how to add ( windows firewall policy) to group policy

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - User login creation issue I'm running into issues where I'm trying to create a new user and the login id already exists. I haven't been at this company very long and maybe there was a good reason why they adopted the idea of making the user login id to be their initials, but it's very cumbersome. Is there any way to query active directory by the login ID to be able to determine who is using that login and to delete the user if it's disabled? Tag: how to add ( windows firewall policy) to group policy Tag: 176701
  - 2
    - Synchronization issues I manage a very small Win2k network - 3 servers (One PDC, one BDC, and one Terminal server), 7 workstations - the function is mainly to give access to Windows sessions in a predominantly Unix environment. Anyway, to cut a long story short, the BDC was switched off for a couple of days (over a weekend) and the system has lost synchronization. So far this has not caused a problem - users can logon, and things seem to be working, but I have no doubt that soon this will change. I've tried to use the server manager to re-sync, but the options for sychronization are greyed out on all the servers. Has anyone got any bright ideas that may start the machines re-synchronizing? Many thanks E Tag: how to add ( windows firewall policy) to group policy Tag: 176691
  - 3
    - Blank Passwords, Complex Requeirements and Problems... Blank Passwords, Complex Requeirements and Problems... An auditor discovered several accouns with Blank Passwords in a MultiDomain AD structure arround the world As far as i know, the Win2003 AD never had a "free" Default Domain Policy to allow that, the DDP is the Default since the initial build of th AD. Ok, let's say that an Admin disabled temporarily th DDP for a few moments and allowed certain accouns to be created with blank passwords. Today, the DDP is configured to allow only complex passwords. 10 accounsts in the domain (among 1.200 other accounts) were found with blank passwords. When we reset thoses passwords, the ADUC allows.. BLANK passwords!!!!! Only in the 10 aaccounts created in 2007 (The AD was created on 2004). Any other user don't have that problem, only a sequencial list of accounts (created by script with the DSADD tool, exactly like any other account in the domain) Tag: how to add ( windows firewall policy) to group policy Tag: 176688
  - 4
    - just did a dcpromo hey all, i changed the ip and dns of the server before i ran the dcpromo and after the install completed normally i checked the dhcp server and beside the small server icon the ip address shows that 10.10.1.1 . can someone please explain why this is? and if it needs to be fixed and how? thanks, rodchar Tag: how to add ( windows firewall policy) to group policy Tag: 176680
  - 5
    - External Trust Between W2K and Server 2003 I am attempting to set up a two-way external trust between a Windows 2000 AD domain and a Server 2003 domain. They are on different subnets, accessible to one another via VPN. They can see each other's DNSs, and WINS is up and running and they can see each other that way. Everything on the Server 2003 side works fine. Verifying the trust works without a hitch. However, on the Windows 2000 server, when I go to verify the trust, I get a dialog stating "The credentials supplied conflict with an existing set of credentials". I'm at logger heads here. I have no idea what's wrong. -- Aaron Clausen mightymartianca@gmail.com fnor Tag: how to add ( windows firewall policy) to group policy Tag: 176679
  - 6
    - DC promo Hi all, I'm getting a "The default netbios domain name "server0" was slected due to name conflict on the network. When I try to put in my desired FQDN. I don't understand why this happens because It's on a workgroup switch this only this computer attach right now. No dns server setup yet.(lab enviroment) It's windows 2003 server OS. I don't get it. Any help would be appreciate. Thanks. Tag: how to add ( windows firewall policy) to group policy Tag: 176678
  - 7
    - Windows 2003 Folder Redirect Stopped working. The MyDocuments Folder Redirection has stopped working for two users. Other users in the same Group Policy are still working. One users has half his documents copied over. Looks like the other user has all his documents. Currently their MYdocuments is pointing back to original path on C:. Their logon take a long time apply policy. The two not working are getting a few error messages in their event logs. Type: Error User: domain\username Source: Folder Redriection Event ID: 102 Description: Failed to perform redirection of folder My Documents. The files for the redirected folder could not be moved to the new location. The folder is configured to be redirected to \\path\My Documents. Files were being moved from C:\Documents and Settings\username.001\MyDocuments to \\path\My Documents. The following error occurred: Access is denied. Type: Error User: NT AUTHORITY\SYSTEM Source: Userenv Event ID: 1000 Description: The Group Policy client-side extension Folder Redirection was passed flags (0) and returned a failure status code of (5). Type: Error User: NT AUTHORITY\SYSTEM Source: Userenv Event ID: 1000 Description: Windows cannot process extension Folder Redirection ProcessGroupPolicy. Return value (0x5). SETTINGS The redirection settings: Basic The target folder location: Create a folder for each users under the root path Root Path: \\server\path Users dont have exclusive rights (Used article 288991 to setup rights), this works for everyone else I have selected move contents of MyDocuments i have selected Redirect the folder back to the local userprofile location when policy is removed. Thanks in advance. Tag: how to add ( windows firewall policy) to group policy Tag: 176677
  - 8
    - Hardware Upgrade with Active Directory I have a five year old server that is my PDC now and it also acts as my Exchange server. I want to Upgrade the Domain Controller to another box but leave the Exchange alone and make the old server just a Backup Domain Controller. I have done this probably 50 times with another network operating system (Novell, Sorry) but this will be my first Microsoft. I have looked at the Active Directory Migration Tool and wonder is there an easier way. So I thought i'd sent this post to all the experts and ask is there an easier way? Tag: how to add ( windows firewall policy) to group policy Tag: 176675
  - 9
    - Hyderabad software training institutes Hyderabad software training institutes,Computer Training Institutes For Multimedia =B7 Computer Training For Asp.net,C#. Net,VB.net,Java,J2EE,Sql server,Oracle,PL/SQL,Manual testing,QTP,Win runner,Automated tools ,interview ... Dataware Housing .... Training Details. Basic Information. Training Name. : Institute Name. : For more information visit this link http://itlearnershub.blogspot.com/ http://softwarelearnershub.blogspot.com/ Tag: how to add ( windows firewall policy) to group policy Tag: 176674
  - 10
    - PINOYBUSINESS.ORG FOR SALE PINOYBUSINESS.ORG FOR SALE pinoybusiness.org for sale paypal admin@pinoybusiness.org U.S.$10 only or contact info@pinoybusiness.org Tag: how to add ( windows firewall policy) to group policy Tag: 176670
  - 11
    - Migrating 2000 server I am wanting to upgrade a 5 year old DC to a new server. I am basically wanting to move active directory to a new server and make the old server a backup DC. I have downloaded the ADMTv2 program and reading thru it. But I guess never have done this before, I am wanting to know is there an easier way to migrate a Windoew 2000 server to another Windows 2000 server? Tag: how to add ( windows firewall policy) to group policy Tag: 176667
  - 12
    - about to run dcpromo... hey all, i'm trying to build my test server and i'm about to run dcpromo, if i want to change the ip address of the serve is it better to do before or after? and if i do change the ip address do i have to configure something manually after the dcpromo completes. i'm going to rely on dcpromo to install configure my dns server so is there something here i need to do as well if i change ip address? thanks, rodchar Tag: how to add ( windows firewall policy) to group policy Tag: 176663
  - 13
    - Update attribute in AD for all users Hello: Due to some customization I added an attribute to my 2003 AD schema for all users in my domain. I need this attribute set to the same value for everyone. Does anyone know how I can set this attribute for all users? Thanks. Harrison Tag: how to add ( windows firewall policy) to group policy Tag: 176655
  - 14
    - Forest Root DC Single Label host name Our network has 4 locations, but the main location is the only one that has AD, the others have NT4. In our main site we have 3 DC's. The forest root DC is in the nj1.com domain, but its fully qualified domain name is server.nj1. There is no .com. This server is also our FSMO role holder. The other two server are servername.nj1.com. I am trying to move the FSMO roles and demote it, but when I tried to transfer the roles I get errors. When I run dcdiag I get DNS guid errors. I am not sure how fix this server so that it's fully qualified name is server.nj1.com? Any ideas? Thanks in advance. Tag: how to add ( windows firewall policy) to group policy Tag: 176649
  - 15
    - Disable Pop Up Blocker I have several XP clients running IE7 with the Pop UP blocker blocking a training program we use. Is there a way through group policy to allow popups for certian sites? I really don't want to have to disable the pop up block completly to resolve this issue. Tag: how to add ( windows firewall policy) to group policy Tag: 176648
  - 16
    - Help moving from NT4 to 2000 AD? Hello, looking for some guidance or help. We have about 7 NT4 Domains all with their own Domain Controllers with trust between each other. The domain with the most users on it, we upgraded the PDC to Active Directory Server and now have a Active Directory Server with 2 NT4 BDC's running in a Mixed Mode Environment. How do I now bring in the other Nt4 Domains. So the domain with the AD Server in Mixed Mode is the Primary or Parent Domain and all the other domains fall under Child Domains. Does anyone have advice or a link to what might be a good guide? Tag: how to add ( windows firewall policy) to group policy Tag: 176641
  - 17
    - Domain consolidation and decommission child domain in Active Hi, We have a task to move object within a child domain and decommission the domain when the task has been accomplished. Currently there are 100+ computer objects within the child domain with the user objects residing within the root domain where they will stay. Our objective is to move the computer objects to a child domain residing on our west coast location from the east coast domain to be decommissioned, we will also move the existing domain controllers within the east coast child domain to the west coast leaving one root domain controller at the site for directory services integration with RADIUS server authentication. After all this is done, we plan on renaming our domains (both child domains) to another naming convention. Does anyone have any experience with this type of domain restructuring? All servers are running Windows Server 2003 with SP1 applied with Forest and Domain function levels running in full native 2003 mode. Any comments or suggestions would help. Thanks in advance Nino Tag: how to add ( windows firewall policy) to group policy Tag: 176637
  - 18
    - ADMT - "Object Property Exclusion" only shows for Computers Greetings, I am migrating user accounts intra-forest and I wish to _not_ migrate the description field for user accounts. Even though ADMT describes the "Object Property Exclusion" page when I do a user migration it just skips it and goes right to the last screen, it only shows up when doing a computer migration. This means I have no choice but to migrate user descriptions that are no longer accurate and go back and clean them up afterwards. According to ADMT the feature is available for users & groups as well as computers. What gives? Tag: how to add ( windows firewall policy) to group policy Tag: 176629
  - 19
    - Domain Controller Issue - Urgent Help Due to some issues with a failed domain controller upgrade to new hardware, I am having an issue with my domain controllers. I demoted one of my DCs after this upgrade and had many issues. I restored the DC from backup, however now that DC does not appear in the Domain Controllers group under AD Users and Computers. My question is, can I just run DCPROMO again to make it a domain controller again. I have another DC that is functioning and is authenticating users and allowing for Exchange mail delivery just fine. The only issue I have is that when our users change their passwords, through Netware, and try to sync them with windows, their Windows accounts keep getting locked out. Can anyone offer any suggestions here. When I did my restore more then a week ago, I did not do an Authoritative Restore as I did not know I should do that. Any help is greatly appreciated and I will elaborate if necessary, just let me know. Thanks, Bill Tag: how to add ( windows firewall policy) to group policy Tag: 176627
  - 20
    - joining parent company domain have an windows 2000 server running exchange 2000. company has been purchased by another company. the parent company has their own 2003 server with their own domain. i have vpn setup between the two offices and now want to setup the exchange 2000 server so that emails that come in to users here addressed to parent company's domain will come in here. i know how to change the storage location of the users mailbox in ad, but i think im going to have to setup trusted domains etc. dont know what to do so that i dont have to re-create all mailboxes , ad etc. anyone have a clue ? Tag: how to add ( windows firewall policy) to group policy Tag: 176624
  - 21
    - Home Folder issue We seem to be having sporadic issues with users mapped drive opening a parent directory rather than their home folder. All users are set as \\server\users\username, but occasionally their mapped drive opens \\server\users. If there is a solution can someone please share. This is not a big problem but it does cause confusion among our users and unecessary work for me. Cheers, Tag: how to add ( windows firewall policy) to group policy Tag: 176622
  - 22
    - New Site to Replicate We just built a new building in location 2. I moved 1 of the BDC's from location 1 to this building in location 2. How do I get the BDC in location 2 to talk to to the PDC in location 1? By the way, all of our ports except the ones that we need on the router's firewall are blocked. I'm not sure if there is a special port that this comm is suppose to talk over. -- Mark Hughes Tag: how to add ( windows firewall policy) to group policy Tag: 176613
  - 23
    - Saved Queries Disappear in the Active Directory Users & Computers I've searched everywhere for a resolution to this problem and I just can't believe that no one appears to have reported it. I want to create a bunch of Saved Queries in the ADUC MMC. I know the query syntax and have created a lot of custom queries, so that is not my problem. The problem is that once I've created so many, or executed a few of them that return several thousand results, my queries start disappearing, from the top of the console downward. I've used MMC 2.0 and 3.0, as well as several computers with Windows XP SP2, and I have found no way to resolve this problem. This means that I have to create several MMC's to have all the queries I want, and still the user of the MMC has to occasionally close and reopen when their queries disappear after using a few of the queries that return 1,000+ results. Is there any resolution to this extremely annoying ADUC Saved Queries problem? I'm about to just give up on it and write a program to manage the accounts, but I'd rather save myself a lot of time if there is some special hotfix or patch for MMC or ADUC that I am not aware of. Thank you! Tag: how to add ( windows firewall policy) to group policy Tag: 176610
  - 24
    - Active Directory could not replicate the directory partition - "The remote procedure call was canceled" I'm installing new AD domain in remote site, the bandwidth latency is 1000 ms, I've done many similar installations like this with the same bandwidth, yet this time I'm getting the following error: Active Directory could not replicate the directory partition - "The remote procedure call was canceled" I'm using Windows Server 2003 SP2 Is the NTDS\Parameters\RPC Replication Timeout" increase of a benefit in my situation now or do you have any other suggestion. Regards Tag: how to add ( windows firewall policy) to group policy Tag: 176606
  - 25
    - Active Directory couldn't be replicated while installing New Domain I'm installing new Domain in remote site, the bandwidth latency between this site and the parent domain site is 1000 ms, i've done several installations on a similar setup and bandwidth yet now Active Directory could not replicate the directory partition "The Remote Procedure call was cancelled" Windows 2003 SP2 The "NTDS\Parameters\RPC Replication Timeout" is of benifit in this situation?? Regards, H.F Tag: how to add ( windows firewall policy) to group policy Tag: 176605
- Next
  - 1
    - The SOA record for the Active Directory zone was not found Hi, I just ran dcdiag /v /test:DNS on one of my Domain Controllers (which is working fine) and as part of the output I got: The SOA record for the Active Directory zone was not found Can anyone help me find the cause of this warning? Thanks, Ian M Tag: how to add ( windows firewall policy) to group policy Tag: 176604
  - 2
    - Restrict Anonymous settings In reading this article http://support.microsoft.com/kb/890161, it suggests changing restrict anymous setting to a 1 or 2. Am I correct in thinking that if I change the setting to 2, the 1 NT pc we have will not be able to authenticate to the domain? Also, I had a root forest domain and then a child domain. Will this break any trust relationships bewteen the 2? All users logon to the child domain for authentication. I read somewhere that I shouldn't set the DCs to 2. Any insights? Thanks Deb H Tag: how to add ( windows firewall policy) to group policy Tag: 176601
  - 3
    - change password by command line Hi everybody, My 1st time on this Forum so ... I'm searching a way to update the password field in the properties of each MA's on my MIIS Server. ... I changed the password of the account used by MIIS to connect active directory and i would like to update that info in MIIS without doing it manually. Can you help? Shopsoy Tag: how to add ( windows firewall policy) to group policy Tag: 176600
  - 4
    - Windows cannot access the file gpt.ini for GPO I am getting below event ID 1000 in my application every few second. Can anyone guide me how to troubleshoot this problem and find out the root caused. I had verify the permission and all match to microsoft requirement. Please Help Sources: UserEvn Event ID:1000 User: NT AUTHORITY\SYSTEM Category:none Windows cannot access the file gpt.ini for GPO The file must be present at the location <>. (). Group Policy processing aborted. Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine. \ Tag: how to add ( windows firewall policy) to group policy Tag: 176589
  - 5
    - procedure required for complete active directory restore to a hello guys, I have an AD domain I need to restore to a previous state, this is the infrastructure: 1 DC 2K3 Std Ed SP2 all FSMO roles and GC 1 DC 2K3 Std Ed SP2 GC Other member servers... I have a valid backup taken only a few hours back. I need to do authoritative restore so that all objects are rolled back to the previous state. I know I need to: first, reboot DC 1 into AD restore mode and run a normal (not authoritative) restore second, use ntdsutil and execute restore database (authoritative restore) But I've never performed this before, and I know there's something to do with regard to the sysvol objects. I've looked everywhere in the internet but all examples refer to restoring just an object, not the entire directory. Does anyone have a bullet proof, step by step procedure, to perform a complete restore of an active directory domain to a previous state ? Anybody can help ? It would be much appreciated! Thanks and Regards, ZZ Tag: how to add ( windows firewall policy) to group policy Tag: 176587
  - 6
    - sysvol not replicating to dc in another site Situation: Site1: DC1 DC2 Site2: DC3 NO dns trouble. Replication of the Active directory is working without any problem. When I add a user on DC3 it's replicated to DC1 en DC2 and the other way arround. The only problem is that replication of the sysvol share isn't working (anymore) I don't know since when it stopped working.. but my group policies don't sync anymore from site 1 to site 2 and visa versa. I get NO errors in my logfiles on all servers.. The only errors I can find are in the winnt\debug directory: Errors: <SndCsMain: 2612: 874: S0: 16:01:12> ++ ERROR - EXCEPTION (000006be) : WStatus: RPC_S_CALL_FAILED <SndCsMain: 2612: 875: S0: 16:01:12> :SR: Cmd 014e2470, CxtG f295c5b4, WS RPC_S_CALL_FAILED, To FMGEXACT01.int.foreignmedia.com Len: (1204) [SndFail - rpc exception] <SndCsMain: 2612: 895: S0: 16:01:12> :SR: Cmd 014e2470, CxtG f295c5b4, WS RPC_S_CALL_FAILED, To FMGEXACT01.int.foreignmedia.com Len: (1204) [SndFail - Send Penalty] <RcsForceUnjoin: 2128: 2945: S0: 16:01:12> :X: ***** UNJOINED DOMAIN SYSTEM VOLUME (SYSVOL SHARE)\FMGPINK01\FMGPINK01 -> FOREIGNMEDIA\FMGEXACT01$ RemoteCxt <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014e5e68 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014e0300 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014ecfb8 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 0023c950 <RcsCheckCxtionCommon: 2652: 966: S1: 16:01:12> ++ WARN - RcsUnJoinCxtion: wrong unjoin guid for 014eaae8 <FrsDsFindComputer: 1848: 8717: S2: 16:01:15> :DS: Computer FQDN is cn=fmgpink01,ou=domain controllers,dc=int,dc=foreignmedia,dc=com <FrsDsFindComputer: 1848: 8723: S2: 16:01:15> :DS: Computer's dns name is fmgpink01.int.foreignmedia.com <FrsDsFindComputer: 1848: 8737: S2: 16:01:15> :DS: Settings reference is cn=ntds settings,cn=fmgpink01,cn=servers,cn=drachten,cn=sites,cn=configuration,dc=int,dc=foreignmedia,dc=com <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1000 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1000 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1103 <FrsHashCalcString: 1848: 4777: S0: 16:01:15> Name = S-1-5-21-3206282357-3970063792-383977586-1103 Tag: how to add ( windows firewall policy) to group policy Tag: 176578
  - 7
    - Non-Authoritative restore on W2K8 Confused on this one. Why can't I do a non-authoritative restore by stopping AD DS as opposed to having to reboot and use DSRM (I haven't tried this but the article doesn't provide the option)? According to the article link this is the only way to go and this makes no sense to me and seems that AD DS as a service should be allowed to do this and would be beneficial because of it. Anyone have a definitive answer? I will find time to try in the future, but I am curious to know. http://technet2.microsoft.com/windowsserver2008/en/library/510b106b-e7fb-42a5-bcb2-0c3278a5d73e1033.mspx?mfr=true -- Paul Bergson MVP - Directory Services MCT, MCSE, MCSA, Security+, BS CSci 2003, 2000 (Early Achiever), NT http://www.pbbergs.com Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. Tag: how to add ( windows firewall policy) to group policy Tag: 176573
  - 8
    - Windows 2000 Server Replication Problem Hi, I am having windows server 2000 Replication problem as follows Hq server and Two branch offices Both brach offices are not replication to my hq server In my Brach office servers every 15 min i am getting event id 1311 and 1566 I am able to ping from and to all the servers using FQDN names I ran dcdiag on my hq server i am getting the following error [1] FRS can not correctly resolve the DNS name SOUTHSRV01.test.com from this computer. [2] FRS is not running on SOUTHSRV01.test.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. [1] FRS can not correctly resolve the DNS name NORTHSVR01.test.com from this computer. [2] FRS is not running on NORTHSVR01.test.com. [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers. Servers SOUTHSRV01.test.com,NORTHSVR01.test.com are my brach offices when i checked all the DNS setting and FQDN seems to be fine I really need expert help on this and what otherthings i can look for problem root cause Thanks for your help Tag: how to add ( windows firewall policy) to group policy Tag: 176560
  - 9
    - Need a little help please..... I have the Windows 2000 Server Administrator's Companion (Microsoft Press), but it's not been very helpful (or I have been very dense). I have been tasked with caring for an ancient Windows 2000 Server and the users on its small domain. What I need to do is have a user desktop that is set up with applications, printers, desktop links, favorites, etc. (everything they need to do their job) and restrict them from changing those things, installing applications, getting to the control panel, running unauthorized apps, etc. It is for a location that cannot seem to get its workers to stop installing crap on the local PCs and they want it locked down. (I said just fire the people that don't listen and your problem is solved....but that is not the path they have chosen.) Are there any resources that may be helpful to me in this (more helpful than the MS tome that I can't seem to figure out)? jim Tag: how to add ( windows firewall policy) to group policy Tag: 176558
  - 10
    - Trying to create mandatory profiles.... I want to control the user desktops (not allow them to install stuff or hose up the desktop for the next user) and I am trying to create mandatory profiles on a Windows 2000 Server. The Windows 2000 Server Administrator's Companion (Microsoft Press), on page 276, says to... "1. Create a user account with a descriptive name.... This is just a blank account that you'll use to create a template for the customized configuration. 2. Log on using the template account and create the desktop settings you want, including applications, shortcuts, apperance, network connections, printers, and so forth. 3. Log off the template account. Windows 2000 creates a user profile on the system root drive in the Documents And Settings folder. .... 4. Log on using an administrator account. Open Active Directory Users and Computers, and find the account for which you want to assign the customized roaming profile." I'll stop here....because I can't get passed step #2. When I log off the server as Administrator and try to log in as my template user, I get a "Logon Message" that says "The local plicy of this system does not permit you to logon interactively." So I logged back in as Administrator, and added the user to the Local Security Settings>User Rights Assignment>Log On Locally policy setting. I also checked that Users group was checked there. I tried logging in locally as Template again and got the same message. What am I doing wrong? jim Tag: how to add ( windows firewall policy) to group policy Tag: 176556
  - 11
    - Adding users to sub OU using Script I am using Windows Server 2003 as Domain Controller and i want to add users using vb script. my LDAP path is "LDAP://OU=Student,DC=in,DC=dt,DC=com") this create the users only in the Student OU but i want to create users in the Session which is Sub OU of the Student. Cand any body help me. Thanks in Advance Tag: how to add ( windows firewall policy) to group policy Tag: 176552
  - 12
    - Tracking down account lockouts From a domain controller, is there a way to see which workstation incorrect logins/account lockouts are coming from? Everything I can find says you have to go to the workstation to identify what is generating the incorrect logins. I don't care so much at this point what is generating them, I need to identify the workstation they are coming from. Thanks Jason Tag: how to add ( windows firewall policy) to group policy Tag: 176534
  - 13
    - Migrating active directory and exchange I need to find the least painless way to migrate active directory with about 20,000 users and an Exchange server to a new set of servers at a new location. What's the best way to do this? I need to test the procedure before the actual move? Thank you! :) Tag: how to add ( windows firewall policy) to group policy Tag: 176523
  - 14
    - Windows 2008 Authors Folks- I'm working on Windows 20008 Active Directory book, and I was wondering if anyone here is interested to participate in the project as contributor. Please consider that your name will be published as Contributor. All you have to do is to write four or five chapters in next 10 weeks. Please let me know if you are interested to proceed. This project has already been approved by the publisher. The TOC has been approved. I'll also provide you a sample chapter, authors kit and other tools to start working on this project. If you are interested then please send me your: 1. Resume 2. Prior Writing experience 3. Links to any published articles Thanks, Tariq: tariq.azad @ rogers.com Tag: how to add ( windows firewall policy) to group policy Tag: 176521
  - 15
    - time to demote a dc on a site hello i have 2 dc on my first site (the main site) , and one who hold all the roles, i have a other site, where i have a other DC this site is connected to my main site with a global vpn 1Mo/s i already demote Dc but on the same site, so my two questions are 1) what is the exactly process of the demote operation (can i have a process paper) - does it contact the server who hold a special role ...etc ... 2) how many time could it take for the DC on my 2nd site to be demote, or how can i calculate it because i have user who are connected to my main site with TSE, and they must be connected all the time between 8H to 12H and 13 to 17 H thanks nt Tag: how to add ( windows firewall policy) to group policy Tag: 176513
  - 16
    - Active problem To all, Having some interesting things happening on a 2000 dc. 1. system state backup fails with "active directory reported an error" that is with Ntbackup. The tivoli client reports a problem on sys state at ntds. 2. An online defrag has not run successfully since 2/8 on 2/8 the following events were reported in the log Event Type: Error Event Source: NTDS ISAM Event Category: Logging/Recovery Event ID: 203 Date: 2/8/2008 Time: 1:00:59 AM User: N/A Computer: SAMPGHSBL021 Description: NTDS (352) The database engine has stopped the backup with error -1022. Event Type: Error Event Source: NTDS ISAM Event Category: Performance Event ID: 0 Date: 2/8/2008 Time: 1:00:59 AM User: N/A Computer: SAMPGHSBL021 Description: NTDS (352) Unexpected Win32 error: 0x20 Event Type: Error Event Source: NTDS ISAM Event Category: Performance Event ID: 0 Date: 2/8/2008 Time: 1:00:59 AM User: N/A Computer: SAMPGHSBL021 Description: NTDS (352) Unexpected Win32 error: 0x3E6 Besides the backup and online defrag I cannot seem to find any other issue. AD is working, from all appearances and there are no other log entries showing for what I would expect is a corrupt AD. Any ideas on this would be very helpful Tag: how to add ( windows firewall policy) to group policy Tag: 176512
  - 17
    - Account lock out frequently A domain user account always lock out almost everyday! Other domain user accounts do have this problem. What could be the possible cause of it? Tag: how to add ( windows firewall policy) to group policy Tag: 176508
  - 18
    - FYI: Information about using Last Logon Information in Windows Server 2008 and Windows Vista This is a multi-part message in MIME format. ------=_NextPart_000_003F_01C86C45.4EAC5840 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://blogs.dirteam.com/blogs/jorge/archive/2008/02/11/showing-last-logo= n-info-at-logon-in-windows-server-2008.aspx Enjoy! --=20 Cheers,=20 (HOPEFULLY THIS INFORMATION HELPS YOU!) # Jorge de Almeida Pinto # MVP Windows Server - Directory Services BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx -------------------------------------------------------------------------= ----------------- * How to ask a question --> http://support.microsoft.com/?id=3D555375 -------------------------------------------------------------------------= ----------------- * This posting is provided "AS IS" with no warranties and confers no = rights!=20 * Always test before implementing! -------------------------------------------------------------------------= ----------------- ################################################# ################################################# -------------------------------------------------------------------------= ----------------- ------=_NextPart_000_003F_01C86C45.4EAC5840 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.6001.17128" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DVerdana size=3D2><A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/archive/2008/02/11/showing-l= ast-logon-info-at-logon-in-windows-server-2008.aspx">http://blogs.dirteam= .com/blogs/jorge/archive/2008/02/11/showing-last-logon-info-at-logon-in-w= indows-server-2008.aspx</A></FONT></DIV> <DIV><FONT face=3DVerdana size=3D2></FONT> </DIV> <DIV><FONT face=3DVerdana size=3D2>Enjoy!</FONT></DIV><FONT = face=3DVerdana size=3D2> <DIV><BR>-- <BR><BR>Cheers, <BR>(HOPEFULLY THIS INFORMATION HELPS = YOU!)</DIV> <DIV> </DIV> <DIV># Jorge de Almeida Pinto # MVP Windows Server - Directory = Services</DIV> <DIV> </DIV> <DIV>BLOG (WEB-BASED)--> <A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/default.aspx">http://blogs.d= irteam.com/blogs/jorge/default.aspx</A><BR>BLOG=20 (RSS-FEEDS)--> <A=20 href=3D"http://blogs.dirteam.com/blogs/jorge/rss.aspx">http://blogs.dirte= am.com/blogs/jorge/rss.aspx</A><BR>--------------------------------------= ----------------------------------------------------<BR>*=20 How to ask a question --> <A=20 href=3D"http://support.microsoft.com/?id=3D555375">http://support.microso= ft.com/?id=3D555375</A><BR>----------------------------------------------= --------------------------------------------<BR>*=20 This posting is provided "AS IS" with no warranties and confers no = rights! <BR>*=20 Always test before=20 implementing!<BR>--------------------------------------------------------= ----------------------------------<BR>###################################= ##############<BR>#################################################<BR>--= -------------------------------------------------------------------------= ---------------</FONT></DIV></BODY></HTML> ------=_NextPart_000_003F_01C86C45.4EAC5840-- Tag: how to add ( windows firewall policy) to group policy Tag: 176505
  - 19
    - AD Query Over time I have saved several queries to the AD users and computers, saved queries container. They all worked fine until we implemented Novell identity manager to syncronize users across directories. Since then, the queries which return servers or workstations has worked fine. However queries which return users or groups now return nothing. Anyone have any ideas as to a permission or attribute change which would cause this? Thanks... Tag: how to add ( windows firewall policy) to group policy Tag: 176501
  - 20
    - Replace Volume that AD is on I have a 2003 SP 1 DC with all the FSMO Roles on it. I need to replace a volume on this server that hosts the AD folders. If I do a backup to tape, then replace the volume and then do a restore, will replication be okay or will I need to do anything special? Thanks, Jim Tag: how to add ( windows firewall policy) to group policy Tag: 176488
  - 21
    - DCPROMO Virtual Server I am trying to get a Virtual test network setup with a copy of our active directory. What would be the best way to do this? I was thinking I could create a Virtual Server on our live network, run DCPROMO on it to promote it to a DC, make a copy of the virtual server image file (to be used for testing), then run DCPROMO again on it to demote it. I would then take the copy of the virtual server image and set it up on the test network. Does this sound like a ok/safe way of doing this? Tag: how to add ( windows firewall policy) to group policy Tag: 176486
  - 22
    - LDAP Query I want to make a LDAP Query in Windows 2000 based Active Directory to get a list of people who logs to a certain workstation an dthe total number. How do i do this? -- Ansy Tag: how to add ( windows firewall policy) to group policy Tag: 176480
  - 23
    - Exchange 2003 installation In Windows 2000 active directory Exchange 5.5 was running fine. Now Exchange5.5 made offline and not available now. When I try to install Exchange 2003 in this Active directory it is now allowing me to install. Can anybody throw light on this issue? Best Regards, Sathya Tag: how to add ( windows firewall policy) to group policy Tag: 176478
  - 24
    - Domain member I have an AD account solely for the purpose of joining workstations as a domain member. What are the rights to be granted to this account? Tag: how to add ( windows firewall policy) to group policy Tag: 176475
  - 25
    - Trusted domains Hello! Can i make a trusted domains without merging tree when the 1st domain is main.domain.com and the 2nd domain is test.main.domain.com? I.e. can exists main.domain.com and test.main.domain.com like a different domains but with trusts between? P.S. I'm not trust admins from the main domain and didn't want give them whole rights on my test.main.domain.com. Thanks! Tag: how to add ( windows firewall policy) to group policy Tag: 176473

I have Active directory 2000 ( windows 2000 advanced sever SP4) and have
worksations run by Windows XP SP2 .
so I want to add policy to the group policy of Active directory .
Please help me .

Top

Re: how to add ( windows firewall policy) to group policy by Ace

Ace
Sun Mar 16 11:43:07 PDT 2008

In news:F0F16DB9-EECD-4513-9398-C9165FD445DF@microsoft.com,
Noor <Noor@discussions.microsoft.com> typed:
> I have Active directory 2000 ( windows 2000 advanced sever SP4) and
> have worksations run by Windows XP SP2 .
> so I want to add policy to the group policy of Active directory .
> Please help me .

One issue is Windows 2000 GPOs do not have the Firewall settings. You can
probably try to get a copy of the Windows 2003 SP1 or SP2 system.adm file
and add it in the Windows 2000 GPO to gain the functionality.

Flash Tip: Using Group Policy to Control Windows Firewall Settings
http://www.microsoft.com/technet/abouttn/flash/tips/tips_083105.mspx

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations

Top