weeks a few of the computers give a message of not being recognized by the network and the only way to bypass this is by entering as a local administrator and in properties of my computer reassigning the computer to the network(that is to say if the network is called MS it shows in the network tab of the properties as MS.LOCAL so by deleting it you are requested to enter name and password of the network administrator) The computers that are having the problem are all running Win 2000 with one exception that is a computer running XP. ALL the other computers have no problems. We are talking about between 5 - 10 computers here where there are other machines exactly the same make and OS with the same protection cards that have no problems( Approx 15 machines with Win 2000 and about 80 - 100 with XP) Any ideas? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128070
  - 5
    - test domain completely offline.. help I just made the biggest mistake ever... here's the situation. I have a test domain(4 DC's across two sites..) I had everything working properly(replication and whatnot) and the vmware esx server that hosted the DC's in my boston site crashed. I had to rebuild and the time ended up being off... I didn't notice this, or notice the replication errors... until after I raised the functional level last night from mixed 2000 to native 2000.. I figured maybe it was something else and let the dc's run overnight.. nothing changed. I just realized that it was a time issue so I fixed the time on the DC's in boston(the dublin DC's were perfectly fine in terms of time..) My dc's from boston jumped from 11/17/2007 to todays date and time(EDT..).. the stupid thing that I did was rebooted all 4 DC's... Now I'm screwed.. I can't RDC into any of them.. and on a console I can log in but I can't do anything AD related. If I open ADI.msc I was getting "the specified domain does not exist or could not be found" and I couldn't manage the domain. DNS was also offline(adi integrated..) I just checked again on the DC that holds the FSMO roles and I can see the domain from the snapin.. as well as the other dc's.. but DNS is still offline. My guess is that the time jump royally screwed everything up. I can RDC into my remote DC's now so that's a better sign.. I just have to figure out why DNS isn't working. I suppose this more turned into a cry/rant than a question, but if anyone has ever experienced similar.. and would like to share.. by all means.. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128062
  - 6
    - 2k DC tombstoned what is the best way to recover a recently tombstoned W2k DC? This DC is a does not contain any FSMO roles. The domain functional level is 2k Native. It is a distributed environment conatines 2k and 2k3 DC's. thanks. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128033
  - 7
    - One DC cannot boot up due to Directory Services failures We have 3 DC's in our domain. For one of them, we get the following error upon startup: Directory Services could not start because of the following error: The system cannot find the file specified. Error status: 0xc000000f. Please click Ok to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detail information. We've booted into DS Restore mode, and tried to recover the AD db manually, but also get errors with that: esentutl /r C:\Windows\NTDS\ntds.dit --> Operation terminated with error -1003 (JET_errInvalidParameter, Invalid API parameter) after 0.15 seconds. What can we do to resolve this problem on that DC? If not, can we demote that DC from one of the other DC's? Is it as simple as deleting the server from "Domain Controllers" in ADUC? Thanks in advance, Derek. Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128029
  - 8
    - ADAM Replica ISSUE I had installed ADAM on a master replica topology. I chose a domain account for the service to use to logon and made that user an admin of the server that ADAM was running on. I noticed on one of our DC's that I was getting a KCC error message for one of the ADAM servers. The event ID was Event Type: Error Event Source: KDC Event Category: None Event ID: 11 Date: 5/2/2008 Time: 10:56:59 AM User: N/A Computer: DC2 Description: There are multiple accounts with name E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SSERVICE-VM.pennmutual.com:30000 of type DS_SERVICE_PRINCIPAL_NAME. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I disjoined the machine from the domain, deleted the computer account and then rejoined it to the domain and started the ADAM service with the same doman user account. The service started and was working but replication failed to the replica. I woul dlike to correct this without having to remove ADAM and start over again. Can I just delete the replication objects and force the KCC to rebuild the topology? If I have to uninstall ADAM and start over how do I force it to remove the replica? Please advise... Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128023
  - 9
    - Secondary DC not registering in DNS I have an active directory domain runnin all Win2003 servers with service pack 2. In this domain I have two DCs. The first domain controller which was also the first DC created in the domain is working fine and has all the proper DNS records. The second DC seems to be working find and I am able to ping it, however, if I take down the first DC I get errors from exchange and other servers saying that a global catalog server is not available. I checked and the second DC is acting as a global catalog but for some reason is not seen when the first DC is taken offline. I ran DCDiag (results are below) and it failed the connectivity test. I thought this was due to DNS entries in the _msdcs section of the forward lookup zone. I am not sure how to fix this. I did note that within the dc section of the msdcs zone only the main DC is listed. This is also apparent in other sections like the gc folder. Has my second DC failed to add it records or is something else going wrong? Any help in this matter would be greatly appreciated Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine arrowdc02, is a DC. * Connecting to directory service on server arrowdc02. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\ARROWDC02 Starting test: Connectivity * Active Directory LDAP Services Check The host 4ac30e94-0571-42d1-8ee5-e518d1e08079._msdcs.arrowheaddental.com could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc Although the Guid DNS name (4ac30e94-0571-42d1-8ee5-e518d1e08079._msdcs.arrowheaddental.com) couldn't be resolved, the server name (arrowdc02.arrowheaddental.com) resolved to the IP address (192.168.9.12) and was pingable. Check that the IP address is registered correctly with the DNS server. ......................... ARROWDC02 failed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\ARROWDC02 Skipping all tests, because server ARROWDC02 is not responding to directory service requests Test omitted by user request: Topology Test omitted by user request: CutoffServers Test omitted by user request: OutboundSecureChannels Test omitted by user request: VerifyReplicas Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : arrowheaddental Starting test: CrossRefValidation ......................... arrowheaddental passed test CrossRefValidation Starting test: CheckSDRefDom ......................... arrowheaddental passed test CheckSDRefDom Running enterprise tests on : arrowheaddental.com Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... arrowheaddental.com passed test Intersite Starting test: FsmoCheck GC Name: \\arrowdc02.arrowheaddental.com Locator Flags: 0xe00001fc PDC Name: \\arrowdc01.arrowheaddental.com Locator Flags: 0xe00003fd Time Server Name: \\arrowdc02.arrowheaddental.com Locator Flags: 0xe00001fc Preferred Time Server Name: \\arrowdc01.arrowheaddental.com Locator Flags: 0xe00003fd KDC Name: \\arrowdc02.arrowheaddental.com Locator Flags: 0xe00001fc ......................... arrowheaddental.com passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS -- Darius Sanders -- Darius Sanders Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128018
  - 10
    - ADAM question Hi, I am new to using ADAM, actually it just got dumped in my lap from a layoff. OK, so the scoop is we have an ADAM server setup, it is NOT connected to our domain but rather a test domain. After further investigation there is no DC in this so called "test domain". Now heres the question. Do we need to have a DC setup in a test domain to have ADAM work? From everything i have been reading today ADAM uses domain accounts, right? So in order to get this software to work it needs to be joined to a domain correct? My apologies for what seems to be an ignorant question. -- fritzkracker ------------------------------------------------------------------------ fritzkracker's Profile: http://forums.techarena.in/member.php?userid=48018 View this thread: http://forums.techarena.in/showthread.php?t=960841 http://forums.techarena.in Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128016
  - 11
    - Server 2008 and AD problems I've recently installed a Server running 2008 Std Ed. I made it a DC/GC with DNS & WINS. I was checking replication from this server and receive the following: C:\Windows\system32>repadmin /kcc Repadmin: running command /kcc against full DC localhost Default-First-Site-Name Current Site Options: IS_GROUP_CACHING_ENABLED DsReplicaConsistencyCheck() failed with status 8453 (0x2105): Replication access was denied. C:\Windows\system32>repadmin /syncall CALLBACK MESSAGE: The following replication is in progress: From: d11a3242-06a5-468c-9d10-ca94e5398015._msdcs.domain.com To : 14e4cac2-4c16-4833-bf09-2420b554546e._msdcs.domain.com CALLBACK MESSAGE: The following replication completed successfully: From: d11a3242-06a5-468c-9d10-ca94e5398015._msdcs.domain.com To : 14e4cac2-4c16-4833-bf09-2420b554546e._msdcs.domain.com CALLBACK MESSAGE: The following replication is in progress: From: 14e4cac2-4c16-4833-bf09-2420b554546e._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com CALLBACK MESSAGE: Error issuing replication: 8453 (0x2105): Replication access was denied. From: 14e4cac2-4c16-4833-bf09-2420b554546e._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com CALLBACK MESSAGE: The following replication is in progress: From: 2a678948-4537-4719-aab0-093b92baa145._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com CALLBACK MESSAGE: Error issuing replication: 8453 (0x2105): Replication access was denied. From: 2a678948-4537-4719-aab0-093b92baa145._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com CALLBACK MESSAGE: SyncAll Finished. SyncAll reported the following errors: Error issuing replication: 8453 (0x2105): Replication access was denied. From: 14e4cac2-4c16-4833-bf09-2420b554546e._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com Error issuing replication: 8453 (0x2105): Replication access was denied. From: 2a678948-4537-4719-aab0-093b92baa145._msdcs.domain.com To : 7883f05f-3bae-49f1-a0ed-a2f23927e132._msdcs.domain.com Any idea as to why I would get an 'Access Denied' when running these checks? Mike Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128014
  - 12
    - gpinventory how can i use gpinventory.exe which i downloaded from microsoft website? when i run, it says you should put this file with wmiqueries.xml. but i can not find this file. and how can i run gui version? when i try to connect with rsop from mmc it says wmi service is not running on client altough i have run this? Thanks Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128011
  - 13
    - Deleted a Domain Controller, now what? Hello Everyone, I inadvertantly deleted the WRONG domain controller out of Active Directory the other day. Does anyone have advice on the proper way to get promote this server to a Domain Controller again? Can I demote/promote or will it bomb out when attempt either action? Thanks in advance for any advice... stupid move here that might end up being a LOT of work... Thanks, Sean Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128009
  - 14
    - RPC_S_CALL_FAILED_DNE WE have 3 DCs with domain based DFS. for some reasons DFS replication is not successful. I run FRSDIAG and got 3 RPC_S_CALL_FAILED_DNE error. I check RPC mapper error for port 135 (with portqry.exe) and it display 110 results. I am not sure that to do to make replication successful? PLease help Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128008
  - 15
    - ADAM Replication We have built an ADA repositiory and a replica of it on another machine They are the only two instances with in the same site. I have increased the scheduled replication to four times per day. I have been adding objects to the master ADAM instance and see a lag of about a minute before I see the object in the replica residing on another server. Is there a way to make adam replicate faster than that? Please advise... Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128005
  - 16
    - Resyncing AD Hi, I have a situation. I just got customer who had deployed 2 2K3 AD and had it sync with each other in the local office. however, they split the network between 2 sites and have been making changes on both sites. thus now both site have different database. this has been going on for a while and they did not connect the 2 sites together, thus the AD is not sync. Question: If they connect the network together now and tried to sync the 2 AD, will the different changes made on both AD be sync to each other thus have a single database again? Thanks. Gilbert Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128002
  - 17
    - AFDS, Domain trust or other? Hello all, I'm falling in a strange question. I've an exchange systems in my domain. Using this exchange system I give a service to my customers outsourcing the exchange. Now, I've to sell this service to another customer. This customers do not want for privacy/security/other reasons to trust its own domain with my one but want to use for every user in its domain the local credential to logon to my exchange service thought outlook and thought owa. If I can use trust googling around I've found AD Federation services, but seems to be that this systems works only for web applications. This can be good for OWA but is unusable for Outlook client. There's another trick to solve this? Thanks Stefano Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 128001
  - 18
    - Ports & Services & Security I'm looking for documentation that links services to ports for security reasons. This is coming for a *nix guy whose only been able to piecemeal/guess-n-check listening & open ports with several netstat tests. One test crippled AD because I had disabled one too many services! (luckily it was a test server). Something like /etc/services for Windows would be grande ... :) Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127999
  - 19
    - homepage from gpo i have changed homepage of all users from gpo -> user conf -> administrative -> windows comp. ->internet explorer to specific web site which is located locally. some users have updated this new policy but some others polcies can not be changed. Only change is changing homepage is disabled. How can i force all domain users have affected this new policies? Thanks Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127997
  - 20
    - Problem deleting an unknown object in a group Hi, We have a problem with our A.D. We have 9 DC in 8 different sites. All DC are W2K3 Std R2 SP2 with all hotfixes. Domain functionnal level is Windows Server 2003. We have a GPO that use Restricted Groups to set members of the Built-In Administrators group. We have an event in Application Event Log on all DC. SceCLI event #1202 : "Security policies were propagated with warning. 0x4b8 : An extended error has occurred." I've enabled debug logging for the Security Configuration client-side extension and I have found this error in Winlogon.log : remove SID: S-1-5-21-1047738115-132384186-1539857752-500. Error 1377: The specified account name is not a member of the local group. error removing SID: S-1-5-21-1047738115-132384186-1539857752-500. This SID is an object from a trusted domain. The trust has been deleted and we forgot to remove it from the GPO before deleting the trust. When I go directly to the Administrators group and I try to delete the member manually, I receive this warning after clicking on Apply : The object is no longer a member of this group. It may still appear due to standard delays in replication between domain controllers. I've done this yesterday and I have this message again this morning, so I know it is not a replication delay. In the ForeignSecurityPrincipals container, I can see the object. Ca I delete the object directly in this place ? Will this result in removing the object from the Administrators group ? Can this cause other issue ? If yes, what should I do to remove the object from the Administrators group ? Thank you very much, Dominic Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127987
  - 21
    - Licensing Computer for each site? Hi all, I run a Win2K3 domain. I noticed that you can choose a Licensing Computer for each site. I have never configured one for any of my sites including the default one. What is it for? Do I need to set one up? We are using per-device licensing. But the only thing I have ever done is choose the per-device radio-button when installing a server and thats it. Any help is appreciated, thanks. Robert Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127982
  - 22
    - AD Sites And Services I have set up three sites for our three DCs. I have moved each of the DCs to the correct site, Default-First-Site-Name to Site A, Site B, Site C for DC A, DC B, and DC C. Now can I delete the Default-First-Site-Name without any issues? TIA John Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127975
  - 23
    - ADAM Space Usage I recently received a notification from our Server Administrators that the available space on an ADAM server is running low. I have been monitoring the server and noticed that the size of the .dit file has not changed for several days, eventhough we add hundreds of records a day. How is storage allocated to ADAM? Does ADAM allocate blocks of storage, uses it as it seams fit and grabs additional blocks when it determines it is running low? If so, how much does it allocate at a time, xx kb, yy%? Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127970
  - 24
    - Primary restore on differente hardware Recently I've attempted to perform a Windows Server 2003 DC Primary Restore, originally installed on an HP Proliant ML310 server - PIV 2,4 GHz - N.2 SCSI Disk - N. 2 Nic - 512 MB RAM, on a new HP Proliant ML110 G5 server - Pentium 1,8 GHz Dual Processor - N. 2 SATA Disk - N.2 NIC card - 512 MB RAM. But when the restore was completed (using NTBackup) and the new server was restarted was impossible to use mouse or keyboard that where completly inactive. Then I've restarted the server in safe mode but mouse and keyboard was inactive too. I've tried to use USB mouse and keyboard (not PS2) but the result was the same. At this point I've finded on microsoft KB that this is a problem related to different hardware on the two server and was suggested to perform an "upgrade on place" of the Operating System by the original CD. By this way it was possible to restore the server. But the question is: for the next years, having on my networks (I'm a Network consultant for many Companies and SMB) many servers 4-5 years old (as the Proliant ML310) when they well be too old or irremediably damaged well be possible to restore their system on new (very different) servers? Thanks in advance. Ing. Cosimo MERCURO Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127969
  - 25
    - Locate the computer by using login ID information Hi, I want to know how to search for the computer name in an AD when I have only user login ID information on hand. No WINS, only DHCP and DNS. Any idea? Thanks in advance. Pakeon Tag: Windows Server 2008 and 2003 GC's + Exchange 2003 Tag: 127964

We are thnking about repalcing our core DC's/GC's in our HUb. Our AD design
is a hub and spoke topology where the spokes are all 2003 GC's. We are also
using Exchange 2003 with the thought to upgrade to 2007 but first we would
like to get our core DC's/GC's up to 2008. Can Server 2008 GC's/DC's coexist
with 2003 gc's i this tolopology? Please advise...

Top

Re: Windows Server 2008 and 2003 GC's + Exchange 2003 by Meinolf

Meinolf
Tue May 06 06:18:09 PDT 2008

Hello jskalicky,

Should work without any problem:
http://msexchangeteam.com/archive/2007/08/16/446709.aspx

http://msexchangeteam.com/archive/2008/03/05/448338.aspx

But also saw a posting about problems to create mailboxes when 2008 dc/gc
is in the domain with 2003 exchange. See posting "Still need help with mailboxes...."
from 05.05.08.20:02 and also "Creation of mailboxes after migration" from
01.05.08 23:52

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We are thnking about repalcing our core DC's/GC's in our HUb. Our AD
> design is a hub and spoke topology where the spokes are all 2003 GC's.
> We are also using Exchange 2003 with the thought to upgrade to 2007
> but first we would like to get our core DC's/GC's up to 2008. Can
> Server 2008 GC's/DC's coexist with 2003 gc's i this tolopology? Please
> advise...
>

Top