Tools to Monitor AD account lock/unlock information

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - Slow AD logon if username longer than 8 chars Hi all. I have a problem with some (not all) remote sites clients that take a veeeery long long time to login, and I'm talking about 30+ minutes, if they ever manage to logon. This happens only on some clients and only with some users. At first I pinpointed the problem to the "home directory" setting, that pointed to w: -> \\myserver\users$\%username% By coincidence I discovered that removing the home directory mapping from the user profile (in the AD management console), the logon was almost instantaneous. I simply started to map the home directory within the login script, with a line like this: net use W: \\myserver\users$\%username% If I use instead this other line I get the slow logon again net use w: /HOME NOW, the problem has returned...logon sloooow again. Only way I managed to find was to shorten the username to something equal or shorter than 8 chars... My AD DC are all Win2000 , I have primary and secondary DNS and WINS located on the first two servers, which are in the central site. The "slow logon" pcs are in peripheric sites, connected with slower lines. The problem is very curious because in these very same "slow" sites I have lots of "fast logon" pcs. Some things I tried are: - recreate the user profile from scratch - check DNS settings, including suffixes - gpupdate (or "secedit /refreshpolicy user_policy /enforce" and secedit /refreshpolicy machine_policy /enforce on win2000 clients) - disable slow link detection All machines (servers and clients) are patched with WSUS. Please help me! Thank you in advance Michele Tag: Tools to Monitor AD account lock/unlock information Tag: 176112
  - 2
    - Adding 2003 server Backup Domain Controller to 2000 Domain I am trying to add a 2003 server with active directory to serve as a backup domain controller to a 2000 Domain. When trying to add AD on the 2003 server, I get an error that the forest is not prepared and to use the Adprep command-line tool to prepare both the forest and the domain. Taking into consideration that on the current 2000 server PDC has Exchange server 2000 installed, what are the proper steps in order to successfully complete this task? Tag: Tools to Monitor AD account lock/unlock information Tag: 176076
  - 3
    - Reverse Lookup zone Hello, Even though my Active Directory DNS is set to Scavenge Record after 7 days, but a lot of information in "Reverse Lookup zone" is very old. These records also should have up to date (7days) right? Why it doesn't refresh? when I nslookup IP, gives different information that when I ping COMPUTER NAME MC Tag: Tools to Monitor AD account lock/unlock information Tag: 176074
  - 4
    - Move tree error I am trying to move a user opbject from one domain to another domain. The domains reside in the same forest. I am trying to use the movetree command. movetree /start /check /s engwdc01.eng.network.local /D opswdc01.ops.network.local /sdn ou=moveme,ou=users,ou=r&d,dc=eng,dc=network,dc=local /ddn ou=moveme,ou=users,ou=exec,dc=ops,dc=network,dc=local /u eng\admin /p (admin password) /Verbose I get an error that says â??dâ?? not recognized and I cannot figure out what is causing the error. I was wondering if anyone could help me. Thanks. Tag: Tools to Monitor AD account lock/unlock information Tag: 176067
  - 5
    - Tracking User who delted files???? I have a Win2000 Server running Active DIrectory. I have a situation where I KNOW that some files were deleted. I cannot prove if they were deleted by accident or maliciously, but I have my suspiciions. I CAN narrow the possibilities because the files were in a Security Restricted area. So..... Is there any logs, etc, that can tell me explicitly which AD User deleted a specific file? Thanks in advance. Tag: Tools to Monitor AD account lock/unlock information Tag: 176065
  - 6
    - what computer? How can I find what computer an user is log onto? (and vice versa) Tag: Tools to Monitor AD account lock/unlock information Tag: 176064
  - 7
    - Transitive Trusts I have two domains on the same MAN separated by a router. I can see Domain A from B and vice versa. I have trusts setup on each domain so Domain A trust B and Domain B trust A. However, in windows Active Directory Domains and Trusts they are showing up as Transitive - no. How can I set them as yes? Tag: Tools to Monitor AD account lock/unlock information Tag: 176057
  - 8
    - Cross Forest Trust Hello I'm trying to setup a cross forest trust in W2K. I have name resolution working both ways. The distant domainB has AD integrated DNS enabled forwarding to our unix name servers. It appears that this one was able to contact Domain A to create the trust. But when I try to complete the trust relationship on Domain A adding Domain B it fails saying the domain cannot be contacted. Domain A is not using AD integrated DNS only UNIX DNS. Do I need to have AD integrated DNS setup on both sides? I've tested accessing all the required ports using the portping util and everything's successful. Any Ideas why I can't establish the trust on the Domain A side to trust Domain B? -- Thanks! Crisoft Tag: Tools to Monitor AD account lock/unlock information Tag: 176051
  - 9
    - Andy Warhol Posters . Andy directory - web directory - dusiness directory - shopping directoru Webdirectory is human edited web directory with various categories and subcategories. Submission and. Approval is fast (usually 24 hours or less). The directory project has a clear strategic validity, both in terms of free positioning on search engines, and ease of use, by allowing to it's visitors to make the best use of the information for free. www.globelinks.info www.totheworld.info www.totheplanet.info www.totheglobe.info Our directory may be a good solution for website owners when they seek to improve their link popularity and increase their traffic. By submitting your website you get a direct link from one of our inner pages, chossen by you. Your listing consists in your website's title, URL and description. After a few closer looks we decide to include or not your website in our web directory. Web directories are popularly used by webmasters, users, and anyone in Internet business. directories allow Internet businesses to collect relevant links to their websites. This is one of the top strategies used to promote businesses. You should submit your site to as many directories as you can. The submission process is the easiest ever: just browse untill you found the best category for your website, then you'll see the "Suggest Link" button. Please be aware that our system rejects automatically submissions stuffed with keywords or submissions without proper punctuations. Useful resourse: there are loads of specialized directories. So it would be advisable to look up into directiory business directory - web directory - directory - web directory f you have to look up anything related to business, or hit upon a shopping directory to check out the free deals available. You can also check out Directory. directiory business directory - web directory - directory - web directory It is important to put in the proper keywords in order to come across the exact information you are looking for. With the amount of popularity these directories have achieved, they are surely going to revolutionize the information looking scenario especially on the online world. http://www.globelinks.info http://www.totheworld.info http://www.totheplanet.info http://www.totheglobe.info http://www.interester.com CKwJyJGh3jKrm7on2JSN5EueShvWLngU2ARlipVaT7 Tag: Tools to Monitor AD account lock/unlock information Tag: 176049
  - 10
    - LSASS.EXE Error Hi, Domain controller and Workstations in a child domain of mine are getting restarted all of a sudden. The error that I see is "The system process lsass.exe terminated unexpectedly with status code -1073741819. The system will now shut down and restart. ". Could anybody help me to sort out this problem. Thanks Chandimal Tag: Tools to Monitor AD account lock/unlock information Tag: 176032
  - 11
    - actual exam preparation questions and answers braindumps hi, beitcertified is providing latest practice questions and answers brain dumps for almost all certifications. visit http://www.beitcertified.biz and download free preparation and training material. Tag: Tools to Monitor AD account lock/unlock information Tag: 176021
  - 12
    - Server 200 Domain and Server 2003 Domain We currently have two separate domains call them Domain1 and Domain2. They are separate tress and do not even know either one exisits. We have them both on different subnets and route traffic between them via a router. My question is this. We now have a need to have users in Domain2 (Server2003 domain) connect to resources in Domain1 (Server 2000 domain). We can do this as it stands without the trusts...kind of....but it prompts for credentials. Is there a way to set up a TRUST between these two domains so a logon prompt will not popup every time a user attempts to connect to resuorces on domain1 from domain2? In some cases users are even getting the access denied message when attempting to access resuorces from Domain2 to Domain1. If more information is necessary please let me know. I thank you all in advance for your time assisting me with this. Rick Tag: Tools to Monitor AD account lock/unlock information Tag: 176020
  - 13
    - inetorgpersonprevt.ldf on windows 2000 domain for windows 2003 upg I am preparing a windows 2k domain with Exchange 2k for a windows 2003 sever upgrade. The plan is to keep exchange at 2000 for now and upgrade the domain servers to 2003. In the process I am following MS article 325379 rev 21.3 . In the section relating to Exch 2k in Win 2K forests(pages 5 and 6) it states to run the inetorgpersonprevent.ldf script to prevent mangled attribs later (basically remove the dashes in the name) for objects: ms-Exch-assistant-name, ms-exch-labeleduri, and ms-exch-house-identifier. I ran the script and it ran successfully! However, when I use AdSIedit to view the objects the have not changed at all. Am I looking at the right objects? Do I need to use a different tool/location to view the changes? I appreciate your help and info. Thank you. Tag: Tools to Monitor AD account lock/unlock information Tag: 176018
  - 14
    - Question about GUIDs in Interforest migration I have a scenario whereby I am trying to do an an interforest migration between a Windows 2000 source domain and a Windows 2000 target domain, using the ADMT. My understanding is that there is a limitation in ADMT when dealing with Windows 2000 source domains in that the GUIDs are not preserved. What would be the impact of missing GUIDs after the migration? Source: Domain Migration Cookbook, Chapter 4: Restructuring Tools, Disadvantages of Interforest Migration - http://technet.microsoft.com/en-us/library/Bb727128.aspx Thanks, Ben Tag: Tools to Monitor AD account lock/unlock information Tag: 176009
  - 15
    - Explorer unresponsive when port 445 is blocked from client I originally posted this in Winodws Vista administration; I'm posting here to encourage a response. I experience unresponsiveness (also could be seen as slowdown) after joining my Vista machines to the active directory. I experience it particularly when I take an AD-joined laptop and carry it to another location, such as a friend's house or coffee shop. When I do this, and the provider (e.g. Comcast or T-Mobile, because I know the problems occur there) blocks port 445 outgoing, the symptoms will arise. In particular, any function that requires interaction with Explorer (.exe) will take 30-90 seconds to complete. This includes, for example, saving a downloaded file using Firefox. Because Firefox integrates with Explorer to save files (I think to render the icons), when I try to save a file using firefox in this environment, the download will block for 30-90 seconds before proceeding. It seems to be that Explorer is blocking to perform some sort of Active Directory action which requires port 445 (microsoft-ds) on which to communicate. Explorer resolves a name for the AD action but must wait for the TCP timeout to occur before returning control to the calling application. I don't use isolated DNS, so my Active Directory DNS is visible from any host on the Internet. I can see in other deployments why this symptom would not arise -- because if the DNS were isolated, the host would not have an AD server to attempt a connection, and thus would not have to wait for the TCP timeout. I would not be feasible for me to put an AD server at every location, because I have about 2 PCs per location, so it's also difficult for me to isolate the DNS. This problem occurs with or without roaming profiles. It occurs on brand new Vista machines recently joined to the domain. This problem also exhibited itself to a lesser degree in Windows XP. One work-around that often works is to establish a VPN connection to one of the domain controllers. In this way, microsoft-ds traffic can pass unobstructed, and the problem goes away immediately. Unfortunately, it's cumbersome to instruct other users to establish a VPN connection to keep their machine from becoming non-responsive. This to me is clearly a design flaw or design oversight, or possibly just an unsupported configuration. I've applied all Windows Updates as well as kb941649, but the behavior remains the same. I would very much appreciate any suggestions for alleviating this problem. I'm also happy to provide additional details if a Microsoft rep takes interest in reproducing the problem. Sincerely, Jason R. Coombs Tag: Tools to Monitor AD account lock/unlock information Tag: 176004
  - 16
    - Separating trusted domains Hi, I've got a question about removing a trust relationship between two domains that I was hoping that some kind person could help me with. We have two domains that I'm pretty sure are two different forests that are joined together in a two-way transitive trust. One of the domains might be a tree in the forest of the other, but I'm pretty sure that it isn't because it's namespace is different, i.e. Domain1 is named company.com and Domain 2 is called homedomain.com. Is this an incorrect assumption? We would like to gracefully remove the relationship between these two domains (company.com and homedomain.com), and I'm pretty sure that I know how to do it, but after Googling for a few hours, I can only find documentation on how to remove orphaned domains, or what to do if the domains were disconnected un-gracefully. I was hoping that I could list out the steps the basic progression that I'm going to follow and perhaps somebody would be kind enough to tell me if I'm going to screw things up. I removed the trust relationship between the two domains in AD Domains and Trusts, but when I went to AD Sites and Services to delete the homedomain.com site and cease replication, I got a message saying that it couldn't delete the site. I'm guessing that removing the trust first was the wrong order, so I'm going to go back and re-establish the trust. After doing that, here is what I think I should do: 1. Remove the site replication 2. Remove the trust relationship. 3. Remove the zones in DNS? Is this the correct way to do it? I haven't been able to find any documentation on utilities that will remove this relationship gracefully. Can someone please give me some advice about the right way to do this? Thank you so much for any help that you can give... Regards, greyseal96 Tag: Tools to Monitor AD account lock/unlock information Tag: 176003
  - 17
    - DC issue I have a multi-server network with 2 DC's. The "master" DC (PDC,RID,OM) is on one server and the other is just a 2003 DC (DC2). Because of infrastructure changes, the 2 server will not be able to "talk" for about 5 days. I have clients who connect also will not be able to talk to the master DC, but can see the other DC. I have tested this in the past and I have issues with users not being able to log in who can only see DC2. Sometimes their login is slow or Windows will not allow them to log in. Is there something that i need to do to prepare for this? I have thought about getting a virtualized image of DC1 and loading it up @ the DC2 site and allowing users to log in that way. Is this an option? What could happen once DC1 becomes visible again? Thanks in advance. Tag: Tools to Monitor AD account lock/unlock information Tag: 175999
  - 18
    - Internal breech I am trying to catch what I beleive is an internal breach. User accounts are being changed in Active Directory. I am trying to find out who is making the change. Does anyone know how to view the user that changed the account and maybe the IP address of the computer that made the change. The other problem I am rectifing is that all administrators currently use one account which is why I would like to be able to fnid the IP address that made the change. Thanks Ace Tag: Tools to Monitor AD account lock/unlock information Tag: 175998
  - 19
    - KDC error with event Id 11 Hello Seeking suggestions from expertise... We are having AD environment and in one of the ADC we are getting KDC errors with event id 11. There are multiple accounts with name @domain.COM of type DS_USER_PRINCIPAL_NAME. Any suggestions will help me to solve this problem. Thanks in Advance. Santosh K. Tag: Tools to Monitor AD account lock/unlock information Tag: 175997
  - 20
    - Find People Site Found this site. Conduct A People Search. Sign up for free. Pretty cool site <a href=http://find-people-5.blogspot.com/>Find People</a> Bill Tag: Tools to Monitor AD account lock/unlock information Tag: 175979
  - 21
    - Looking for Windows 2008 Co-Authors Guys- First of all, I am sorry for cross posting, but I thought that I should post message in this newsgroup also. I posted similar message in the other news group. Please accept my appologies for cross posting. I am working on several Windows 2008 projects with different publishers, and I need co-authors in my team. If you are interested then please send me your: 1. Resume 2. Prior Writing experience 3. Links to any published articles All I need is good writing skills, and comittment. If you don't have prior writing experience then it is acceptable as long as you are enthusiastic. Thanks, Tariq Azad tariq.azad@rogers.com Tag: Tools to Monitor AD account lock/unlock information Tag: 175978
  - 22
    - Active Directory Replication Problem Hi I have 2 DC in different network segment/vpn and they just have let replicate. ServerA is the master domain controller where is has DNS (primary) service and Exchange installed. ServerB has DNS service and as secondary that is the DNS from ServerA. I can ping the ip address of ServerA at ServerB but I can't ping by it's name. When I do \\ServerA\sysvol or \\ServerA\netlogon it gives me the following message: This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. But when I write ">repadmin /showreps" at command line in ServerA it tells me that is replicating with ServerB but when I do the opposite it tells that ServerB isn't replicating with ServerA since xxx date. ========= At the event viewer it appears the following messages: 1) The DNS server list of restricted interfaces contains IP addresses that are not configured for use at the server computer. Use the DNS manager server properties, interfaces dialog, to verify and reset the IP addresses the DNS server should listen on. For more information, see "To restrict a DNS server to listen only on selected addresses" in the online Help. 2) The File Replication Service is having trouble enabling replication from ServerA to ServerB for c:\winnt\sysvol\domain using the DNS name ServerA.domain.com. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name ServerA.domain.com from this computer. [2] FRS is not running on ServerA.domain.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. ========== When I try to force replication from command line at ServerB the following message appears: Command: C:\>repadmin /replicate ServerA ServerB /force repadmin running command /replicate against server ServerA.domain.com DsBindWithCred to ServerA.domain.com failed with status 1722 (0x6ba): Can't retrieve message string 1722 (0x6ba), error 1815. Hopping for help... Thanks in advance Ricky Tag: Tools to Monitor AD account lock/unlock information Tag: 175969
  - 23
    - SYSVOL GPO's re:copying I have a former FSMO with an FRS problem. I don't care to fix the FRS problem becasue the server is being replaced by one of the same name but without the DC role. Apparently becasue of the FRS problem, my GPO folders (c:\winnt\sysvol\<my domain name>\polices\) did not replicate to my new FSMO when I transferred the roles. They still get applied when users logon to the domain but I can not longer manage them--I get an error, "the sytem cannot find the path specified", and as I stated, the folders are not in the same folder on my PDC. Can I simply copy the folders to my FSMO server? Tag: Tools to Monitor AD account lock/unlock information Tag: 175964
  - 24
    - Joining computer to my domain Whenever I have new computers or computers that need to be re-imaged when I'm setting up an old employee's machine for a new one I have to use a corporate ISO image. This image joins us to the corporate domain. The first thing I have to do when I'm done with the image is join the computer to our domain. I've been doing this for years without any problems, suddenly this is the 4th machine I've had difficulty with. When I go into my computer|properties|computername and change the domain name, I then get prompted for a username/password of a user with permissions to be able to join the computer to the domain. I put in the DomainName\administrator username/password, and there's a long pause. Then an error comes back saying that "The specified server cannot perform the requested operation." Oddly enough when I leave the username/password blank and hit enter it successfully joins the machine to the domain. This concerns me because something has changed and I fear it might be a security issue. I'm not sure where to even start down this path, but like I said I've been doing this for years and now suddenly I don't need to authenticate to join my domain and that's very disturbing. Can someone help me figure out how to troubleshoot something like this? I'm not sure I'm even going to the right forum as it could be several different things. The machine in question is a P4 windows XP SP2 machine. Tag: Tools to Monitor AD account lock/unlock information Tag: 175963
  - 25
    - What to expect? Removing Active Directory. I have Active Directory running on my tiny network at home. I'm considering removing it, since I'm not (I don't think) using any feature of it (*), and Home Server doesn't get along with it. I know the mechanics of it (running dcpromo.exe), but I'm worried about the affect. (*) Now the only feature that I am using that is tied to AD are domain account. In fact, as far as I know, "Administrator" is the local account on any of the PCs. Most of my documents and settings are under a domain account on one machine, and I'd hate to lose access to them (the documents I think I can deal with, but the idea of re- installing dozens of applications just to regain registry entries sound like a nightmare.) What happens to these domain accounts? Also, I'm using the DNS, WINS, DHCP and Routing services. What happens to these once AD is removed? Tag: Tools to Monitor AD account lock/unlock information Tag: 175962
- Next
  - 1
    - Account Operators No longer able to edit accounts All of a sudden our account operators group is no longer able to change passwords or unlock accounts. This started maybe 2 days ago. We are running a 2000 mixed mode domain with only two DCs both local. We have not made any changes within AD. Any thoughts would be appreciated. Tag: Tools to Monitor AD account lock/unlock information Tag: 175960
  - 2
    - Domain policy vs local policy Hello, We have Win 2000 domain, setup by someone who is not working here anymore. Problem is with domain policy; It's denying login locally to everybody, but domain admins. We need to be able to login locally as local administrator. Can not find settings in Group Policies how to enable it. On local mashine i can enable login locally, but effective policy is grayed out and login is denied. How to fix it? Thanks -- Ilya Tag: Tools to Monitor AD account lock/unlock information Tag: 175952
  - 3
    - NTDS.DIT database is inconsistent Hoping to get a help for this problem: - Starting in the windows recovery-directory service consol ( W2K) and analizing the ntis.dit by ntdsutil - sem - d - go f, I obtained the "inconsistency of the database" - I have no sytem back up - I have another pdc in the newtwork ( W2K) - How can I restore the first pdc? - It' possible to use the secind pdc ntdis.it file for the first one? Thaks in advance Dino A. Tag: Tools to Monitor AD account lock/unlock information Tag: 175949
  - 4
    - Active Directory User I create a user with the following: MembershipCreateStatus status; MembershipProvider mp = Membership.Providers["MyAdMembershipProvider"]; mp.CreateUser("Test2user@domain", "pa344ss123word!*&", "me@here", null, null, true, null, out status); This works fine. The only thing now is the Pre Windows 2000 login name is set to garbage as far as I can tell. e.g.: domain\$SS60H8-PPK4IRVSFIK1 We do have a couple of legacy NT based systems (about 2 I think) but I would like to keep existing compatibility. How can I control the Pre Windows 2000 login name? -- Mick Walker Software Engineer http://www.mick-walker.co.uk Tag: Tools to Monitor AD account lock/unlock information Tag: 175947
  - 5
    - beitcertified passing questions & answers Hello, I have used beitcertified questions and answers; these are really nice and helped me a lot for passing the exam. visit http://www.beitcertified.biz and try these latest brain dumps for your certification exam. Tag: Tools to Monitor AD account lock/unlock information Tag: 175943
  - 6
    - Creating folders on any Computer withing AD Domain Hi All, I am a new poster, so I appologise if this has been covered before, I did do a search and couldn't turn up much, but if I missed something obvious then I appologise. I am looking for a way in which I can create physical folders on any machine withing the current AD Group using C# and the DirectoryServices namespace. I am using Microsoft.Web.Administration to manage IIS and I can create new sites, virtual directories etc all fine. I just need a way to create the filesystem structure on any of the webservers within our domain. I hope there is a way to do it, I don't really want to go down the path of calling webservices located on the individual machines to create the needed directory structures. Kind Regards Tag: Tools to Monitor AD account lock/unlock information Tag: 175939
  - 7
    - SceCli Id.: 1202 Hi, the event SceCli Id.: 1202 appears each 5 minutes with the error: Security policies are propagated with warning. 0x534: No mapping between account names and security IDs was done. I looked at the support.microsoft.com and I found the KB:324383 But I dont know hot to fix this error. Any solution or help? Tks Tag: Tools to Monitor AD account lock/unlock information Tag: 175935
  - 8
    - Unattended Software installation Hello All: I was wondering if there is a way to install software on remote client machines (XP and VISTA) without using the RDP or Group Policy. I have tried using the PSEXEC (Mark Rassianovich's pstools), but had limited success, also tried remote installer trial version and it didn't always work. Cheers. Tag: Tools to Monitor AD account lock/unlock information Tag: 175933
  - 9
    - Unable to reuse hostname I've demoted a DC to be a member server using DCPROMO and change the IP address. The process was successfull. The DC is now a member server. However when i ping the member server, it shows the IP address of the DC and not the new IP address of the member server. I've remove it from the domain but now I'm not able to join it back to the domain. Kindly help. Thanks Tag: Tools to Monitor AD account lock/unlock information Tag: 175924
  - 10
    - Active Directory scripts Hi I need some (or a lot of) help having a way in this case a script that could help me doing the following tasks: 1. a script that could update the AD when I export the users to a txt file and then I need to update AD with new users 2. a script that allows to see for each OU where the users have their mailboxes/server. Thanks Ricky Tag: Tools to Monitor AD account lock/unlock information Tag: 175920
  - 11
    - How do you overide screensave setting in GP? I need some way to override the group policy screensaver setting for a single computer. Whenever this computer in left unattended for sometime during presentations, the screesaver causes it to lock up and the only recourse is to reboot. Is there anyway to override just the screensaver setting? Thanks! Ben Tag: Tools to Monitor AD account lock/unlock information Tag: 175918
  - 12
    - How to migrate services due to server substitution >Hello Pop, > >Sorry this NG is English. Hello! Sorry, it was a mistake. I try to explain my problem in English.... not a good one. We have to substitute our old server (windows 2000) with a new one (windows 2003). I'm not that expert on system administration but my boss tells me to find some documentation and do that configuration. The old server is a Domain Controller and is also a mail server with Exchange 2000 installed and obviously Active Direcotory It is the first time that i've to migrate services from one server to another. What is the best way to operate? For my small experience the steps to follow will be: - Assign a static IP Address to the new server near the old one - Add the server to the domina - Promote the sever to Domain Controller (is better to be before a secondary DC and after the primary domain controller or i can promote the server directly to primary DC?) - Exchange migration to the new server - Anything else? On the first 3 items i can do myself basing on some info that i've found on web. But some confirmation will be well accepted :D Instead, I need some help on the exhange migration because I have no idea. Someone can give me some help or URL in which find documentation? Thanks, Luca Tag: Tools to Monitor AD account lock/unlock information Tag: 175916
  - 13
    - Print Servers on VMWare We are looking to set up a few print servers with as many queues as possible - we expect light utilization of most of the printers (a few documents an hour maybe). According to what I've read in Microsoft's "Print Server Scalability and Sizing Technical Overview" document, having upwards of 1,500 (or even 2,000) queues on a server should not be a problem. I'm thinking about using a VMWare virtual server instance to perform this function, and I have not been able to locate much on the internet regarding the relationship between VMWare and high-utilization print servers. If you know something (warnings, etc), please let me know! Thanks... - JmD Tag: Tools to Monitor AD account lock/unlock information Tag: 175915
  - 14
    - Migration Dear All, We are planning to migrate our DC and Exchange from 2000 to 2003. We have 3 DC and one AD integrated exchange 2000. Now we are planning to migrate only Root DC and exchange 2000. I have upgraded exchange 2000 to exchange 2003. Now i need to upgrade our OS from 2000 to 2003. so i need to run the Adprep utility.Here i have two doubt now. 1. whether i need to migrate the ROOT DC first or the AD integrated exchange 2000 server? 2.which server i need to run the adprep first (either in root Dc or in AD integrated exchange 2000, or in Both)? Can anybody help ? Regards, Johnson Tag: Tools to Monitor AD account lock/unlock information Tag: 175908
  - 15
    - Migrazione Servizi per Sostituzione server Ciao a tutti, Il mio problema e` il seguente: dobbiamo sostituire il vecchio server 2000 che gestisce il dominio, la posta (exchange 2000) ed ovviamente active directory con un server nuovo in cui sara` installato 2003 server ma sul quale devo trasferire tutti i servizi. E` la prima volta che lo faccio per cui vi chiedo: come mi conviene procedere? A tentoni questi sono i passi che seguirei io: - assegnerei un IP statico nel range attualmente attribuito ai server adiacente al precedente. - Poi inserirei il server in dominio - Poi lo inserirei come controllore di Active Directory (subito primario?) - Poi la migrazione di Exchange Altro? Sui primi punti dovrei cavarmela ma sulla migrazione di Exchange non ho idea. Qualcuno sa indicarmi come procedere o sa darmi qualche link mirato sull'argomento. Grazie. Luca Tag: Tools to Monitor AD account lock/unlock information Tag: 175907
  - 16
    - How do you merge two Windows 2000 Domains? Hello All, We have two Windows 2000 domains called Redwave.com and Redwave.local. Redwave.com was the original domain and Redwave.local was implemented not long ago so as to discontinue the use of the .com domain name because we are also using Redwave.com as our website name. Since the implementation of the .local domain, we have slowly started to put all new users and computers to that domain but the majority of the users and computers are still on the .com domain. Each domain also acts as its own DNS and DHCP servers. The task at hand is to merge the .com domain to the .local domain with the result of having only one domain to deal with, Redwave.local. I would like to know how one should go about doing this. Thanks, Ben Tag: Tools to Monitor AD account lock/unlock information Tag: 175905
  - 17
    - Group Policy Management Not sure if this is the correct place to ask this question: Using the GPO tool, I am showing version mismatches on at least 3 Domain Controllers for user and computer policies for certain OU containers DCdiag is showing no errors. Replication seems to be happening although I have noticed that the SYSVOL folders of same controllers do not have the same files. Is there a way to force these changes to take place? DC#1 Created 11/28/2005 10:18:58 AM Modified 10/17/2007 10:53:12 PM User Revisions 11 (AD), 1 (sysvol) Computer Revisions 14 (AD), 7 (sysvol) DC#2 Created 11/28/2005 10:18:58 AM Modified 10/17/2007 8:59:30 PM User Revisions 11 (AD), 11 (sysvol) Computer Revisions 14 (AD), 14 (sysvol) Thanks Deb H Tag: Tools to Monitor AD account lock/unlock information Tag: 175896
  - 18
    - user account I have a user that signs into the domain with a workstation that has windows 2000 pro. For the past few days every time she signs in it is creating a new profile on the workstation. I looked under Documents and Settings and saw the following accounts. pwhite pwhite.domainName pwhite.000 pwhite~000 What is causing this and how can I stop it? btw, I am not using roaming profiles, but I am redirecting 'My Documents' that seems to not be working. Tag: Tools to Monitor AD account lock/unlock information Tag: 175894
  - 19
    - XP client does NOT get policy this is the problem: a domain with one DC running win2kadvsp4,update rollup 1 installed aswell.some group policies defined on it. the problem is that XP clients do NOT get the policies on their join to the domain.I have to go to them,log on as administrator,run GPUPDATE.EXE several times,wait for random minutes and restart several times till they get the policies finally. I have windows 2000 clients whose computer objects are in the same OU as XP ones and they do not have this problem,they correctly get and apply all policies on their first restart after domain join. I had win2k3 before and it seems that neither 2k nor XP client had such problem with that,but considering the fact that I couldn't find anything on microsoft regarding this problem with 2k Domain Controllers,this must be abnormal. Tag: Tools to Monitor AD account lock/unlock information Tag: 175890
  - 20
    - Fatloss computer program I have been using this computer program for a couple weeks now and i am very pleased with the results so far. its a software fatloss program, if your looking for a diet/weightloss plan i reccomend you check this place out first: http://fatloss9.50webs.com Tag: Tools to Monitor AD account lock/unlock information Tag: 175886
  - 21
    - HP Desktop for sale! Hi, I have an unused HP Pavilion with the fallowing specs: # Processor: AMD Athlon 64 X2 4000+ (2.1GHz, 2000MT/s System Bus) # Memory: 2048MB PC2-5300 DDR2 SDRAM memory (2x1GB) (expandable to 8 GB (4 x 2 GB) (64-bit OS)/ 4 GB (4 x 1 GB) (32-bit OS)) # Hard Drive:320GB 7200RPM SATA 3G (3.0 Gb/sec) hard drive # Optical Drive: 16X DVD(+/-)R/RW 12X RAM (+/-)R DL LightScribe SATA drive # Expandable Drive Bay: HP Pocket Media Drive bay # Video Graphics: Integrated graphics # Network Interface: Integrated 10/100BaseT network interface # Sound: High Definition 8-channel audio # Fax/Modem: 56K bps data/fax modem # Operating System: Genuine Windows Vista® Home Premium This is "used" but basically brand new (it has literally been on for no more than 6 total hours..) is only 1 month old.. PRICE: $425 OBO Email- pbdude911@yahoo.com Tag: Tools to Monitor AD account lock/unlock information Tag: 175885
  - 22
    - Watch NFL Games Online Watch NFL Games Online! For every one who wants to watch the games online because they dont live in the teams town or are at work i found a site that has basically every game covered. Its perfect if you have afford a monthly $70 direct tv nfl access subscription. they got a bunch of channels The sites http://nflonline.wizhoo.com Tag: Tools to Monitor AD account lock/unlock information Tag: 175884
  - 23
    - Active Directory FAQ Learn more on the FAQ of active directory by visiting: HTTP://ACTIVEDIRECTORYFAQ.BLOGSPOT.COM Its worth visiting. -- cpatralekh ------------------------------------------------------------------------ cpatralekh's Profile: http://forums.techarena.in/member.php?userid=33231 View this thread: http://forums.techarena.in/showthread.php?t=835684 http://forums.techarena.in Tag: Tools to Monitor AD account lock/unlock information Tag: 175881
  - 24
    - Removing Certificate server Hi, Found in the AD configuration two old and now non-functioning certificate servers. Can I just delete the entries within the AD | Configuration partition | Services | Public Key Services...? Cheers, Apollo Tag: Tools to Monitor AD account lock/unlock information Tag: 175880
  - 25
    - setup additional domain controller i have established pdc on winder server 2003 standard edition now i want to establish a back up domain controller now i have installed windows server 2003 Enterprise Edition on the other server. i do this by adding an additional domain controller for the server when i do this the active directory domain wizared give an error The operation failed because. The Active Directory wizard cant continue because the forest is not prepared for windows server 2003. Tag: Tools to Monitor AD account lock/unlock information Tag: 175870

As far as I remember, there's a AD tools to monitor AD account in
mutiple servers, so we are able to know that my account was locked by
which DC.

but now I dont know the tools name and which to download it?

thanks in advance.

Bruce

Top

Re: Tools to Monitor AD account lock/unlock information by Andrei

Andrei
Mon Nov 19 02:20:56 PST 2007

lockoutstatus.exe from Account Lockout and Management Tools.
http://www.microsoft.com/downloads/details.aspx?FamilyID=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

--
Regards,
Andrei Ungureanu

<bcao@lairdtech.com> wrote in message
news:0f5f3bfe-f7e1-434a-b5e4-479bea42a879@e10g2000prf.googlegroups.com...
>
>
> As far as I remember, there's a AD tools to monitor AD account in
> mutiple servers, so we are able to know that my account was locked by
> which DC.
>
> but now I dont know the tools name and which to download it?
>
> thanks in advance.
>
> Bruce

Top

Re: Tools to Monitor AD account lock/unlock information by bcao

bcao
Sun Dec 02 22:16:22 PST 2007

thanks, this is the tools I found quite a long time.

> lockoutstatus.exe from Account Lockout and Management Tools.http://www.microsoft.com/downloads/details.aspx?FamilyID=7AF2E69C-91F...
>

Top