CSVDE tool usage

Tutorials Win: Microsoft Windows Forum

- Previous
 - 1
 - Problem with DC browsing another DC... We have a small network with 4 x Win2000 Servers using Active Directory. All servers have been promoted to be Domain Controllers. I just built the last box to replace one of the older servers, and I have a problem with it. It wont browse into one of the other servers on the network - and - the same server cannot browse into the new server! Both of these servers can browse to all of the other servers on the LAN. Here is some info from the new box: Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : VPN-Server Primary DNS Suffix . . . . . . . : xx.yyy.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : xx.yyy.com yyy.com Ethernet adapter Local Area Connection 2: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 GT Desktop Adapter Physical Address. . . . . . . . . : 00-0E-0C-74-9B-13 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.9 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 192.168.1.9 Primary WINS Server . . . . . . . : 192.168.1.6 Secondary WINS Server . . . . . . : 192.168.1.3 DCDIAG: Error: No record of File Replication System, SYSVOL started. The Active Directory may be prevented from starting. ......................... VPN-SERVER passed test frssysvol NETDIAG When I run this, all I get is a line of dots ................................................ and it hangs. I let it sit for 4 hours - no change. <sigh> What the HECK is going on! All assistance greatly appreciated! :) Tag: CSVDE tool usage Tag: 176800
 - 2
 - Roaming Profiles and Redirected Folders Inconsistent I'm Running Windows 2000 Small Business Server as a PDC/DC/AD, DNS, and Terminal Server with a Windows 2003 Server running DHCP, DNS, and File Server. Clients are Windows XP Pro. On the W2K SBS, I set the default policy to include folder redirection of the users' "My Documents", etc. folders. In AD, I set the users profiles to be redirected (different path, same server, W2K3) as well. The redirection is not working consistently. I've had cases where a user logs in from one computer and their folders are redirected. The same user goes to another computer and logs in - the folders are NOT redirected. It is "hit and miss" as to whether the folders/profiles are redirected or not. What should I check to diagnose and fix these problems? What needs to be changed? Tag: CSVDE tool usage Tag: 176797
 - 3
 - FYI: Remote Server Administration Tools (RSAT) available for Windows Vista SP1 This is a multi-part message in MIME format. ------=_NextPart_000_004E_01C88ECD.4DBB75B0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable FYI: Remote Server Administration Tools (RSAT) available for Windows = Vista SP1 see: http://blogs.dirteam.com/blogs/jorge/archive/2008/03/26/remote-server-adm= inistration-tools-rsat-adminpak-for-windows-vista-sp1.aspx --=20 Cheers,=20 (HOPEFULLY THIS INFORMATION HELPS YOU!) # Jorge de Almeida Pinto # MVP Windows Server - Directory Services BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx -------------------------------------------------------------------------= ----------------- * How to ask a question --> http://support.microsoft.com/?id=3D555375 -------------------------------------------------------------------------= ----------------- * This posting is provided "AS IS" with no warranties and confers no = rights!=20 * Always test before implementing! -------------------------------------------------------------------------= ----------------- ################################################# ################################################# -------------------------------------------------------------------------= ----------------- ------=_NextPart_000_004E_01C88ECD.4DBB75B0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.6001.18000" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV> FYI: Remote Server Administration Tools (RSAT) available for Windows = Vista=20 SP1 see:</DIV> <DIV><A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/archive/2008/03/26/remote-se= rver-administration-tools-rsat-adminpak-for-windows-vista-sp1.aspx">http:= //blogs.dirteam.com/blogs/jorge/archive/2008/03/26/remote-server-administ= ration-tools-rsat-adminpak-for-windows-vista-sp1.aspx</A></DIV><FO= NT=20 face=3DVerdana size=3D2> <DIV> -- Cheers, (HOPEFULLY THIS INFORMATION HELPS = YOU!)</DIV> <DIV> </DIV> <DIV># Jorge de Almeida Pinto # MVP Windows Server - Directory = Services</DIV> <DIV> </DIV> <DIV>BLOG (WEB-BASED)--> <A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/default.aspx">http://blogs.d= irteam.com/blogs/jorge/default.aspx</A> BLOG=20 (RSS-FEEDS)--> <A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/rss.aspx">http://blogs.dirte= am.com/blogs/jorge/rss.aspx</A> --------------------------------------= ---------------------------------------------------- *=20 How to ask a question --> <A=20 href=3D"http://support.microsoft.com/?id=3D555375">http://support.microso= ft.com/?id=3D555375</A> ----------------------------------------------= -------------------------------------------- *=20 This posting is provided "AS IS" with no warranties and confers no = rights! *=20 Always test before=20 implementing! --------------------------------------------------------= ---------------------------------- ###################################= ############## ################################################# --= -------------------------------------------------------------------------= ---------------</DIV></BODY></HTML> ------=_NextPart_000_004E_01C88ECD.4DBB75B0-- Tag: CSVDE tool usage Tag: 176790
 - 4
 - Active Directory Specialist position available in Gaithersburg MD Hi My name is Firdosh Bhathena and I am a Technical Recruiter with Altek Information Technology Inc. We are looking for acandidate to fill the Active Directory Specialist position in Gaithersburg MD for our client Marriott International This is a long term contract position working for one of our direct clients. Attached is the job description for your reference ,please review the job description and let me know if you are interested . Job Description: *****WE ARE LOOKING FOR AN ENGINEER AS THIS POSITION IS NOT GEARED TOWARDS AN ADMINISTRATOR***** Experience: -Significant experience Administering Active Directory, with very large, multi-domained networks. -Significant experience Programming custom Maintenance/Migration/ Disaster Recovery Scripts and Tools for Active Directory. Core Skills: -VBScript (core language) -ADSI (Active Directory Services Interface, the primary API) -Automation of windows 2000 AD functions (user populations, group/ domain maintenance, bulk loading, DR) -Exchange (Scripting, troubleshooting, integration) -Knowledge of Meta directory structure and JNDI scripting -LDAP protocol (operations and syntax) (Non-proprietary protocol) Kerberos (Architecture, understanding) Please call me when you can to discuss this position in further details and email me a word copy of your resume at the earliest . Thanks Firdosh Bhathena Technical Recruiter ALTEK Information Technology, Inc. Main Number: 301-695-4440, Ext: 108 Cell Phone: 240-447-7742 Fax: 301-695-9390 Email: fbhathena@al-tekinc.com Website: http://al-tekinc.com "ALTEK is a WBENC Certified Women Owned Firm" Tag: CSVDE tool usage Tag: 176789
 - 5
 - List AD attributes? How would i export all avilable attributes (be they populated or not) for a user object? I can view them by scrolling through an accounts properties in ADSI Edit, but i'd like to have them in a single list i can view and make notations on. Even better would be a link that lists all the attributes along with an explanation for each one. ..But i'm not greedy, i'll settle for only the list at this point. Thanks in advance. Tag: CSVDE tool usage Tag: 176787
 - 6
 - export a list of all users including the value of the "pager" field Hi everyone, I want to export a list of all users including the value of the "pager" field, so that I can edit it with Excel for example. Does anyone know how to? Ithink it can be done with an LDAP query? Many thanks, Remco. Tag: CSVDE tool usage Tag: 176786
 - 7
 - moving accounts retaining SID Is there a way to preserve the SID to user and computer accounts? What i wish to attempt is to dismantle a domain then to recreate it as a child domain in another forest. However, there is mission critical software that is sensitive to the SID of an account in relation to an extensive SQL database. I dont want to orphan several hundred account refences within that database for the loss of the SID. The domain is currently Server 2000 and will be joined under 2003. Because its 2000 the option to rename/reasign it itsnt there. Id like to export the accounts with the SID and import them once the domain is restored while retaining the original SID's. Thanks in advance Eric Twing Tag: CSVDE tool usage Tag: 176778
 - 8
 - HELP - Cannot add DC to existing domain... I'm trying to add a secondary DC to my existing domain. The existing DC is running W2k Server with SP4 and all patches. The new server is running W2003 Server R2 Standard edition with SP2 and all patches. I have successfully run adprep /forestprep and adprep /domainprep on my W2K server but I still am getting an error message that the forest is NOT prepared!!! Error message: "The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. The version of the Active Directory schema of the source forest is not compatible with the version of the Active Directory on this computer." Any ideas what might be the issue here? Thanks, /Adde -- fantamejthisisgoodvarjedag Tag: CSVDE tool usage Tag: 176775
 - 9
 - GPO is not reflacting to client machine HI I have created GPO which is appied to OU for logon script. the logon script is appied under computer configuration. but it is not loading on client machine. also the OU created is new for local machine please help Thanks Tag: CSVDE tool usage Tag: 176761
 - 10
 - parent child user hi all, Any one plz help me regarding.... I intend to create a parent-child scenerio in my organisation. as parent.com , child1.parent.com , child2.parent.com. Is it possible to login the users across these all three domain or not???? As per the MS docs the users in this scenerio can authenticate to any domain cause two way transitive trust exist in this scenerio by default..... But in my test scenerio it is not working plz help me....... Tag: CSVDE tool usage Tag: 176758
 - 11
 - Win 2000 Folder Move Restictions and Delete Questions Hello, I have a customer who is becoming impossible to work with. She's requesting things I've never had to deal with before. The first is: She wants everyone (5 users) to read, access and update files and folders that they would normally would given their access rights on the shares etc.. She wants to be the only one to have the ability to move folders from one directory to another for fear of a user moving things and not knowing where it went. Is this possible??? The other thing is, she wants to know if a file or folder deleted from a network drive (from a mapped drive on the users PC) could go into a recycle bin or be retrieved in any way. Sorry if these are dim witted, but I've really never been asked to do these things. Any help or suggestions would be greatly appreciated. Thank you, George Tag: CSVDE tool usage Tag: 176757
 - 12
 - Domain name on install I'm finally moving my NT 4.0 SBS to Windows 2003. We have a small network with one internal domain "NTDOMAIN" (not ntdomain.anything). I have DNS running on a Windows 2000 server. I'm a little confused as to what i'm going to end up with when I switch us to the Windows 2003 Server. Because the SBS server hardware will not handle an upgrade, i'm going to install NT 4.0 server on a new box and upgrade it to Windows 2003 and retire the SBS server. I'm walking through the steps of the install to ensure i have all my ducks in a row prior to the install. When i get to installing AD I understand it will ask me to create a new domain (Domain in a new forest).. 1. will it use "NTDOMAIN" at this point? 2. When it asks me to type full DNS name of the domain. do I use ntdomain.loc (we don't have a registered name and have no need for one) 3. Can i change my domain to something else "newdomainname.loc" at any point or am i stuck with NTDOMAIN.loc? appreciate any help... not very good with domain name stuff. Diane Tag: CSVDE tool usage Tag: 176748
 - 13
 - How to transfer AD between domains... I have a box running Windows Server 2000 that is part of an old domain setup. I would need to transfer all the user accounts in the AD to the new Windows 2003 Server setup in a different domain. How do I accomplish that? Thanks, /Adde -- fantamejthisisgoodvarjedag Tag: CSVDE tool usage Tag: 176738
 - 14
 - AD global catalog server query delay in application. Greetings to all, I have a question that is perplexing me (novice) Please help :-) I am basically looking for direction or specifics. Our organization has a vendor's server which needs to query group policy information from AD in order for it to work with documents. If a user is accessing a document at a remote location (say America) the query takes 20 seconds which has to complete before they can view the document. Many test have been performed to rule out the network (so it seems :-) My question is based on AD querying remote locations for group information what would be the best approach at isolating this issue or is there a known issue within AD query? The servers are windows 2003. Could it be based on user access to the global catalog? (someone mentioned that it worked fine under the pre-windows2000domain admin group - but this isn't from a good source so it may be suspect) If so we don't want to give an outside vendor that kind of power so maybe we can create a special group? I know I don't have all the details listed but based on this limited information what would you suggest? I would greatly appreciate any and all responses. Thank you in advanced. Tag: CSVDE tool usage Tag: 176731
 - 15
 - Shutdown computer using GPO HI I am looking for soultion to Shutdown Domain computer after Hour by using GPO Plese help TP Tag: CSVDE tool usage Tag: 176724
 - 16
 - AD replication problem with removed DC This is a multi-part message in MIME format. ------=_NextPart_000_0006_01C88624.20BAB230 Content-Type: text/plain; charset="big5" Content-Transfer-Encoding: quoted-printable Hi All We recently have a DC which failed to operate normally and unable to = demote normally. Therefore I follow the steps show in = http://support.microsoft.com/?id=3D216498 to remove all its relevant = data from the AD. Everything seems working fine except the following = replication errors being logged periodically. I remember before the = failed DC was removed from my DNS server manually, the address = 41991cc7-779a-4d4c-9137-17bed1fcb075 is referring to the removed DC. I = have tried to look through our AD everywhere with adsiedit but failed to = locate the above anywhere. I also removed all the relevant failed DC = records with Active Directory Sites and Services. Does anyone have any = ideas where else should I look to have this replication task completely = removed. Normal replications can be done between all DCs.=20 Hope someone can help me with this. Event Type: Warning Event Source: NTDS Replication Event Category: (5) Event ID: 1085 Date: 3/12/2008 Time: 4:56:43 PM User: Everyone Computer: AX-DC01 Description: Replication warning: The directory replication agent (DRA) couldn't = synchronize partition DC=3Dmydomain,DC=3Dcom with partition on directory = server 41991cc7-779a-4d4c-9137-17bed1fcb075._msdcs.mydomain.com. The error was:=20 The DSA operation is unable to proceed because of a DNS lookup failure. Please verify that the address can be resolved with DNS, and that it is = reachable via the transport. If this error persists, the KCC will = reconfigure the links around this server.=20 The record data is the status code.=20 =20 =20 Event Type: Warning Event Source: NTDS Replication Event Category: (5) Event ID: 1061 Date: 3/12/2008 Time: 4:56:43 PM User: Everyone Computer: AX-DC01 Description: Internal error: The directory replication agent (DRA) call returned = error 8524.=20 =20 =20 =20 ------=_NextPart_000_0006_01C88624.20BAB230 Content-Type: text/html; charset="big5" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5"> <META content=3D"MSHTML 6.00.6000.16609" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV> <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Hi All <FONT=20 face=3DTahoma color=3D#000080 size=3D2>  <FONT=20 face=3DTahoma color=3D#000080 size=3D2>We recently have a DC which = failed to operate=20 normally and unable to demote normally.  Therefore I follow the = steps show=20 in <A=20 href=3D"http://support.microsoft.com/?id=3D216498">http://support.microso= ft.com/?id=3D216498</A> to=20 remove all its relevant data from the AD.  Everything seems working = fine=20 except the following replication errors being logged=20 periodically.   I remember before the failed DC was = removed from=20 my DNS server manually, the address 41991cc7-779a-4d4c-9137-17bed1fcb075 = is=20 referring to the removed DC.  I have tried to look through our=20 AD everywhere with adsiedit but failed to locate the above=20 anywhere.    I also removed all the relevant failed DC = records=20 with Active Directory Sites and Services.  Does anyone have any = ideas where=20 else should I look to have this replication task completely = removed.  =20 Normal replications can be done between all = DCs.  <FONT=20 face=3DTahoma color=3D#000080 size=3D2>  <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Hope someone can help me with=20 this. <FONT=20 face=3DTahoma color=3D#000080 size=3D2>  <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Type: = Warning <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Source: NTDS=20 Replication <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Category: = (5) <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event ID: 1085 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Date: =20 3/12/2008 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Time: =20 4:56:43 PM <FONT=20 face=3DTahoma color=3D#000080 size=3D2>User: =20 Everyone <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Computer: = AX-DC01 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Description: <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Replication warning: The = directory replication=20 agent (DRA) couldn't synchronize partition DC=3Dmydomain,DC=3Dcom with = partition on=20 directory server=20 41991cc7-779a-4d4c-9137-17bed1fcb075._msdcs.mydomain.com.</= P> <SPAN=20 style=3D"mso-spacerun: yes">  <FONT=20 size=3D2><SPAN=20 style=3D"mso-spacerun: yes"> The error was:=20 <FONT=20 size=3D2><SPAN=20 style=3D"mso-spacerun: yes"> The DSA operation is unable to = proceed=20 because of a DNS lookup failure. <SPAN=20 style=3D"mso-spacerun: yes">  <FONT=20 size=3D2><SPAN=20 style=3D"mso-spacerun: yes"> Please verify that the address = can be=20 resolved with DNS, and that it is reachable via the transport.<SPAN=20 style=3D"mso-spacerun: yes">  If this error persists, the = KCC will=20 reconfigure the links around this server. = <FONT=20 size=3D2><SPAN=20 style=3D"mso-spacerun: yes"> The record data is the status = code.=20 <SPAN=20 lang=3DEN-US><?xml:namespace prefix =3D o ns =3D=20 "urn:schemas-microsoft-com:office:office" /><o:p> </o:p> <o:p><FONT=20 face=3DTahoma color=3D#000080 size=3D2> </o:p> <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Type: = Warning <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Source: NTDS=20 Replication <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event Category: = (5) <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Event ID: 1061 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Date: =20 3/12/2008 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Time: =20 4:56:43 PM <FONT=20 face=3DTahoma color=3D#000080 size=3D2>User: =20 Everyone <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Computer: = AX-DC01 <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Description: <FONT=20 face=3DTahoma color=3D#000080 size=3D2>Internal error: The directory = replication agent=20 (DRA) call returned error 8524. <o:p><FONT=20 face=3DTahoma color=3D#000080 size=3D2> </o:p> <o:p><FONT=20 face=3DTahoma color=3D#000080 size=3D2> </o:p> <o:p><FONT=20 face=3DTahoma color=3D#000080=20 size=3D2> </o:p></DIV></BODY></HTML> ------=_NextPart_000_0006_01C88624.20BAB230-- Tag: CSVDE tool usage Tag: 176717
 - 17
 - Testing - Can Administrator login as a user without the user's password? I'm reconfiguring and setting back up a domain. I want to test configuration changes across the board and want to confirm changes made in System Policies, User Policies, and Active Directory. I want to know if I can login as a particular user or several users (I am primary Administrator) on clients without having their passwords and without resetting their passwords also? Roaming profiles, etc. seem to work okay on some users accounts but not on others. I'm thinking I need to check Control Panel > System > Advanced and see if the user is set to roam, etc. on each client PC. Yes? No? I want to fix AND TEST after hours so when employees return in the morning everything is smooth as silk. Besides the Profile settings in Control Panel and possibly some folder permission issues, is there anything else that would cause inconsistent implementation of otherwise universal Policy and AD settings? DC, DNS1, TS: Windows Server 2000 Small Business Server DNS2, FS: Windows Server 2003 Clients: Windows XP Professional *Servers & clients have recent service packs and patches. Thanks much, Fred Tag: CSVDE tool usage Tag: 176715
 - 18
 - LDAP Query Question This question is in reguards to how AD responds to an LDAP Authentication Request coming from a non-Microsoft RADIUS server. What I need to know is if AD returns the password from a LDAP authentication request in MS_CHAP_v2 format or is it in Clear Text ? We are trying to configure several devices for a secure wireless signon. On the client side is a Windows XP Pro SP2 laptop using the Windows Zero Config service. 802.1x authentication WPA/TKIP and EAP-PEAP/MS_CHAP_V2 manually sign-on RADIUS server (Juniper SBR 6.0.1) acceptes the requests without a problem. But when it tryies to authenticate the MS_CHAP it fails everytime. So I'm wondering is what is AD sending back to RADIUS. Any help would be great. Thank you Tag: CSVDE tool usage Tag: 176703
 - 19
 - how to add ( windows firewall policy) to group policy I have Active directory 2000 ( windows 2000 advanced sever SP4) and have worksations run by Windows XP SP2 . so I want to add policy to the group policy of Active directory . Please help me . Tag: CSVDE tool usage Tag: 176702
 - 20
 - User login creation issue I'm running into issues where I'm trying to create a new user and the login id already exists. I haven't been at this company very long and maybe there was a good reason why they adopted the idea of making the user login id to be their initials, but it's very cumbersome. Is there any way to query active directory by the login ID to be able to determine who is using that login and to delete the user if it's disabled? Tag: CSVDE tool usage Tag: 176701
 - 21
 - Synchronization issues I manage a very small Win2k network - 3 servers (One PDC, one BDC, and one Terminal server), 7 workstations - the function is mainly to give access to Windows sessions in a predominantly Unix environment. Anyway, to cut a long story short, the BDC was switched off for a couple of days (over a weekend) and the system has lost synchronization. So far this has not caused a problem - users can logon, and things seem to be working, but I have no doubt that soon this will change. I've tried to use the server manager to re-sync, but the options for sychronization are greyed out on all the servers. Has anyone got any bright ideas that may start the machines re-synchronizing? Many thanks E Tag: CSVDE tool usage Tag: 176691
 - 22
 - Blank Passwords, Complex Requeirements and Problems... Blank Passwords, Complex Requeirements and Problems... An auditor discovered several accouns with Blank Passwords in a MultiDomain AD structure arround the world As far as i know, the Win2003 AD never had a "free" Default Domain Policy to allow that, the DDP is the Default since the initial build of th AD. Ok, let's say that an Admin disabled temporarily th DDP for a few moments and allowed certain accouns to be created with blank passwords. Today, the DDP is configured to allow only complex passwords. 10 accounsts in the domain (among 1.200 other accounts) were found with blank passwords. When we reset thoses passwords, the ADUC allows.. BLANK passwords!!!!! Only in the 10 aaccounts created in 2007 (The AD was created on 2004). Any other user don't have that problem, only a sequencial list of accounts (created by script with the DSADD tool, exactly like any other account in the domain) Tag: CSVDE tool usage Tag: 176688
 - 23
 - just did a dcpromo hey all, i changed the ip and dns of the server before i ran the dcpromo and after the install completed normally i checked the dhcp server and beside the small server icon the ip address shows that 10.10.1.1 . can someone please explain why this is? and if it needs to be fixed and how? thanks, rodchar Tag: CSVDE tool usage Tag: 176680
 - 24
 - External Trust Between W2K and Server 2003 I am attempting to set up a two-way external trust between a Windows 2000 AD domain and a Server 2003 domain. They are on different subnets, accessible to one another via VPN. They can see each other's DNSs, and WINS is up and running and they can see each other that way. Everything on the Server 2003 side works fine. Verifying the trust works without a hitch. However, on the Windows 2000 server, when I go to verify the trust, I get a dialog stating "The credentials supplied conflict with an existing set of credentials". I'm at logger heads here. I have no idea what's wrong. -- Aaron Clausen mightymartianca@gmail.com fnor Tag: CSVDE tool usage Tag: 176679
 - 25
 - DC promo Hi all, I'm getting a "The default netbios domain name "server0" was slected due to name conflict on the network. When I try to put in my desired FQDN. I don't understand why this happens because It's on a workgroup switch this only this computer attach right now. No dns server setup yet.(lab enviroment) It's windows 2003 server OS. I don't get it. Any help would be appreciate. Thanks. Tag: CSVDE tool usage Tag: 176678
- Next
 - 1
 - Windows 2003 Folder Redirect Stopped working. The MyDocuments Folder Redirection has stopped working for two users. Other users in the same Group Policy are still working. One users has half his documents copied over. Looks like the other user has all his documents. Currently their MYdocuments is pointing back to original path on C:. Their logon take a long time apply policy. The two not working are getting a few error messages in their event logs. Type: Error User: domain\username Source: Folder Redriection Event ID: 102 Description: Failed to perform redirection of folder My Documents. The files for the redirected folder could not be moved to the new location. The folder is configured to be redirected to \\path\My Documents. Files were being moved from C:\Documents and Settings\username.001\MyDocuments to \\path\My Documents. The following error occurred: Access is denied. Type: Error User: NT AUTHORITY\SYSTEM Source: Userenv Event ID: 1000 Description: The Group Policy client-side extension Folder Redirection was passed flags (0) and returned a failure status code of (5). Type: Error User: NT AUTHORITY\SYSTEM Source: Userenv Event ID: 1000 Description: Windows cannot process extension Folder Redirection ProcessGroupPolicy. Return value (0x5). SETTINGS The redirection settings: Basic The target folder location: Create a folder for each users under the root path Root Path: \\server\path Users dont have exclusive rights (Used article 288991 to setup rights), this works for everyone else I have selected move contents of MyDocuments i have selected Redirect the folder back to the local userprofile location when policy is removed. Thanks in advance. Tag: CSVDE tool usage Tag: 176677
 - 2
 - Hardware Upgrade with Active Directory I have a five year old server that is my PDC now and it also acts as my Exchange server. I want to Upgrade the Domain Controller to another box but leave the Exchange alone and make the old server just a Backup Domain Controller. I have done this probably 50 times with another network operating system (Novell, Sorry) but this will be my first Microsoft. I have looked at the Active Directory Migration Tool and wonder is there an easier way. So I thought i'd sent this post to all the experts and ask is there an easier way? Tag: CSVDE tool usage Tag: 176675
 - 3
 - Hyderabad software training institutes Hyderabad software training institutes,Computer Training Institutes For Multimedia =B7 Computer Training For Asp.net,C#. Net,VB.net,Java,J2EE,Sql server,Oracle,PL/SQL,Manual testing,QTP,Win runner,Automated tools ,interview ... Dataware Housing .... Training Details. Basic Information. Training Name. : Institute Name. : For more information visit this link http://itlearnershub.blogspot.com/ http://softwarelearnershub.blogspot.com/ Tag: CSVDE tool usage Tag: 176674
 - 4
 - PINOYBUSINESS.ORG FOR SALE PINOYBUSINESS.ORG FOR SALE pinoybusiness.org for sale paypal admin@pinoybusiness.org U.S.$10 only or contact info@pinoybusiness.org Tag: CSVDE tool usage Tag: 176670
 - 5
 - Migrating 2000 server I am wanting to upgrade a 5 year old DC to a new server. I am basically wanting to move active directory to a new server and make the old server a backup DC. I have downloaded the ADMTv2 program and reading thru it. But I guess never have done this before, I am wanting to know is there an easier way to migrate a Windoew 2000 server to another Windows 2000 server? Tag: CSVDE tool usage Tag: 176667
 - 6
 - about to run dcpromo... hey all, i'm trying to build my test server and i'm about to run dcpromo, if i want to change the ip address of the serve is it better to do before or after? and if i do change the ip address do i have to configure something manually after the dcpromo completes. i'm going to rely on dcpromo to install configure my dns server so is there something here i need to do as well if i change ip address? thanks, rodchar Tag: CSVDE tool usage Tag: 176663
 - 7
 - Update attribute in AD for all users Hello: Due to some customization I added an attribute to my 2003 AD schema for all users in my domain. I need this attribute set to the same value for everyone. Does anyone know how I can set this attribute for all users? Thanks. Harrison Tag: CSVDE tool usage Tag: 176655
 - 8
 - Forest Root DC Single Label host name Our network has 4 locations, but the main location is the only one that has AD, the others have NT4. In our main site we have 3 DC's. The forest root DC is in the nj1.com domain, but its fully qualified domain name is server.nj1. There is no .com. This server is also our FSMO role holder. The other two server are servername.nj1.com. I am trying to move the FSMO roles and demote it, but when I tried to transfer the roles I get errors. When I run dcdiag I get DNS guid errors. I am not sure how fix this server so that it's fully qualified name is server.nj1.com? Any ideas? Thanks in advance. Tag: CSVDE tool usage Tag: 176649
 - 9
 - Disable Pop Up Blocker I have several XP clients running IE7 with the Pop UP blocker blocking a training program we use. Is there a way through group policy to allow popups for certian sites? I really don't want to have to disable the pop up block completly to resolve this issue. Tag: CSVDE tool usage Tag: 176648
 - 10
 - Help moving from NT4 to 2000 AD? Hello, looking for some guidance or help. We have about 7 NT4 Domains all with their own Domain Controllers with trust between each other. The domain with the most users on it, we upgraded the PDC to Active Directory Server and now have a Active Directory Server with 2 NT4 BDC's running in a Mixed Mode Environment. How do I now bring in the other Nt4 Domains. So the domain with the AD Server in Mixed Mode is the Primary or Parent Domain and all the other domains fall under Child Domains. Does anyone have advice or a link to what might be a good guide? Tag: CSVDE tool usage Tag: 176641
 - 11
 - Domain consolidation and decommission child domain in Active Hi, We have a task to move object within a child domain and decommission the domain when the task has been accomplished. Currently there are 100+ computer objects within the child domain with the user objects residing within the root domain where they will stay. Our objective is to move the computer objects to a child domain residing on our west coast location from the east coast domain to be decommissioned, we will also move the existing domain controllers within the east coast child domain to the west coast leaving one root domain controller at the site for directory services integration with RADIUS server authentication. After all this is done, we plan on renaming our domains (both child domains) to another naming convention. Does anyone have any experience with this type of domain restructuring? All servers are running Windows Server 2003 with SP1 applied with Forest and Domain function levels running in full native 2003 mode. Any comments or suggestions would help. Thanks in advance Nino Tag: CSVDE tool usage Tag: 176637
 - 12
 - ADMT - "Object Property Exclusion" only shows for Computers Greetings, I am migrating user accounts intra-forest and I wish to _not_ migrate the description field for user accounts. Even though ADMT describes the "Object Property Exclusion" page when I do a user migration it just skips it and goes right to the last screen, it only shows up when doing a computer migration. This means I have no choice but to migrate user descriptions that are no longer accurate and go back and clean them up afterwards. According to ADMT the feature is available for users & groups as well as computers. What gives? Tag: CSVDE tool usage Tag: 176629
 - 13
 - Domain Controller Issue - Urgent Help Due to some issues with a failed domain controller upgrade to new hardware, I am having an issue with my domain controllers. I demoted one of my DCs after this upgrade and had many issues. I restored the DC from backup, however now that DC does not appear in the Domain Controllers group under AD Users and Computers. My question is, can I just run DCPROMO again to make it a domain controller again. I have another DC that is functioning and is authenticating users and allowing for Exchange mail delivery just fine. The only issue I have is that when our users change their passwords, through Netware, and try to sync them with windows, their Windows accounts keep getting locked out. Can anyone offer any suggestions here. When I did my restore more then a week ago, I did not do an Authoritative Restore as I did not know I should do that. Any help is greatly appreciated and I will elaborate if necessary, just let me know. Thanks, Bill Tag: CSVDE tool usage Tag: 176627
 - 14
 - joining parent company domain have an windows 2000 server running exchange 2000. company has been purchased by another company. the parent company has their own 2003 server with their own domain. i have vpn setup between the two offices and now want to setup the exchange 2000 server so that emails that come in to users here addressed to parent company's domain will come in here. i know how to change the storage location of the users mailbox in ad, but i think im going to have to setup trusted domains etc. dont know what to do so that i dont have to re-create all mailboxes , ad etc. anyone have a clue ? Tag: CSVDE tool usage Tag: 176624
 - 15
 - Home Folder issue We seem to be having sporadic issues with users mapped drive opening a parent directory rather than their home folder. All users are set as \\server\users\username, but occasionally their mapped drive opens \\server\users. If there is a solution can someone please share. This is not a big problem but it does cause confusion among our users and unecessary work for me. Cheers, Tag: CSVDE tool usage Tag: 176622
 - 16
 - New Site to Replicate We just built a new building in location 2. I moved 1 of the BDC's from location 1 to this building in location 2. How do I get the BDC in location 2 to talk to to the PDC in location 1? By the way, all of our ports except the ones that we need on the router's firewall are blocked. I'm not sure if there is a special port that this comm is suppose to talk over. -- Mark Hughes Tag: CSVDE tool usage Tag: 176613
 - 17
 - Saved Queries Disappear in the Active Directory Users & Computers I've searched everywhere for a resolution to this problem and I just can't believe that no one appears to have reported it. I want to create a bunch of Saved Queries in the ADUC MMC. I know the query syntax and have created a lot of custom queries, so that is not my problem. The problem is that once I've created so many, or executed a few of them that return several thousand results, my queries start disappearing, from the top of the console downward. I've used MMC 2.0 and 3.0, as well as several computers with Windows XP SP2, and I have found no way to resolve this problem. This means that I have to create several MMC's to have all the queries I want, and still the user of the MMC has to occasionally close and reopen when their queries disappear after using a few of the queries that return 1,000+ results. Is there any resolution to this extremely annoying ADUC Saved Queries problem? I'm about to just give up on it and write a program to manage the accounts, but I'd rather save myself a lot of time if there is some special hotfix or patch for MMC or ADUC that I am not aware of. Thank you! Tag: CSVDE tool usage Tag: 176610
 - 18
 - Active Directory could not replicate the directory partition - "The remote procedure call was canceled" I'm installing new AD domain in remote site, the bandwidth latency is 1000 ms, I've done many similar installations like this with the same bandwidth, yet this time I'm getting the following error: Active Directory could not replicate the directory partition - "The remote procedure call was canceled" I'm using Windows Server 2003 SP2 Is the NTDS\Parameters\RPC Replication Timeout" increase of a benefit in my situation now or do you have any other suggestion. Regards Tag: CSVDE tool usage Tag: 176606
 - 19
 - Active Directory couldn't be replicated while installing New Domain I'm installing new Domain in remote site, the bandwidth latency between this site and the parent domain site is 1000 ms, i've done several installations on a similar setup and bandwidth yet now Active Directory could not replicate the directory partition "The Remote Procedure call was cancelled" Windows 2003 SP2 The "NTDS\Parameters\RPC Replication Timeout" is of benifit in this situation?? Regards, H.F Tag: CSVDE tool usage Tag: 176605
 - 20
 - The SOA record for the Active Directory zone was not found Hi, I just ran dcdiag /v /test:DNS on one of my Domain Controllers (which is working fine) and as part of the output I got: The SOA record for the Active Directory zone was not found Can anyone help me find the cause of this warning? Thanks, Ian M Tag: CSVDE tool usage Tag: 176604
 - 21
 - Restrict Anonymous settings In reading this article http://support.microsoft.com/kb/890161, it suggests changing restrict anymous setting to a 1 or 2. Am I correct in thinking that if I change the setting to 2, the 1 NT pc we have will not be able to authenticate to the domain? Also, I had a root forest domain and then a child domain. Will this break any trust relationships bewteen the 2? All users logon to the child domain for authentication. I read somewhere that I shouldn't set the DCs to 2. Any insights? Thanks Deb H Tag: CSVDE tool usage Tag: 176601
 - 22
 - change password by command line Hi everybody, My 1st time on this Forum so ... I'm searching a way to update the password field in the properties of each MA's on my MIIS Server. ... I changed the password of the account used by MIIS to connect active directory and i would like to update that info in MIIS without doing it manually. Can you help? Shopsoy Tag: CSVDE tool usage Tag: 176600
 - 23
 - Windows cannot access the file gpt.ini for GPO I am getting below event ID 1000 in my application every few second. Can anyone guide me how to troubleshoot this problem and find out the root caused. I had verify the permission and all match to microsoft requirement. Please Help Sources: UserEvn Event ID:1000 User: NT AUTHORITY\SYSTEM Category:none Windows cannot access the file gpt.ini for GPO The file must be present at the location <>. (). Group Policy processing aborted. Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine. \ Tag: CSVDE tool usage Tag: 176589
 - 24
 - procedure required for complete active directory restore to a hello guys, I have an AD domain I need to restore to a previous state, this is the infrastructure: 1 DC 2K3 Std Ed SP2 all FSMO roles and GC 1 DC 2K3 Std Ed SP2 GC Other member servers... I have a valid backup taken only a few hours back. I need to do authoritative restore so that all objects are rolled back to the previous state. I know I need to: first, reboot DC 1 into AD restore mode and run a normal (not authoritative) restore second, use ntdsutil and execute restore database (authoritative restore) But I've never performed this before, and I know there's something to do with regard to the sysvol objects. I've looked everywhere in the internet but all examples refer to restoring just an object, not the entire directory. Does anyone have a bullet proof, step by step procedure, to perform a complete restore of an active directory domain to a previous state ? Anybody can help ? It would be much appreciated! Thanks and Regards, ZZ Tag: CSVDE tool usage Tag: 176587
 - 25
 - sysvol not replicating to dc in another site Situation: Site1: DC1 DC2 Site2: DC3 NO dns trouble. Replication of the Active directory is working without any problem. When I add a user on DC3 it's replicated to DC1 en DC2 and the other way arround. The only problem is that replication of the sysvol share isn't working (anymore) I don't know since when it stopped working.. but my group policies don't sync anymore from site 1 to site 2 and visa versa. I get NO errors in my logfiles on all servers.. The only errors I can find are in the winnt\debug directory: Errors: <SndCsMain: 2612: 874: S0: 16:01:12> ++ ERROR - EXCEPTION (000006be) : WStatus: RPC_S_CALL_FAILED <SndCsMain: 2612: 875: S0: 16:01:12> :SR: Cmd 014e2470, CxtG f295c5b4, WS RPC_S_CALL_FAILED, To FMGEXACT01.int.foreignmedia.com Len: (1204) [SndFail - rpc exception] <SndCsMain: 2612: 895: S0: 16:01:12> :SR: Cmd 014e2470, CxtG f295c5b4, WS RPC_S_CALL_FAILED, To FMGEXACT01.int.foreignmedia.com Len: (1204) [SndFail - Send Penalty] <RcsForceUnjoin: 2128: 2945: S0: 16:01:12> :X: ***** UNJOINED DOMAIN SYSTEM VOLUME (SYSVOL SHARE)\FMGPINK01\FMGPINK01 -> FOREIGNMEDIA\FMGEXACT01$ RemoteCxt <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014e5e68 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014e0300 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014ecfb8 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 0023c950 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014eaae8 <FrsDsFindComputer: 1848: 8717: S2: 16:01:15> :DS: Computer FQDN is cn=fmgpink01,ou=domain controllers,dc=int,dc=foreignmedia,dc=com <FrsDsFindComputer: 1848: 8723: S2: 16:01:15> :DS: Computer's dns name is fmgpink01.int.foreignmedia.com <FrsDsFindComputer: 1848: 8737: S2: 16:01:15> :DS: Settings reference is cn=ntds settings,cn=fmgpink01,cn=servers,cn=drachten,cn=sites,cn=configuration,dc=int,dc=foreignmedia,dc=com <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1000 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1000 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1103 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1103 Tag: CSVDE tool usage Tag: 176578

I have a challenge to move 300 users from being CONTACT to being a AD USER.
I have exported all settings so that I can just modify the ObjectClass and OU
settings and import all of the other settings into AD Windows 2000. However
I have an error stating that "Constraint Violation" "A required attribute is
missing". I have run export with -f filename.csv -m -r -s servername. Due
to the email address not changing and it appears to have a user account in
the contact file, this appears to be the issue.

Is there something I am missing about this tool? I have not used this tool
for many years so there could be a minor change required in order to make
this change.

My concern is that I can not edit the csv file, so it would be only a backup
and recovery to the same everything. If this is the case, does anyone else
have an idea to complete this change without keying in every user?
--
Bill Rowland MCSA MCSE 2000

Top

Re: CSVDE tool usage by Ken

Ken
Fri Mar 28 08:26:27 PDT 2008

Hello,

To create a user you must supply a value for the sAMAccountName attribute.
Your contacts do not have this attribute. Are you accounting for this in
your import?

--
Ken Aldrich
DSRAZOR for Windows
Visual Click Software, Inc.
www.visualclick.com

"Bill Rowland" <BillRowland@discussions.microsoft.com> wrote in message
news:709AA913-8F60-45A1-A75D-B58ED5CDAA30@microsoft.com...
>I have a challenge to move 300 users from being CONTACT to being a AD USER.
> I have exported all settings so that I can just modify the ObjectClass and
> OU
> settings and import all of the other settings into AD Windows 2000.
> However
> I have an error stating that "Constraint Violation" "A required attribute
> is
> missing". I have run export with -f filename.csv -m -r -s servername.
> Due
> to the email address not changing and it appears to have a user account in
> the contact file, this appears to be the issue.
>
> Is there something I am missing about this tool? I have not used this
> tool
> for many years so there could be a minor change required in order to make
> this change.
>
> My concern is that I can not edit the csv file, so it would be only a
> backup
> and recovery to the same everything. If this is the case, does anyone
> else
> have an idea to complete this change without keying in every user?
> --
> Bill Rowland MCSA MCSE 2000

Top