Transitive Trusts

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - Cross Forest Trust Hello I'm trying to setup a cross forest trust in W2K. I have name resolution working both ways. The distant domainB has AD integrated DNS enabled forwarding to our unix name servers. It appears that this one was able to contact Domain A to create the trust. But when I try to complete the trust relationship on Domain A adding Domain B it fails saying the domain cannot be contacted. Domain A is not using AD integrated DNS only UNIX DNS. Do I need to have AD integrated DNS setup on both sides? I've tested accessing all the required ports using the portping util and everything's successful. Any Ideas why I can't establish the trust on the Domain A side to trust Domain B? -- Thanks! Crisoft Tag: Transitive Trusts Tag: 176051
  - 2
    - Andy Warhol Posters . Andy directory - web directory - dusiness directory - shopping directoru Webdirectory is human edited web directory with various categories and subcategories. Submission and. Approval is fast (usually 24 hours or less). The directory project has a clear strategic validity, both in terms of free positioning on search engines, and ease of use, by allowing to it's visitors to make the best use of the information for free. www.globelinks.info www.totheworld.info www.totheplanet.info www.totheglobe.info Our directory may be a good solution for website owners when they seek to improve their link popularity and increase their traffic. By submitting your website you get a direct link from one of our inner pages, chossen by you. Your listing consists in your website's title, URL and description. After a few closer looks we decide to include or not your website in our web directory. Web directories are popularly used by webmasters, users, and anyone in Internet business. directories allow Internet businesses to collect relevant links to their websites. This is one of the top strategies used to promote businesses. You should submit your site to as many directories as you can. The submission process is the easiest ever: just browse untill you found the best category for your website, then you'll see the "Suggest Link" button. Please be aware that our system rejects automatically submissions stuffed with keywords or submissions without proper punctuations. Useful resourse: there are loads of specialized directories. So it would be advisable to look up into directiory business directory - web directory - directory - web directory f you have to look up anything related to business, or hit upon a shopping directory to check out the free deals available. You can also check out Directory. directiory business directory - web directory - directory - web directory It is important to put in the proper keywords in order to come across the exact information you are looking for. With the amount of popularity these directories have achieved, they are surely going to revolutionize the information looking scenario especially on the online world. http://www.globelinks.info http://www.totheworld.info http://www.totheplanet.info http://www.totheglobe.info http://www.interester.com CKwJyJGh3jKrm7on2JSN5EueShvWLngU2ARlipVaT7 Tag: Transitive Trusts Tag: 176049
  - 3
    - LSASS.EXE Error Hi, Domain controller and Workstations in a child domain of mine are getting restarted all of a sudden. The error that I see is "The system process lsass.exe terminated unexpectedly with status code -1073741819. The system will now shut down and restart. ". Could anybody help me to sort out this problem. Thanks Chandimal Tag: Transitive Trusts Tag: 176032
  - 4
    - actual exam preparation questions and answers braindumps hi, beitcertified is providing latest practice questions and answers brain dumps for almost all certifications. visit http://www.beitcertified.biz and download free preparation and training material. Tag: Transitive Trusts Tag: 176021
  - 5
    - Server 200 Domain and Server 2003 Domain We currently have two separate domains call them Domain1 and Domain2. They are separate tress and do not even know either one exisits. We have them both on different subnets and route traffic between them via a router. My question is this. We now have a need to have users in Domain2 (Server2003 domain) connect to resources in Domain1 (Server 2000 domain). We can do this as it stands without the trusts...kind of....but it prompts for credentials. Is there a way to set up a TRUST between these two domains so a logon prompt will not popup every time a user attempts to connect to resuorces on domain1 from domain2? In some cases users are even getting the access denied message when attempting to access resuorces from Domain2 to Domain1. If more information is necessary please let me know. I thank you all in advance for your time assisting me with this. Rick Tag: Transitive Trusts Tag: 176020
  - 6
    - inetorgpersonprevt.ldf on windows 2000 domain for windows 2003 upg I am preparing a windows 2k domain with Exchange 2k for a windows 2003 sever upgrade. The plan is to keep exchange at 2000 for now and upgrade the domain servers to 2003. In the process I am following MS article 325379 rev 21.3 . In the section relating to Exch 2k in Win 2K forests(pages 5 and 6) it states to run the inetorgpersonprevent.ldf script to prevent mangled attribs later (basically remove the dashes in the name) for objects: ms-Exch-assistant-name, ms-exch-labeleduri, and ms-exch-house-identifier. I ran the script and it ran successfully! However, when I use AdSIedit to view the objects the have not changed at all. Am I looking at the right objects? Do I need to use a different tool/location to view the changes? I appreciate your help and info. Thank you. Tag: Transitive Trusts Tag: 176018
  - 7
    - Question about GUIDs in Interforest migration I have a scenario whereby I am trying to do an an interforest migration between a Windows 2000 source domain and a Windows 2000 target domain, using the ADMT. My understanding is that there is a limitation in ADMT when dealing with Windows 2000 source domains in that the GUIDs are not preserved. What would be the impact of missing GUIDs after the migration? Source: Domain Migration Cookbook, Chapter 4: Restructuring Tools, Disadvantages of Interforest Migration - http://technet.microsoft.com/en-us/library/Bb727128.aspx Thanks, Ben Tag: Transitive Trusts Tag: 176009
  - 8
    - Explorer unresponsive when port 445 is blocked from client I originally posted this in Winodws Vista administration; I'm posting here to encourage a response. I experience unresponsiveness (also could be seen as slowdown) after joining my Vista machines to the active directory. I experience it particularly when I take an AD-joined laptop and carry it to another location, such as a friend's house or coffee shop. When I do this, and the provider (e.g. Comcast or T-Mobile, because I know the problems occur there) blocks port 445 outgoing, the symptoms will arise. In particular, any function that requires interaction with Explorer (.exe) will take 30-90 seconds to complete. This includes, for example, saving a downloaded file using Firefox. Because Firefox integrates with Explorer to save files (I think to render the icons), when I try to save a file using firefox in this environment, the download will block for 30-90 seconds before proceeding. It seems to be that Explorer is blocking to perform some sort of Active Directory action which requires port 445 (microsoft-ds) on which to communicate. Explorer resolves a name for the AD action but must wait for the TCP timeout to occur before returning control to the calling application. I don't use isolated DNS, so my Active Directory DNS is visible from any host on the Internet. I can see in other deployments why this symptom would not arise -- because if the DNS were isolated, the host would not have an AD server to attempt a connection, and thus would not have to wait for the TCP timeout. I would not be feasible for me to put an AD server at every location, because I have about 2 PCs per location, so it's also difficult for me to isolate the DNS. This problem occurs with or without roaming profiles. It occurs on brand new Vista machines recently joined to the domain. This problem also exhibited itself to a lesser degree in Windows XP. One work-around that often works is to establish a VPN connection to one of the domain controllers. In this way, microsoft-ds traffic can pass unobstructed, and the problem goes away immediately. Unfortunately, it's cumbersome to instruct other users to establish a VPN connection to keep their machine from becoming non-responsive. This to me is clearly a design flaw or design oversight, or possibly just an unsupported configuration. I've applied all Windows Updates as well as kb941649, but the behavior remains the same. I would very much appreciate any suggestions for alleviating this problem. I'm also happy to provide additional details if a Microsoft rep takes interest in reproducing the problem. Sincerely, Jason R. Coombs Tag: Transitive Trusts Tag: 176004
  - 9
    - Separating trusted domains Hi, I've got a question about removing a trust relationship between two domains that I was hoping that some kind person could help me with. We have two domains that I'm pretty sure are two different forests that are joined together in a two-way transitive trust. One of the domains might be a tree in the forest of the other, but I'm pretty sure that it isn't because it's namespace is different, i.e. Domain1 is named company.com and Domain 2 is called homedomain.com. Is this an incorrect assumption? We would like to gracefully remove the relationship between these two domains (company.com and homedomain.com), and I'm pretty sure that I know how to do it, but after Googling for a few hours, I can only find documentation on how to remove orphaned domains, or what to do if the domains were disconnected un-gracefully. I was hoping that I could list out the steps the basic progression that I'm going to follow and perhaps somebody would be kind enough to tell me if I'm going to screw things up. I removed the trust relationship between the two domains in AD Domains and Trusts, but when I went to AD Sites and Services to delete the homedomain.com site and cease replication, I got a message saying that it couldn't delete the site. I'm guessing that removing the trust first was the wrong order, so I'm going to go back and re-establish the trust. After doing that, here is what I think I should do: 1. Remove the site replication 2. Remove the trust relationship. 3. Remove the zones in DNS? Is this the correct way to do it? I haven't been able to find any documentation on utilities that will remove this relationship gracefully. Can someone please give me some advice about the right way to do this? Thank you so much for any help that you can give... Regards, greyseal96 Tag: Transitive Trusts Tag: 176003
  - 10
    - DC issue I have a multi-server network with 2 DC's. The "master" DC (PDC,RID,OM) is on one server and the other is just a 2003 DC (DC2). Because of infrastructure changes, the 2 server will not be able to "talk" for about 5 days. I have clients who connect also will not be able to talk to the master DC, but can see the other DC. I have tested this in the past and I have issues with users not being able to log in who can only see DC2. Sometimes their login is slow or Windows will not allow them to log in. Is there something that i need to do to prepare for this? I have thought about getting a virtualized image of DC1 and loading it up @ the DC2 site and allowing users to log in that way. Is this an option? What could happen once DC1 becomes visible again? Thanks in advance. Tag: Transitive Trusts Tag: 175999
  - 11
    - Internal breech I am trying to catch what I beleive is an internal breach. User accounts are being changed in Active Directory. I am trying to find out who is making the change. Does anyone know how to view the user that changed the account and maybe the IP address of the computer that made the change. The other problem I am rectifing is that all administrators currently use one account which is why I would like to be able to fnid the IP address that made the change. Thanks Ace Tag: Transitive Trusts Tag: 175998
  - 12
    - KDC error with event Id 11 Hello Seeking suggestions from expertise... We are having AD environment and in one of the ADC we are getting KDC errors with event id 11. There are multiple accounts with name @domain.COM of type DS_USER_PRINCIPAL_NAME. Any suggestions will help me to solve this problem. Thanks in Advance. Santosh K. Tag: Transitive Trusts Tag: 175997
  - 13
    - Find People Site Found this site. Conduct A People Search. Sign up for free. Pretty cool site <a href=http://find-people-5.blogspot.com/>Find People</a> Bill Tag: Transitive Trusts Tag: 175979
  - 14
    - Looking for Windows 2008 Co-Authors Guys- First of all, I am sorry for cross posting, but I thought that I should post message in this newsgroup also. I posted similar message in the other news group. Please accept my appologies for cross posting. I am working on several Windows 2008 projects with different publishers, and I need co-authors in my team. If you are interested then please send me your: 1. Resume 2. Prior Writing experience 3. Links to any published articles All I need is good writing skills, and comittment. If you don't have prior writing experience then it is acceptable as long as you are enthusiastic. Thanks, Tariq Azad tariq.azad@rogers.com Tag: Transitive Trusts Tag: 175978
  - 15
    - Active Directory Replication Problem Hi I have 2 DC in different network segment/vpn and they just have let replicate. ServerA is the master domain controller where is has DNS (primary) service and Exchange installed. ServerB has DNS service and as secondary that is the DNS from ServerA. I can ping the ip address of ServerA at ServerB but I can't ping by it's name. When I do \\ServerA\sysvol or \\ServerA\netlogon it gives me the following message: This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. But when I write ">repadmin /showreps" at command line in ServerA it tells me that is replicating with ServerB but when I do the opposite it tells that ServerB isn't replicating with ServerA since xxx date. ========= At the event viewer it appears the following messages: 1) The DNS server list of restricted interfaces contains IP addresses that are not configured for use at the server computer. Use the DNS manager server properties, interfaces dialog, to verify and reset the IP addresses the DNS server should listen on. For more information, see "To restrict a DNS server to listen only on selected addresses" in the online Help. 2) The File Replication Service is having trouble enabling replication from ServerA to ServerB for c:\winnt\sysvol\domain using the DNS name ServerA.domain.com. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name ServerA.domain.com from this computer. [2] FRS is not running on ServerA.domain.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. ========== When I try to force replication from command line at ServerB the following message appears: Command: C:\>repadmin /replicate ServerA ServerB /force repadmin running command /replicate against server ServerA.domain.com DsBindWithCred to ServerA.domain.com failed with status 1722 (0x6ba): Can't retrieve message string 1722 (0x6ba), error 1815. Hopping for help... Thanks in advance Ricky Tag: Transitive Trusts Tag: 175969
  - 16
    - SYSVOL GPO's re:copying I have a former FSMO with an FRS problem. I don't care to fix the FRS problem becasue the server is being replaced by one of the same name but without the DC role. Apparently becasue of the FRS problem, my GPO folders (c:\winnt\sysvol\<my domain name>\polices\) did not replicate to my new FSMO when I transferred the roles. They still get applied when users logon to the domain but I can not longer manage them--I get an error, "the sytem cannot find the path specified", and as I stated, the folders are not in the same folder on my PDC. Can I simply copy the folders to my FSMO server? Tag: Transitive Trusts Tag: 175964
  - 17
    - Joining computer to my domain Whenever I have new computers or computers that need to be re-imaged when I'm setting up an old employee's machine for a new one I have to use a corporate ISO image. This image joins us to the corporate domain. The first thing I have to do when I'm done with the image is join the computer to our domain. I've been doing this for years without any problems, suddenly this is the 4th machine I've had difficulty with. When I go into my computer|properties|computername and change the domain name, I then get prompted for a username/password of a user with permissions to be able to join the computer to the domain. I put in the DomainName\administrator username/password, and there's a long pause. Then an error comes back saying that "The specified server cannot perform the requested operation." Oddly enough when I leave the username/password blank and hit enter it successfully joins the machine to the domain. This concerns me because something has changed and I fear it might be a security issue. I'm not sure where to even start down this path, but like I said I've been doing this for years and now suddenly I don't need to authenticate to join my domain and that's very disturbing. Can someone help me figure out how to troubleshoot something like this? I'm not sure I'm even going to the right forum as it could be several different things. The machine in question is a P4 windows XP SP2 machine. Tag: Transitive Trusts Tag: 175963
  - 18
    - What to expect? Removing Active Directory. I have Active Directory running on my tiny network at home. I'm considering removing it, since I'm not (I don't think) using any feature of it (*), and Home Server doesn't get along with it. I know the mechanics of it (running dcpromo.exe), but I'm worried about the affect. (*) Now the only feature that I am using that is tied to AD are domain account. In fact, as far as I know, "Administrator" is the local account on any of the PCs. Most of my documents and settings are under a domain account on one machine, and I'd hate to lose access to them (the documents I think I can deal with, but the idea of re- installing dozens of applications just to regain registry entries sound like a nightmare.) What happens to these domain accounts? Also, I'm using the DNS, WINS, DHCP and Routing services. What happens to these once AD is removed? Tag: Transitive Trusts Tag: 175962
  - 19
    - Account Operators No longer able to edit accounts All of a sudden our account operators group is no longer able to change passwords or unlock accounts. This started maybe 2 days ago. We are running a 2000 mixed mode domain with only two DCs both local. We have not made any changes within AD. Any thoughts would be appreciated. Tag: Transitive Trusts Tag: 175960
  - 20
    - Domain policy vs local policy Hello, We have Win 2000 domain, setup by someone who is not working here anymore. Problem is with domain policy; It's denying login locally to everybody, but domain admins. We need to be able to login locally as local administrator. Can not find settings in Group Policies how to enable it. On local mashine i can enable login locally, but effective policy is grayed out and login is denied. How to fix it? Thanks -- Ilya Tag: Transitive Trusts Tag: 175952
  - 21
    - NTDS.DIT database is inconsistent Hoping to get a help for this problem: - Starting in the windows recovery-directory service consol ( W2K) and analizing the ntis.dit by ntdsutil - sem - d - go f, I obtained the "inconsistency of the database" - I have no sytem back up - I have another pdc in the newtwork ( W2K) - How can I restore the first pdc? - It' possible to use the secind pdc ntdis.it file for the first one? Thaks in advance Dino A. Tag: Transitive Trusts Tag: 175949
  - 22
    - Active Directory User I create a user with the following: MembershipCreateStatus status; MembershipProvider mp = Membership.Providers["MyAdMembershipProvider"]; mp.CreateUser("Test2user@domain", "pa344ss123word!*&", "me@here", null, null, true, null, out status); This works fine. The only thing now is the Pre Windows 2000 login name is set to garbage as far as I can tell. e.g.: domain\$SS60H8-PPK4IRVSFIK1 We do have a couple of legacy NT based systems (about 2 I think) but I would like to keep existing compatibility. How can I control the Pre Windows 2000 login name? -- Mick Walker Software Engineer http://www.mick-walker.co.uk Tag: Transitive Trusts Tag: 175947
  - 23
    - beitcertified passing questions & answers Hello, I have used beitcertified questions and answers; these are really nice and helped me a lot for passing the exam. visit http://www.beitcertified.biz and try these latest brain dumps for your certification exam. Tag: Transitive Trusts Tag: 175943
  - 24
    - Creating folders on any Computer withing AD Domain Hi All, I am a new poster, so I appologise if this has been covered before, I did do a search and couldn't turn up much, but if I missed something obvious then I appologise. I am looking for a way in which I can create physical folders on any machine withing the current AD Group using C# and the DirectoryServices namespace. I am using Microsoft.Web.Administration to manage IIS and I can create new sites, virtual directories etc all fine. I just need a way to create the filesystem structure on any of the webservers within our domain. I hope there is a way to do it, I don't really want to go down the path of calling webservices located on the individual machines to create the needed directory structures. Kind Regards Tag: Transitive Trusts Tag: 175939
  - 25
    - SceCli Id.: 1202 Hi, the event SceCli Id.: 1202 appears each 5 minutes with the error: Security policies are propagated with warning. 0x534: No mapping between account names and security IDs was done. I looked at the support.microsoft.com and I found the KB:324383 But I dont know hot to fix this error. Any solution or help? Tks Tag: Transitive Trusts Tag: 175935
- Next
  - 1
    - Unattended Software installation Hello All: I was wondering if there is a way to install software on remote client machines (XP and VISTA) without using the RDP or Group Policy. I have tried using the PSEXEC (Mark Rassianovich's pstools), but had limited success, also tried remote installer trial version and it didn't always work. Cheers. Tag: Transitive Trusts Tag: 175933
  - 2
    - Unable to reuse hostname I've demoted a DC to be a member server using DCPROMO and change the IP address. The process was successfull. The DC is now a member server. However when i ping the member server, it shows the IP address of the DC and not the new IP address of the member server. I've remove it from the domain but now I'm not able to join it back to the domain. Kindly help. Thanks Tag: Transitive Trusts Tag: 175924
  - 3
    - Active Directory scripts Hi I need some (or a lot of) help having a way in this case a script that could help me doing the following tasks: 1. a script that could update the AD when I export the users to a txt file and then I need to update AD with new users 2. a script that allows to see for each OU where the users have their mailboxes/server. Thanks Ricky Tag: Transitive Trusts Tag: 175920
  - 4
    - How do you overide screensave setting in GP? I need some way to override the group policy screensaver setting for a single computer. Whenever this computer in left unattended for sometime during presentations, the screesaver causes it to lock up and the only recourse is to reboot. Is there anyway to override just the screensaver setting? Thanks! Ben Tag: Transitive Trusts Tag: 175918
  - 5
    - How to migrate services due to server substitution >Hello Pop, > >Sorry this NG is English. Hello! Sorry, it was a mistake. I try to explain my problem in English.... not a good one. We have to substitute our old server (windows 2000) with a new one (windows 2003). I'm not that expert on system administration but my boss tells me to find some documentation and do that configuration. The old server is a Domain Controller and is also a mail server with Exchange 2000 installed and obviously Active Direcotory It is the first time that i've to migrate services from one server to another. What is the best way to operate? For my small experience the steps to follow will be: - Assign a static IP Address to the new server near the old one - Add the server to the domina - Promote the sever to Domain Controller (is better to be before a secondary DC and after the primary domain controller or i can promote the server directly to primary DC?) - Exchange migration to the new server - Anything else? On the first 3 items i can do myself basing on some info that i've found on web. But some confirmation will be well accepted :D Instead, I need some help on the exhange migration because I have no idea. Someone can give me some help or URL in which find documentation? Thanks, Luca Tag: Transitive Trusts Tag: 175916
  - 6
    - Print Servers on VMWare We are looking to set up a few print servers with as many queues as possible - we expect light utilization of most of the printers (a few documents an hour maybe). According to what I've read in Microsoft's "Print Server Scalability and Sizing Technical Overview" document, having upwards of 1,500 (or even 2,000) queues on a server should not be a problem. I'm thinking about using a VMWare virtual server instance to perform this function, and I have not been able to locate much on the internet regarding the relationship between VMWare and high-utilization print servers. If you know something (warnings, etc), please let me know! Thanks... - JmD Tag: Transitive Trusts Tag: 175915
  - 7
    - Migration Dear All, We are planning to migrate our DC and Exchange from 2000 to 2003. We have 3 DC and one AD integrated exchange 2000. Now we are planning to migrate only Root DC and exchange 2000. I have upgraded exchange 2000 to exchange 2003. Now i need to upgrade our OS from 2000 to 2003. so i need to run the Adprep utility.Here i have two doubt now. 1. whether i need to migrate the ROOT DC first or the AD integrated exchange 2000 server? 2.which server i need to run the adprep first (either in root Dc or in AD integrated exchange 2000, or in Both)? Can anybody help ? Regards, Johnson Tag: Transitive Trusts Tag: 175908
  - 8
    - Migrazione Servizi per Sostituzione server Ciao a tutti, Il mio problema e` il seguente: dobbiamo sostituire il vecchio server 2000 che gestisce il dominio, la posta (exchange 2000) ed ovviamente active directory con un server nuovo in cui sara` installato 2003 server ma sul quale devo trasferire tutti i servizi. E` la prima volta che lo faccio per cui vi chiedo: come mi conviene procedere? A tentoni questi sono i passi che seguirei io: - assegnerei un IP statico nel range attualmente attribuito ai server adiacente al precedente. - Poi inserirei il server in dominio - Poi lo inserirei come controllore di Active Directory (subito primario?) - Poi la migrazione di Exchange Altro? Sui primi punti dovrei cavarmela ma sulla migrazione di Exchange non ho idea. Qualcuno sa indicarmi come procedere o sa darmi qualche link mirato sull'argomento. Grazie. Luca Tag: Transitive Trusts Tag: 175907
  - 9
    - How do you merge two Windows 2000 Domains? Hello All, We have two Windows 2000 domains called Redwave.com and Redwave.local. Redwave.com was the original domain and Redwave.local was implemented not long ago so as to discontinue the use of the .com domain name because we are also using Redwave.com as our website name. Since the implementation of the .local domain, we have slowly started to put all new users and computers to that domain but the majority of the users and computers are still on the .com domain. Each domain also acts as its own DNS and DHCP servers. The task at hand is to merge the .com domain to the .local domain with the result of having only one domain to deal with, Redwave.local. I would like to know how one should go about doing this. Thanks, Ben Tag: Transitive Trusts Tag: 175905
  - 10
    - Group Policy Management Not sure if this is the correct place to ask this question: Using the GPO tool, I am showing version mismatches on at least 3 Domain Controllers for user and computer policies for certain OU containers DCdiag is showing no errors. Replication seems to be happening although I have noticed that the SYSVOL folders of same controllers do not have the same files. Is there a way to force these changes to take place? DC#1 Created 11/28/2005 10:18:58 AM Modified 10/17/2007 10:53:12 PM User Revisions 11 (AD), 1 (sysvol) Computer Revisions 14 (AD), 7 (sysvol) DC#2 Created 11/28/2005 10:18:58 AM Modified 10/17/2007 8:59:30 PM User Revisions 11 (AD), 11 (sysvol) Computer Revisions 14 (AD), 14 (sysvol) Thanks Deb H Tag: Transitive Trusts Tag: 175896
  - 11
    - user account I have a user that signs into the domain with a workstation that has windows 2000 pro. For the past few days every time she signs in it is creating a new profile on the workstation. I looked under Documents and Settings and saw the following accounts. pwhite pwhite.domainName pwhite.000 pwhite~000 What is causing this and how can I stop it? btw, I am not using roaming profiles, but I am redirecting 'My Documents' that seems to not be working. Tag: Transitive Trusts Tag: 175894
  - 12
    - XP client does NOT get policy this is the problem: a domain with one DC running win2kadvsp4,update rollup 1 installed aswell.some group policies defined on it. the problem is that XP clients do NOT get the policies on their join to the domain.I have to go to them,log on as administrator,run GPUPDATE.EXE several times,wait for random minutes and restart several times till they get the policies finally. I have windows 2000 clients whose computer objects are in the same OU as XP ones and they do not have this problem,they correctly get and apply all policies on their first restart after domain join. I had win2k3 before and it seems that neither 2k nor XP client had such problem with that,but considering the fact that I couldn't find anything on microsoft regarding this problem with 2k Domain Controllers,this must be abnormal. Tag: Transitive Trusts Tag: 175890
  - 13
    - Fatloss computer program I have been using this computer program for a couple weeks now and i am very pleased with the results so far. its a software fatloss program, if your looking for a diet/weightloss plan i reccomend you check this place out first: http://fatloss9.50webs.com Tag: Transitive Trusts Tag: 175886
  - 14
    - HP Desktop for sale! Hi, I have an unused HP Pavilion with the fallowing specs: # Processor: AMD Athlon 64 X2 4000+ (2.1GHz, 2000MT/s System Bus) # Memory: 2048MB PC2-5300 DDR2 SDRAM memory (2x1GB) (expandable to 8 GB (4 x 2 GB) (64-bit OS)/ 4 GB (4 x 1 GB) (32-bit OS)) # Hard Drive:320GB 7200RPM SATA 3G (3.0 Gb/sec) hard drive # Optical Drive: 16X DVD(+/-)R/RW 12X RAM (+/-)R DL LightScribe SATA drive # Expandable Drive Bay: HP Pocket Media Drive bay # Video Graphics: Integrated graphics # Network Interface: Integrated 10/100BaseT network interface # Sound: High Definition 8-channel audio # Fax/Modem: 56K bps data/fax modem # Operating System: Genuine Windows Vista® Home Premium This is "used" but basically brand new (it has literally been on for no more than 6 total hours..) is only 1 month old.. PRICE: $425 OBO Email- pbdude911@yahoo.com Tag: Transitive Trusts Tag: 175885
  - 15
    - Watch NFL Games Online Watch NFL Games Online! For every one who wants to watch the games online because they dont live in the teams town or are at work i found a site that has basically every game covered. Its perfect if you have afford a monthly $70 direct tv nfl access subscription. they got a bunch of channels The sites http://nflonline.wizhoo.com Tag: Transitive Trusts Tag: 175884
  - 16
    - Active Directory FAQ Learn more on the FAQ of active directory by visiting: HTTP://ACTIVEDIRECTORYFAQ.BLOGSPOT.COM Its worth visiting. -- cpatralekh ------------------------------------------------------------------------ cpatralekh's Profile: http://forums.techarena.in/member.php?userid=33231 View this thread: http://forums.techarena.in/showthread.php?t=835684 http://forums.techarena.in Tag: Transitive Trusts Tag: 175881
  - 17
    - Removing Certificate server Hi, Found in the AD configuration two old and now non-functioning certificate servers. Can I just delete the entries within the AD | Configuration partition | Services | Public Key Services...? Cheers, Apollo Tag: Transitive Trusts Tag: 175880
  - 18
    - setup additional domain controller i have established pdc on winder server 2003 standard edition now i want to establish a back up domain controller now i have installed windows server 2003 Enterprise Edition on the other server. i do this by adding an additional domain controller for the server when i do this the active directory domain wizared give an error The operation failed because. The Active Directory wizard cant continue because the forest is not prepared for windows server 2003. Tag: Transitive Trusts Tag: 175870
  - 19
    - Domain Controller backup I'm trying to adjust my DC's backup plan. I believe we're backing up more than we need to. Currently we backup the entire C drive which is where the OS is installed. Do I need to backup the entire C drive? Couldn't I just backup the thesystem state which would contian the sysvol direcotry which is the active directory information? ALso this DC contians all of the operation master roles, is a dns and wins server and runs dhcp. This server is a windwos 2000 SP4 DC in a 2000 domain. I'm trying to develop a plan to minimize space used in terms of backup yet with the ability to recover from a disaster. My thought of most of the info on C relates to the OS which would be reinstalled if the server crashed anyways. Am I totally off base here? Tag: Transitive Trusts Tag: 175858
  - 20
    - Locking down Mozilla Hi, I'd like to lock down the Mozilla browser to prevent people from using it. Is there any way to do it without using a third-party software? Thanks a lot! Tag: Transitive Trusts Tag: 175849
  - 21
    - Operations Masters is offline RID, PDC & Infrastructure shown "ERROR" in the "Operations master" field. It states "The current operations master is offline. The role cannot be transferred." Tag: Transitive Trusts Tag: 175846
  - 22
    - AD Delegation I only want to allow some key users to browse, unlock account, reset password & disable account in Active Directory. No changes can be made on the AD except those mentioned above. How to do it? Tag: Transitive Trusts Tag: 175842
  - 23
    - ADMT doesn't see some domains after the DFL change from mix mode to native mode 2003 Hi, I tried to run ADMT 3.0 and it found all my domains earlier but complained about destination domain being mix-mode. Then I converted all my domains to Native mode 2003. Now some of the domains don't even show up in ADMT list of source or destination domains. Where should I start my troubleshooting? I am able to see all domains properly and assign security rights for cross domain accounts so I am sure the connectivity is there. Thanks in advance, Sam Tag: Transitive Trusts Tag: 175841
  - 24
    - Migrating from multiple child domain environment to single domain with OUs. What's correct method? Hi, I am migrating 9 sites to single domain environment from currently setup multiple domain environment. Below is how its setup. 1. Hub site is under root domain. 2. All remote sites are under separate child domains. GOAL: 1. Create multiple OUs under root domain like below. HQ OU - Computers -- Laptops -- Desktops -- Servers - Users - Groups - Domain Controllers DC OU - Computers -- Laptops -- Desktops -- Servers - Users - Groups Atlanta OU - Computers -- Laptops -- Desktops -- Servers - Users - Groups LA OU - Computers -- Laptops -- Desktops -- Servers - Users - Groups Like wise What's correct method to make this move? Is there an easy way to migrate all users/groups/computers to root domain or its matter of deleting child domains and recreating all accounts/groups/security on root domain? Any help is greatly appreciated. Thanks, Sam Tag: Transitive Trusts Tag: 175827
  - 25
    - Remove a non-existent DC I need to remove a non-existent DC from our AD. At first, running dcdiag returned replication attempt errors. Then, perhaps mistakenly, I removed the DNS for the dead server and now dcdiag returns the output quoted below. I am an AD noobbie and need some help clearing this up. I have read about using LDP.exe to remove objects, but I am not familiar enough to make any changes. Can someone give me a hand with this? Thanks very much. - Andrew Testing server: Default-First-Site-Name\FILESERVER Starting test: Replications [Replications Check,FILESERVER] A recent replication attempt failed: From WEB to FILESERVER Naming Context: CN=Schema,CN=Configuration,DC=escapewire,DC=local The replication generated an error (8524): The DSA operation is unable to proceed because of a DNS lookup failure. The failure occurred at 2007-10-12 07:54.54. The last success occurred at 2006-09-18 15:49.44. 9354 failures have occurred since the last success. The guid-based DNS name 0868878e-a2b8-44a0-a2ad-450031a84e0e._msdcs.escapewire.local is not registered on one or more DNS servers. [WEB] DsBind() failed with error 1722, The RPC server is unavailable.. [Replications Check,FILESERVER] A recent replication attempt failed: From WEB to FILESERVER Naming Context: CN=Configuration,DC=escapewire,DC=local The replication generated an error (8524): The DSA operation is unable to proceed because of a DNS lookup failure. The failure occurred at 2007-10-12 07:54.54. The last success occurred at 2006-09-18 15:50.23. 9354 failures have occurred since the last success. The guid-based DNS name 0868878e-a2b8-44a0-a2ad-450031a84e0e._msdcs.escapewire.local is not registered on one or more DNS servers. [Replications Check,FILESERVER] A recent replication attempt failed: From WEB to FILESERVER Naming Context: DC=escapewire,DC=local The replication generated an error (8524): The DSA operation is unable to proceed because of a DNS lookup failure. The failure occurred at 2007-10-12 07:54.54. The last success occurred at 2006-09-18 15:52.53. 9354 failures have occurred since the last success. The guid-based DNS name 0868878e-a2b8-44a0-a2ad-450031a84e0e._msdcs.escapewire.local is not registered on one or more DNS servers. ......................... FILESERVER passed test Replications Starting test: NCSecDesc ......................... FILESERVER passed test NCSecDesc Starting test: NetLogons ......................... FILESERVER passed test NetLogons Starting test: Advertising ......................... FILESERVER passed test Advertising Starting test: KnowsOfRoleHolders ......................... FILESERVER passed test KnowsOfRoleHolders Starting test: RidManager ......................... FILESERVER passed test RidManager Starting test: MachineAccount ......................... FILESERVER passed test MachineAccount Starting test: Services NtFrs Service is stopped on [FILESERVER] Could not open SMTPSVC Service on [FILESERVER]:failed with 1060: The specified service d oes not exist as an installed service. ......................... FILESERVER failed test Services Starting test: ObjectsReplicated ......................... FILESERVER passed test ObjectsReplicated Starting test: frssysvol Error: No record of File Replication System, SYSVOL started. The Active Directory may be prevented from starting. ......................... FILESERVER passed test frssysvol Starting test: kccevent ......................... FILESERVER passed test kccevent Starting test: systemlog ......................... FILESERVER passed test systemlog Running enterprise tests on : escapewire.local Starting test: Intersite ......................... escapewire.local passed test Intersite Starting test: FsmoCheck ......................... escapewire.local passed test FsmoCheck Tag: Transitive Trusts Tag: 175826

I have two domains on the same MAN separated by a router. I can see
Domain A from B and vice versa. I have trusts setup on each domain so
Domain A trust B and Domain B trust A. However, in windows Active
Directory Domains and Trusts they are showing up as Transitive - no.
How can I set them as yes?

Top

Re: Transitive Trusts by Tesdall

Tesdall
Tue Nov 13 04:07:32 PST 2007

This is a windows 2000 domain only (sorry forgot to add that).

Top

Re: Transitive Trusts by Ace

Ace
Tue Nov 13 21:30:06 PST 2007

In news:1194955652.350103.65410@k79g2000hse.googlegroups.com,
Tesdall <dtesdall@ci.winchester.va.us> typed:
> This is a windows 2000 domain only (sorry forgot to add that).

Transitive trusts are Windows 2000 AD intra-forest trusts (child-parent).
Anything else is a one way, non-transitive trust. What are your trust
requirements? Let us know what you are trying to do and maybe we can come up
with an aletrnative.

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations

Having difficulty reading or finding responses to your post?
Try using Outlook Express or any other newsreader, configure a news
account, and point it to news.microsoft.com. Anonymous access. It's
easy and it's free:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

"Life isn't like a box of chocolates or a bowl of cherries or
peaches... Life is more like a jar of jalapenos. What you do today
may burn your butt tomorrow." - Garfield

Top