User cannot change password - Resets itself.

Tutorials Win: Microsoft Windows Forum

- Previous
 - 1
 - LED slim light box boost up your Christmas Day Advertisement Edlite Slim Light Boxes are the latest technology in lighting. To enable the light box to be so slim-line we use LED lamp & pencil thin fluorescent tubes. We have much confidence in our product. For CCFL series,they are our mature product,the crystal ED-P & ED-DP are the most salable ones.The transparence is the most selling point. For EEFL series,they are the growing product.In past,some EEFL slim light box have met a problem,the pressure is not so steady,now,we have deal with the problem.Now,the steady pressure ,and the big size ,the low current are the selling point of our EEFL slim light box. And the most salable series is the LED slim light box,the supper slim,only 11~20 mm thickness.The supper slim outlook & the Maintenance- free are the selling point. More detail,please mail:jenny@edlite.hk. Tag: User cannot change password - Resets itself. Tag: 176165
 - 2
 - LED slim light box boost up your Christmas Day Advertisement Edlite Slim Light Boxes are the latest technology in lighting. To enable the light box to be so slim-line we use LED lamp & pencil thin fluorescent tubes. We have much confidence in our product. For CCFL series,they are our mature product,the crystal ED-P & ED-DP are the most salable ones.The transparence is the most selling point. For EEFL series,they are the growing product.In past,some EEFL slim light box have met a problem,the pressure is not so steady,now,we have deal with the problem.Now,the steady pressure ,and the big size ,the low current are the selling point of our EEFL slim light box. And the most salable series is the LED slim light box,the supper slim,only 11~20 mm thickness.The supper slim outlook & the Maintenance- free are the selling point. More detail,please mail:jenny@edlite.hk. Tag: User cannot change password - Resets itself. Tag: 176164
 - 3
 - Compare Users in AD and Novell I have a Win2000 Server running Active DIrectory and another system running Netware 5.1. I have a problem of identifying users that are deleted as the system admin for novell might delete a user but did not inform the Active Directory side that the user has been deleted. Have read about the MSDSS but was wondering if there is any way i can just do a "report" that says user a , b , c was found in AD but not in Novell? In this case, i can re-verify that the the user a,b,c can be safely deleted in AD. Please advice. Cheers! Darence Tag: User cannot change password - Resets itself. Tag: 176154
 - 4
 - Unable to local DC ......... URGENT Hi, Urgently need solutions for the following error. Originally I have 2 DCs. Due to the fact that one of them have problem, so it was reformatted and promote as a 2nd DC again. I log in to windows as Adminsitrator user. Now I have many errors: (1.) On the new 2nd DC, i have error in system log every 2 min, Evend ID 16650 from source SAM stating "The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure." (2.) On both DCs, I have Event ID 3096 The Primary Domain COntroller for this domain could not be located. (3.) On both DCs, I'm also unable to open/access Domain Controller Security Policy or Domain Security Policy, error message Failed to open the Group Policy Object. You may not have appropriate rights. The specified domain either does not exist or could not be contacted. (4.) I execute DCdiag /v on the old DC, get the following Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine NODE2, is a DC. * Connecting to directory service on server NODE2. * Collecting site info. * Identifying all servers. * Found 2 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\NODE2 Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... NODE2 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\NODE2 Starting test: Replications * Replications Check ......................... NODE2 passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions Check for CN=Schema,CN=Configuration,DC=TEST,DC=com * Security Permissions Check for CN=Configuration,DC=TEST,DC=com * Security Permissions Check for DC=TEST,DC=com ......................... NODE2 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check ......................... NODE2 passed test NetLogons Starting test: Advertising The DC NODE2 is advertising itself as a DC and having a DS. The DC NODE2 is advertising as an LDAP server The DC NODE2 is advertising as having a writeable directory The DC NODE2 is advertising as a Key Distribution Center Warning: NODE2 is not advertising as a time server. The DS NODE2 is advertising as a GC. ......................... NODE2 failed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com Warning: CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com is the Schema Owner, but is deleted. Role Domain Owner = CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com Warning: CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com is the Domain Owner, but is deleted. Role PDC Owner = CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com Warning: CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com is the PDC Owner, but is deleted. Role Rid Owner = CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com Warning: CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com is the Rid Owner, but is deleted. Role Infrastructure Update Owner = CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com Warning: CN="NTDS Settings DEL:4fc70a1f-be5d-436a-aaef-95e986d9b6f7",CN=NODE1,CN=Servers,CN=Default-Fir st-Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com is the Infrastructure Up date Owner, but is deleted. ......................... NODE2 failed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2111 to 1073741823 Warning: FSMO Role Owner is deleted. * NODE1.TEST.COM is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1611 to 2110 * rIDNextRID: 1618 * rIDPreviousAllocationPool is 1611 to 2110 ......................... NODE2 passed test RidManager Starting test: MachineAccount * SPN found :LDAP/NODE2.TEST.COM/TEST.com * SPN found :LDAP/NODE2.TEST.COM * SPN found :LDAP/NODE2 * SPN found :LDAP/NODE2.TEST.COM/TEST * SPN found :LDAP/32158106-7989-4cff-8da4-8ff93c0e1831._msdcs.TEST.co m * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/32158106-7989-4cff-8d a4-8ff93c0e1831/TEST.com * SPN found :HOST/NODE2.TEST.COM/TEST.com * SPN found :HOST/NODE2.TEST.COM * SPN found :HOST/NODE2 * SPN found :HOST/NODE2.TEST.COM/TEST * SPN found :GC/NODE2.TEST.COM/TEST.com ......................... NODE2 passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: RPCLOCATOR * Checking Service: w32time w32time Service is stopped on [NODE2] * Checking Service: TrkWks * Checking Service: TrkSvr * Checking Service: NETLOGON * Checking Service: Dnscache * Checking Service: NtFrs SMTPSVC Service is stopped on [NODE2] ......................... NODE2 failed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated NODE2 is in domain DC=TEST,DC=com Checking for CN=NODE2,OU=Domain Controllers,DC=TEST,DC=com in dom ain DC=TEST,DC=com on 1 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=NODE2,CN=Servers,CN=Default-First- Site-Name,CN=Sites,CN=Configuration,DC=TEST,DC=com in domain CN=Configuration, DC=TEST,DC=com on 1 servers Object is up-to-date on all servers. ......................... NODE2 passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service Event log test The SYSVOL has been shared, and the AD is no longer prevented from starting by the File Replication Service. ......................... NODE2 passed test frssysvol Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minut es. ......................... NODE2 passed test kccevent Starting test: systemlog * The System Event log test Found no errors in System Event log in the last 60 minutes. ......................... NODE2 passed test systemlog Running enterprise tests on : TEST.com Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... TEST.com passed test Intersite Starting test: FsmoCheck GC Name: \\NODE2.TEST.COM Locator Flags: 0xe00001bc Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355 A Primary Domain Controller could not be located. The server holding the PDC role is down. Warning: DcGetDcName(TIME_SERVER) call failed, error 1355 A Time Server could not be located. The server holding the PDC role is down. Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355 A Good Time Server could not be located. KDC Name: \\NODE2.TEST.COM Locator Flags: 0xe00001bc ......................... TEST.com failed test FsmoCheck Thanks & Regards Jolyn Tag: User cannot change password - Resets itself. Tag: 176151
 - 5
 - can't promote to domain controllers I am having trouble promoting a computer to domain controller in a network that already has 2 DCs. The Active Directory Installation Wizard says, "The version of the Active Directory schema of the source forest is not compatible with the version of Active Direcotyr on this computer." and it suggests that I use ADPREP. When I run ADPREP on the PDC in any of the 3 configurations, it says, "Forest-wide information has already been updated." or "Domain-wide information has already been updated." My only idea is that the existing DCs are Windows Server 2003 and I am promoting Windows Server 2003 R2. Could the R2 vs R1 be the issue or is there something else? Tag: User cannot change password - Resets itself. Tag: 176149
 - 6
 - Problems to Add users to group Hello, We have and environment with Windows 2000 servers where some user's have special permissions on groups to add and remove members. ADUC is published under Citrix for that users, currently one of those users is having trouble when trying to add or remove group members, the following error message appears: Picker cannot open because it cannot determine whether weleudc2.we.interbrew.net is joined to a domain" weleudc2 is the domain controller If user closes the error message and then click on add button again, the message does not appear and he can continue working normally. I have tried the same operation with my account and the problem does not happens, have also forced AD to user another domain controller. I have noticed that the following error appears on DC security log: Eventid: 565 Source: Directory Service Access Type: Failure Description: Object Open: Object Server: DS Object Type: %{00000000-0000-0000-0000-000000000000} Object Name: OU=File Shares,OU=User Managed Groups,OU=User Groups,OU=Groups,OU=WE1 Region,DC=we,DC=interbrew,DC=net New Handle ID: - Operation ID: {0,899513655} Process ID: 316 Primary User Name: WELEUDC2$ Primary Domain: WEINTERBREW Primary Logon ID: (0x0,0x3E7) Client User Name: TAP Client Domain: WEINTERBREW Client Logon ID: (0x0,0x3599C3D4) Accesses Create Child Already took a look at: http://support.microsoft.com/kb/816818 but this does not help Any comments will be appreciated. Thanks. Douglas Tag: User cannot change password - Resets itself. Tag: 176146
 - 7
 - Disaster recovery and NTDSUTIL This is a multi-part message in MIME format. ------=_NextPart_000_0048_01C82DC8.FD5563C0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I''m tryin' to find a solution for the flw scenario: 1st W2K server : ( file server) - logged as directory services restore mode - ntdsutil recovery failed couse the DBinitializate Jet failed error - 5= 30 - eseutil failed - no backup of sytem state - now machine out of domain and in a work group - accounts can reach it running his ip adress 2nd W2K server ( exchange server) operational - accounts logging on to this machine - machine in domain as 2nd PDC Thanks for the help DINO ------=_NextPart_000_0048_01C82DC8.FD5563C0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859= -1"> <META content=3D"MSHTML 6.00.6000.16544" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY>  I''m tryin' to find a solu= tion for the flw scenario: 1st W2K server : ( file server) - logged as dire= ctory services restore mode - ntdsutil recovery failed couse the DBinitiali= zate Jet failed error - 530 - eseutil failed - no backup of sytem state = - now machine out of domain and in a work group - accounts can reach it run= ning his ip adress 2nd W2K server ( exchange server) operational - acco= unts logging on to this machine - machine in domain as 2nd PDC Than= ks for the help DINO </BODY></HTML> ------=_NextPart_000_0048_01C82DC8.FD5563C0-- Tag: User cannot change password - Resets itself. Tag: 176143
 - 8
 - change domain for a dc hello on my site i have 2 domains ocap.loc and icap.loc i want to migrate a server from one domain to the other he is a dc for icap.loc can you confirm that i should not have problem if i do tis : 1) demote the server from icap.loc 2) remote the server as a Dc for ocap.loc thanks -- nt Tag: User cannot change password - Resets itself. Tag: 176137
 - 9
 - how to remove network error Hello Friends, I am Sachin lad from mumbai. I have one query regarding the emulator. While i am running the emulator i have got one error that general network error.check your network documentation. Can u tell me the answer of this qoestion. Tag: User cannot change password - Resets itself. Tag: 176133
 - 10
 - DCPROMO Error Hi all, I have 6 Domain controller in Windows 2000 Advanced Server. All of them I sets as Global Catalog. One of them get failure in the hardware and I didn't have full backup. I try to fresh install the windows but I get error when running DCPromo "The replication operations encountered a database error" In the event viewer I see error in NTDS General with Event ID 1168. Could you help me to fix this problem? Best regards, Cahya Tag: User cannot change password - Resets itself. Tag: 176131
 - 11
 - Tools to Monitor AD account lock/unlock information As far as I remember, there's a AD tools to monitor AD account in mutiple servers, so we are able to know that my account was locked by which DC. but now I dont know the tools name and which to download it? thanks in advance. Bruce Tag: User cannot change password - Resets itself. Tag: 176116
 - 12
 - Slow AD logon if username longer than 8 chars Hi all. I have a problem with some (not all) remote sites clients that take a veeeery long long time to login, and I'm talking about 30+ minutes, if they ever manage to logon. This happens only on some clients and only with some users. At first I pinpointed the problem to the "home directory" setting, that pointed to w: -> \\myserver\users$\%username% By coincidence I discovered that removing the home directory mapping from the user profile (in the AD management console), the logon was almost instantaneous. I simply started to map the home directory within the login script, with a line like this: net use W: \\myserver\users$\%username% If I use instead this other line I get the slow logon again net use w: /HOME NOW, the problem has returned...logon sloooow again. Only way I managed to find was to shorten the username to something equal or shorter than 8 chars... My AD DC are all Win2000 , I have primary and secondary DNS and WINS located on the first two servers, which are in the central site. The "slow logon" pcs are in peripheric sites, connected with slower lines. The problem is very curious because in these very same "slow" sites I have lots of "fast logon" pcs. Some things I tried are: - recreate the user profile from scratch - check DNS settings, including suffixes - gpupdate (or "secedit /refreshpolicy user_policy /enforce" and secedit /refreshpolicy machine_policy /enforce on win2000 clients) - disable slow link detection All machines (servers and clients) are patched with WSUS. Please help me! Thank you in advance Michele Tag: User cannot change password - Resets itself. Tag: 176112
 - 13
 - Adding 2003 server Backup Domain Controller to 2000 Domain I am trying to add a 2003 server with active directory to serve as a backup domain controller to a 2000 Domain. When trying to add AD on the 2003 server, I get an error that the forest is not prepared and to use the Adprep command-line tool to prepare both the forest and the domain. Taking into consideration that on the current 2000 server PDC has Exchange server 2000 installed, what are the proper steps in order to successfully complete this task? Tag: User cannot change password - Resets itself. Tag: 176076
 - 14
 - Reverse Lookup zone Hello, Even though my Active Directory DNS is set to Scavenge Record after 7 days, but a lot of information in "Reverse Lookup zone" is very old. These records also should have up to date (7days) right? Why it doesn't refresh? when I nslookup IP, gives different information that when I ping COMPUTER NAME MC Tag: User cannot change password - Resets itself. Tag: 176074
 - 15
 - Move tree error I am trying to move a user opbject from one domain to another domain. The domains reside in the same forest. I am trying to use the movetree command. movetree /start /check /s engwdc01.eng.network.local /D opswdc01.ops.network.local /sdn ou=moveme,ou=users,ou=r&d,dc=eng,dc=network,dc=local /ddn ou=moveme,ou=users,ou=exec,dc=ops,dc=network,dc=local /u eng\admin /p (admin password) /Verbose I get an error that says â??dâ?? not recognized and I cannot figure out what is causing the error. I was wondering if anyone could help me. Thanks. Tag: User cannot change password - Resets itself. Tag: 176067
 - 16
 - Tracking User who delted files???? I have a Win2000 Server running Active DIrectory. I have a situation where I KNOW that some files were deleted. I cannot prove if they were deleted by accident or maliciously, but I have my suspiciions. I CAN narrow the possibilities because the files were in a Security Restricted area. So..... Is there any logs, etc, that can tell me explicitly which AD User deleted a specific file? Thanks in advance. Tag: User cannot change password - Resets itself. Tag: 176065
 - 17
 - what computer? How can I find what computer an user is log onto? (and vice versa) Tag: User cannot change password - Resets itself. Tag: 176064
 - 18
 - Transitive Trusts I have two domains on the same MAN separated by a router. I can see Domain A from B and vice versa. I have trusts setup on each domain so Domain A trust B and Domain B trust A. However, in windows Active Directory Domains and Trusts they are showing up as Transitive - no. How can I set them as yes? Tag: User cannot change password - Resets itself. Tag: 176057
 - 19
 - Cross Forest Trust Hello I'm trying to setup a cross forest trust in W2K. I have name resolution working both ways. The distant domainB has AD integrated DNS enabled forwarding to our unix name servers. It appears that this one was able to contact Domain A to create the trust. But when I try to complete the trust relationship on Domain A adding Domain B it fails saying the domain cannot be contacted. Domain A is not using AD integrated DNS only UNIX DNS. Do I need to have AD integrated DNS setup on both sides? I've tested accessing all the required ports using the portping util and everything's successful. Any Ideas why I can't establish the trust on the Domain A side to trust Domain B? -- Thanks! Crisoft Tag: User cannot change password - Resets itself. Tag: 176051
 - 20
 - Andy Warhol Posters . Andy directory - web directory - dusiness directory - shopping directoru Webdirectory is human edited web directory with various categories and subcategories. Submission and. Approval is fast (usually 24 hours or less). The directory project has a clear strategic validity, both in terms of free positioning on search engines, and ease of use, by allowing to it's visitors to make the best use of the information for free. www.globelinks.info www.totheworld.info www.totheplanet.info www.totheglobe.info Our directory may be a good solution for website owners when they seek to improve their link popularity and increase their traffic. By submitting your website you get a direct link from one of our inner pages, chossen by you. Your listing consists in your website's title, URL and description. After a few closer looks we decide to include or not your website in our web directory. Web directories are popularly used by webmasters, users, and anyone in Internet business. directories allow Internet businesses to collect relevant links to their websites. This is one of the top strategies used to promote businesses. You should submit your site to as many directories as you can. The submission process is the easiest ever: just browse untill you found the best category for your website, then you'll see the "Suggest Link" button. Please be aware that our system rejects automatically submissions stuffed with keywords or submissions without proper punctuations. Useful resourse: there are loads of specialized directories. So it would be advisable to look up into directiory business directory - web directory - directory - web directory f you have to look up anything related to business, or hit upon a shopping directory to check out the free deals available. You can also check out Directory. directiory business directory - web directory - directory - web directory It is important to put in the proper keywords in order to come across the exact information you are looking for. With the amount of popularity these directories have achieved, they are surely going to revolutionize the information looking scenario especially on the online world. http://www.globelinks.info http://www.totheworld.info http://www.totheplanet.info http://www.totheglobe.info http://www.interester.com CKwJyJGh3jKrm7on2JSN5EueShvWLngU2ARlipVaT7 Tag: User cannot change password - Resets itself. Tag: 176049
 - 21
 - LSASS.EXE Error Hi, Domain controller and Workstations in a child domain of mine are getting restarted all of a sudden. The error that I see is "The system process lsass.exe terminated unexpectedly with status code -1073741819. The system will now shut down and restart. ". Could anybody help me to sort out this problem. Thanks Chandimal Tag: User cannot change password - Resets itself. Tag: 176032
 - 22
 - actual exam preparation questions and answers braindumps hi, beitcertified is providing latest practice questions and answers brain dumps for almost all certifications. visit http://www.beitcertified.biz and download free preparation and training material. Tag: User cannot change password - Resets itself. Tag: 176021
 - 23
 - Server 200 Domain and Server 2003 Domain We currently have two separate domains call them Domain1 and Domain2. They are separate tress and do not even know either one exisits. We have them both on different subnets and route traffic between them via a router. My question is this. We now have a need to have users in Domain2 (Server2003 domain) connect to resources in Domain1 (Server 2000 domain). We can do this as it stands without the trusts...kind of....but it prompts for credentials. Is there a way to set up a TRUST between these two domains so a logon prompt will not popup every time a user attempts to connect to resuorces on domain1 from domain2? In some cases users are even getting the access denied message when attempting to access resuorces from Domain2 to Domain1. If more information is necessary please let me know. I thank you all in advance for your time assisting me with this. Rick Tag: User cannot change password - Resets itself. Tag: 176020
 - 24
 - inetorgpersonprevt.ldf on windows 2000 domain for windows 2003 upg I am preparing a windows 2k domain with Exchange 2k for a windows 2003 sever upgrade. The plan is to keep exchange at 2000 for now and upgrade the domain servers to 2003. In the process I am following MS article 325379 rev 21.3 . In the section relating to Exch 2k in Win 2K forests(pages 5 and 6) it states to run the inetorgpersonprevent.ldf script to prevent mangled attribs later (basically remove the dashes in the name) for objects: ms-Exch-assistant-name, ms-exch-labeleduri, and ms-exch-house-identifier. I ran the script and it ran successfully! However, when I use AdSIedit to view the objects the have not changed at all. Am I looking at the right objects? Do I need to use a different tool/location to view the changes? I appreciate your help and info. Thank you. Tag: User cannot change password - Resets itself. Tag: 176018
 - 25
 - Question about GUIDs in Interforest migration I have a scenario whereby I am trying to do an an interforest migration between a Windows 2000 source domain and a Windows 2000 target domain, using the ADMT. My understanding is that there is a limitation in ADMT when dealing with Windows 2000 source domains in that the GUIDs are not preserved. What would be the impact of missing GUIDs after the migration? Source: Domain Migration Cookbook, Chapter 4: Restructuring Tools, Disadvantages of Interforest Migration - http://technet.microsoft.com/en-us/library/Bb727128.aspx Thanks, Ben Tag: User cannot change password - Resets itself. Tag: 176009
- Next
 - 1
 - Explorer unresponsive when port 445 is blocked from client I originally posted this in Winodws Vista administration; I'm posting here to encourage a response. I experience unresponsiveness (also could be seen as slowdown) after joining my Vista machines to the active directory. I experience it particularly when I take an AD-joined laptop and carry it to another location, such as a friend's house or coffee shop. When I do this, and the provider (e.g. Comcast or T-Mobile, because I know the problems occur there) blocks port 445 outgoing, the symptoms will arise. In particular, any function that requires interaction with Explorer (.exe) will take 30-90 seconds to complete. This includes, for example, saving a downloaded file using Firefox. Because Firefox integrates with Explorer to save files (I think to render the icons), when I try to save a file using firefox in this environment, the download will block for 30-90 seconds before proceeding. It seems to be that Explorer is blocking to perform some sort of Active Directory action which requires port 445 (microsoft-ds) on which to communicate. Explorer resolves a name for the AD action but must wait for the TCP timeout to occur before returning control to the calling application. I don't use isolated DNS, so my Active Directory DNS is visible from any host on the Internet. I can see in other deployments why this symptom would not arise -- because if the DNS were isolated, the host would not have an AD server to attempt a connection, and thus would not have to wait for the TCP timeout. I would not be feasible for me to put an AD server at every location, because I have about 2 PCs per location, so it's also difficult for me to isolate the DNS. This problem occurs with or without roaming profiles. It occurs on brand new Vista machines recently joined to the domain. This problem also exhibited itself to a lesser degree in Windows XP. One work-around that often works is to establish a VPN connection to one of the domain controllers. In this way, microsoft-ds traffic can pass unobstructed, and the problem goes away immediately. Unfortunately, it's cumbersome to instruct other users to establish a VPN connection to keep their machine from becoming non-responsive. This to me is clearly a design flaw or design oversight, or possibly just an unsupported configuration. I've applied all Windows Updates as well as kb941649, but the behavior remains the same. I would very much appreciate any suggestions for alleviating this problem. I'm also happy to provide additional details if a Microsoft rep takes interest in reproducing the problem. Sincerely, Jason R. Coombs Tag: User cannot change password - Resets itself. Tag: 176004
 - 2
 - Separating trusted domains Hi, I've got a question about removing a trust relationship between two domains that I was hoping that some kind person could help me with. We have two domains that I'm pretty sure are two different forests that are joined together in a two-way transitive trust. One of the domains might be a tree in the forest of the other, but I'm pretty sure that it isn't because it's namespace is different, i.e. Domain1 is named company.com and Domain 2 is called homedomain.com. Is this an incorrect assumption? We would like to gracefully remove the relationship between these two domains (company.com and homedomain.com), and I'm pretty sure that I know how to do it, but after Googling for a few hours, I can only find documentation on how to remove orphaned domains, or what to do if the domains were disconnected un-gracefully. I was hoping that I could list out the steps the basic progression that I'm going to follow and perhaps somebody would be kind enough to tell me if I'm going to screw things up. I removed the trust relationship between the two domains in AD Domains and Trusts, but when I went to AD Sites and Services to delete the homedomain.com site and cease replication, I got a message saying that it couldn't delete the site. I'm guessing that removing the trust first was the wrong order, so I'm going to go back and re-establish the trust. After doing that, here is what I think I should do: 1. Remove the site replication 2. Remove the trust relationship. 3. Remove the zones in DNS? Is this the correct way to do it? I haven't been able to find any documentation on utilities that will remove this relationship gracefully. Can someone please give me some advice about the right way to do this? Thank you so much for any help that you can give... Regards, greyseal96 Tag: User cannot change password - Resets itself. Tag: 176003
 - 3
 - DC issue I have a multi-server network with 2 DC's. The "master" DC (PDC,RID,OM) is on one server and the other is just a 2003 DC (DC2). Because of infrastructure changes, the 2 server will not be able to "talk" for about 5 days. I have clients who connect also will not be able to talk to the master DC, but can see the other DC. I have tested this in the past and I have issues with users not being able to log in who can only see DC2. Sometimes their login is slow or Windows will not allow them to log in. Is there something that i need to do to prepare for this? I have thought about getting a virtualized image of DC1 and loading it up @ the DC2 site and allowing users to log in that way. Is this an option? What could happen once DC1 becomes visible again? Thanks in advance. Tag: User cannot change password - Resets itself. Tag: 175999
 - 4
 - Internal breech I am trying to catch what I beleive is an internal breach. User accounts are being changed in Active Directory. I am trying to find out who is making the change. Does anyone know how to view the user that changed the account and maybe the IP address of the computer that made the change. The other problem I am rectifing is that all administrators currently use one account which is why I would like to be able to fnid the IP address that made the change. Thanks Ace Tag: User cannot change password - Resets itself. Tag: 175998
 - 5
 - KDC error with event Id 11 Hello Seeking suggestions from expertise... We are having AD environment and in one of the ADC we are getting KDC errors with event id 11. There are multiple accounts with name @domain.COM of type DS_USER_PRINCIPAL_NAME. Any suggestions will help me to solve this problem. Thanks in Advance. Santosh K. Tag: User cannot change password - Resets itself. Tag: 175997
 - 6
 - Find People Site Found this site. Conduct A People Search. Sign up for free. Pretty cool site <a href=http://find-people-5.blogspot.com/>Find People</a> Bill Tag: User cannot change password - Resets itself. Tag: 175979
 - 7
 - Looking for Windows 2008 Co-Authors Guys- First of all, I am sorry for cross posting, but I thought that I should post message in this newsgroup also. I posted similar message in the other news group. Please accept my appologies for cross posting. I am working on several Windows 2008 projects with different publishers, and I need co-authors in my team. If you are interested then please send me your: 1. Resume 2. Prior Writing experience 3. Links to any published articles All I need is good writing skills, and comittment. If you don't have prior writing experience then it is acceptable as long as you are enthusiastic. Thanks, Tariq Azad tariq.azad@rogers.com Tag: User cannot change password - Resets itself. Tag: 175978
 - 8
 - Active Directory Replication Problem Hi I have 2 DC in different network segment/vpn and they just have let replicate. ServerA is the master domain controller where is has DNS (primary) service and Exchange installed. ServerB has DNS service and as secondary that is the DNS from ServerA. I can ping the ip address of ServerA at ServerB but I can't ping by it's name. When I do \\ServerA\sysvol or \\ServerA\netlogon it gives me the following message: This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. But when I write ">repadmin /showreps" at command line in ServerA it tells me that is replicating with ServerB but when I do the opposite it tells that ServerB isn't replicating with ServerA since xxx date. ========= At the event viewer it appears the following messages: 1) The DNS server list of restricted interfaces contains IP addresses that are not configured for use at the server computer. Use the DNS manager server properties, interfaces dialog, to verify and reset the IP addresses the DNS server should listen on. For more information, see "To restrict a DNS server to listen only on selected addresses" in the online Help. 2) The File Replication Service is having trouble enabling replication from ServerA to ServerB for c:\winnt\sysvol\domain using the DNS name ServerA.domain.com. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name ServerA.domain.com from this computer. [2] FRS is not running on ServerA.domain.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. ========== When I try to force replication from command line at ServerB the following message appears: Command: C:\>repadmin /replicate ServerA ServerB /force repadmin running command /replicate against server ServerA.domain.com DsBindWithCred to ServerA.domain.com failed with status 1722 (0x6ba): Can't retrieve message string 1722 (0x6ba), error 1815. Hopping for help... Thanks in advance Ricky Tag: User cannot change password - Resets itself. Tag: 175969
 - 9
 - SYSVOL GPO's re:copying I have a former FSMO with an FRS problem. I don't care to fix the FRS problem becasue the server is being replaced by one of the same name but without the DC role. Apparently becasue of the FRS problem, my GPO folders (c:\winnt\sysvol\<my domain name>\polices\) did not replicate to my new FSMO when I transferred the roles. They still get applied when users logon to the domain but I can not longer manage them--I get an error, "the sytem cannot find the path specified", and as I stated, the folders are not in the same folder on my PDC. Can I simply copy the folders to my FSMO server? Tag: User cannot change password - Resets itself. Tag: 175964
 - 10
 - Joining computer to my domain Whenever I have new computers or computers that need to be re-imaged when I'm setting up an old employee's machine for a new one I have to use a corporate ISO image. This image joins us to the corporate domain. The first thing I have to do when I'm done with the image is join the computer to our domain. I've been doing this for years without any problems, suddenly this is the 4th machine I've had difficulty with. When I go into my computer|properties|computername and change the domain name, I then get prompted for a username/password of a user with permissions to be able to join the computer to the domain. I put in the DomainName\administrator username/password, and there's a long pause. Then an error comes back saying that "The specified server cannot perform the requested operation." Oddly enough when I leave the username/password blank and hit enter it successfully joins the machine to the domain. This concerns me because something has changed and I fear it might be a security issue. I'm not sure where to even start down this path, but like I said I've been doing this for years and now suddenly I don't need to authenticate to join my domain and that's very disturbing. Can someone help me figure out how to troubleshoot something like this? I'm not sure I'm even going to the right forum as it could be several different things. The machine in question is a P4 windows XP SP2 machine. Tag: User cannot change password - Resets itself. Tag: 175963
 - 11
 - What to expect? Removing Active Directory. I have Active Directory running on my tiny network at home. I'm considering removing it, since I'm not (I don't think) using any feature of it (*), and Home Server doesn't get along with it. I know the mechanics of it (running dcpromo.exe), but I'm worried about the affect. (*) Now the only feature that I am using that is tied to AD are domain account. In fact, as far as I know, "Administrator" is the local account on any of the PCs. Most of my documents and settings are under a domain account on one machine, and I'd hate to lose access to them (the documents I think I can deal with, but the idea of re- installing dozens of applications just to regain registry entries sound like a nightmare.) What happens to these domain accounts? Also, I'm using the DNS, WINS, DHCP and Routing services. What happens to these once AD is removed? Tag: User cannot change password - Resets itself. Tag: 175962
 - 12
 - Account Operators No longer able to edit accounts All of a sudden our account operators group is no longer able to change passwords or unlock accounts. This started maybe 2 days ago. We are running a 2000 mixed mode domain with only two DCs both local. We have not made any changes within AD. Any thoughts would be appreciated. Tag: User cannot change password - Resets itself. Tag: 175960
 - 13
 - Domain policy vs local policy Hello, We have Win 2000 domain, setup by someone who is not working here anymore. Problem is with domain policy; It's denying login locally to everybody, but domain admins. We need to be able to login locally as local administrator. Can not find settings in Group Policies how to enable it. On local mashine i can enable login locally, but effective policy is grayed out and login is denied. How to fix it? Thanks -- Ilya Tag: User cannot change password - Resets itself. Tag: 175952
 - 14
 - NTDS.DIT database is inconsistent Hoping to get a help for this problem: - Starting in the windows recovery-directory service consol ( W2K) and analizing the ntis.dit by ntdsutil - sem - d - go f, I obtained the "inconsistency of the database" - I have no sytem back up - I have another pdc in the newtwork ( W2K) - How can I restore the first pdc? - It' possible to use the secind pdc ntdis.it file for the first one? Thaks in advance Dino A. Tag: User cannot change password - Resets itself. Tag: 175949
 - 15
 - Active Directory User I create a user with the following: MembershipCreateStatus status; MembershipProvider mp = Membership.Providers["MyAdMembershipProvider"]; mp.CreateUser("Test2user@domain", "pa344ss123word!*&", "me@here", null, null, true, null, out status); This works fine. The only thing now is the Pre Windows 2000 login name is set to garbage as far as I can tell. e.g.: domain\$SS60H8-PPK4IRVSFIK1 We do have a couple of legacy NT based systems (about 2 I think) but I would like to keep existing compatibility. How can I control the Pre Windows 2000 login name? -- Mick Walker Software Engineer http://www.mick-walker.co.uk Tag: User cannot change password - Resets itself. Tag: 175947
 - 16
 - beitcertified passing questions & answers Hello, I have used beitcertified questions and answers; these are really nice and helped me a lot for passing the exam. visit http://www.beitcertified.biz and try these latest brain dumps for your certification exam. Tag: User cannot change password - Resets itself. Tag: 175943
 - 17
 - Creating folders on any Computer withing AD Domain Hi All, I am a new poster, so I appologise if this has been covered before, I did do a search and couldn't turn up much, but if I missed something obvious then I appologise. I am looking for a way in which I can create physical folders on any machine withing the current AD Group using C# and the DirectoryServices namespace. I am using Microsoft.Web.Administration to manage IIS and I can create new sites, virtual directories etc all fine. I just need a way to create the filesystem structure on any of the webservers within our domain. I hope there is a way to do it, I don't really want to go down the path of calling webservices located on the individual machines to create the needed directory structures. Kind Regards Tag: User cannot change password - Resets itself. Tag: 175939
 - 18
 - SceCli Id.: 1202 Hi, the event SceCli Id.: 1202 appears each 5 minutes with the error: Security policies are propagated with warning. 0x534: No mapping between account names and security IDs was done. I looked at the support.microsoft.com and I found the KB:324383 But I dont know hot to fix this error. Any solution or help? Tks Tag: User cannot change password - Resets itself. Tag: 175935
 - 19
 - Unattended Software installation Hello All: I was wondering if there is a way to install software on remote client machines (XP and VISTA) without using the RDP or Group Policy. I have tried using the PSEXEC (Mark Rassianovich's pstools), but had limited success, also tried remote installer trial version and it didn't always work. Cheers. Tag: User cannot change password - Resets itself. Tag: 175933
 - 20
 - Unable to reuse hostname I've demoted a DC to be a member server using DCPROMO and change the IP address. The process was successfull. The DC is now a member server. However when i ping the member server, it shows the IP address of the DC and not the new IP address of the member server. I've remove it from the domain but now I'm not able to join it back to the domain. Kindly help. Thanks Tag: User cannot change password - Resets itself. Tag: 175924
 - 21
 - Active Directory scripts Hi I need some (or a lot of) help having a way in this case a script that could help me doing the following tasks: 1. a script that could update the AD when I export the users to a txt file and then I need to update AD with new users 2. a script that allows to see for each OU where the users have their mailboxes/server. Thanks Ricky Tag: User cannot change password - Resets itself. Tag: 175920
 - 22
 - How do you overide screensave setting in GP? I need some way to override the group policy screensaver setting for a single computer. Whenever this computer in left unattended for sometime during presentations, the screesaver causes it to lock up and the only recourse is to reboot. Is there anyway to override just the screensaver setting? Thanks! Ben Tag: User cannot change password - Resets itself. Tag: 175918
 - 23
 - How to migrate services due to server substitution >Hello Pop, > >Sorry this NG is English. Hello! Sorry, it was a mistake. I try to explain my problem in English.... not a good one. We have to substitute our old server (windows 2000) with a new one (windows 2003). I'm not that expert on system administration but my boss tells me to find some documentation and do that configuration. The old server is a Domain Controller and is also a mail server with Exchange 2000 installed and obviously Active Direcotory It is the first time that i've to migrate services from one server to another. What is the best way to operate? For my small experience the steps to follow will be: - Assign a static IP Address to the new server near the old one - Add the server to the domina - Promote the sever to Domain Controller (is better to be before a secondary DC and after the primary domain controller or i can promote the server directly to primary DC?) - Exchange migration to the new server - Anything else? On the first 3 items i can do myself basing on some info that i've found on web. But some confirmation will be well accepted :D Instead, I need some help on the exhange migration because I have no idea. Someone can give me some help or URL in which find documentation? Thanks, Luca Tag: User cannot change password - Resets itself. Tag: 175916
 - 24
 - Print Servers on VMWare We are looking to set up a few print servers with as many queues as possible - we expect light utilization of most of the printers (a few documents an hour maybe). According to what I've read in Microsoft's "Print Server Scalability and Sizing Technical Overview" document, having upwards of 1,500 (or even 2,000) queues on a server should not be a problem. I'm thinking about using a VMWare virtual server instance to perform this function, and I have not been able to locate much on the internet regarding the relationship between VMWare and high-utilization print servers. If you know something (warnings, etc), please let me know! Thanks... - JmD Tag: User cannot change password - Resets itself. Tag: 175915
 - 25
 - Migration Dear All, We are planning to migrate our DC and Exchange from 2000 to 2003. We have 3 DC and one AD integrated exchange 2000. Now we are planning to migrate only Root DC and exchange 2000. I have upgraded exchange 2000 to exchange 2003. Now i need to upgrade our OS from 2000 to 2003. so i need to run the Adprep utility.Here i have two doubt now. 1. whether i need to migrate the ROOT DC first or the AD integrated exchange 2000 server? 2.which server i need to run the adprep first (either in root Dc or in AD integrated exchange 2000, or in Both)? Can anybody help ? Regards, Johnson Tag: User cannot change password - Resets itself. Tag: 175908

Hi,

When I tick the user cannot change password attribute for different accounts
in AD the option seems to reset itself after about 5 minutes.

Does anyone have any ideas how I can fix this?

Thanks,

Top