Hi all,
I am trying to move mailboxes from a Exch2k7 server to another Exch2k7
in a seprate forest. But when I run the move-mailbox command I get an
error that the source mailbox cannot be opened. I had moved the user
accounts using ADMT to the new forest . After Moving I made sure that
the accounts are enabled,not expired & is visible in th Global Address
List . But even when I make
I setup an RODC is a remote site but I am noticing client machines
that are in that site are not using the RODC for login. If login one
of the servers and do c:/echo %logonserver% I get the domain
controller is the remote site.
The RODC
I have two domains abc.com and xyz.com both at Domain and forest
functional level of Windows server 2003. I have created a forest trust
between the two domains. Users in abc.com can use a pc in xyz.com to
logon to domain abc.com and vice versa. I have a created a domain
local group in abc.com but when I try to add members from xyz.com and
change the location to xyz.com I
Hello,
We are at our wits end and help would be appreciated!
We recently had to force remove a win2k domain controller which also had a
win2k3 domain controller. After removal we had to clean up the old references
to
the win2k server.
We have resolved many of the normal issues by running netdiag /fix and dcdiag
/fix but are still left with the following error from netdiag:
tree leafs wrote on 03/12/2010 05:48 ET :
> Hi,
> from ADUC I can export displayed lists including those from "saved
> queries".
> However, if I use "find" then "advanced" to compose a
query
> the resulted
> list cannot be exported as there is no "action" -> export ...
> options.
> Is there a way to export the list in this case?
> Thanks.
>
There is
Have any of you found a solution? Thanks for any help.
> On Friday, January 23, 2009 3:44 AM pizz wrote:
> I have a very strange problem in one of my child domains.
> I have a child domain with windows 2000 domain controllers and windows 2008
> domain controllers. When I create a new user on the windows 2008 domain
> controller and look at the environment tab the user???s active
You can install SFU in an AD environment for get the UNIX tab, isn't necessary install it before, so you are wrong when you say that only is possible in a new AD.
+ info: http://satish-linuxbug.blogspot.com/2008/10/qmail-ldap-ad-integrate.
I'm in AD connected to a specific DC and I go in to edit a policy. In Group
Policy Editor it shows I'm connected to a completely different DC. I see no
ability in the GPOE to connect to a specific DC like I can in AD Users and
Computers and I don't understand why it is going out to another DC willy
nilly. How can I force GPOE to edit policy on a specific DC?
thanks everyone
Budi wrote on 02/03/2009 08:05 ET :
> Dear Expert
>
> We are using windows 2008 64 bit Enterprise, we are trying to limit
> concurrent user login using limit login but unfortunetely always fail.
> my question is straight simple, is it possible to use limit login on windows
> 2008 64 bit Domain, if so please advice how to complete the task.
> need your respon asap, my bos is always asking me
>
Not sure if this posted the first time or not, but even though this is an old issue, I thought someone might benefit from this article I wrote on using Limit Login with x64 machines:
http://davidhazar.blogspot.com/2010/09/microsoft-limit-login-and-login-scripts.html
> On Thursday, August 28, 2008 6:39 AM prakas wrote:
> Hi,
>
> I have successfully installed LimitLogin at my
I know this is an old issue, but I figure someone might benefit from this information. Here is an article I wrote on how I was able to run Limit Login on x64 machines:
http://davidhazar.blogspot.com/2010/09/microsoft-limit-login-and-login-scripts.html
> On Thursday, August 28, 2008 6:39 AM prakas wrote:
> Hi,
>
> I have successfully installed LimitLogin at my client???s site.
Gents,
I have similar situation where I need to raise my domain/forest level to 2003 but I do have two 2008 Dc's if raise it would that effect 2008 DC's
Sohail
> On Saturday, March 22, 2008 10:44 AM SC77Jef wrote:
> I have an existing single 2003 Domain Controller. I want to add an additional
> domain controller to replicate AD with the 2003 domain controller for fault
>
If I sum the bytes sent/sec and bytes rec'd/sec, should that total to no
more than 100mbps, which works out to be 13107200 bytes? In some cases, I
get to about 140% of that number.
I am trying to analyze a network bandwidth issue on our server.
Thanks.
We want to keep our ADUC from becoming more cluttered.
We have a Citrix environment with many networked printers.
We want to set up 1 AD group to correspond to each printer, assign
users to each printer, then within Citrix assign these groups to use
the printers within Citrix.
People can be in multiple printer groups, since they move around.
The idea is to grant people permissions to use
Active Directory Plus allows you to list groups dependent on any number of members, and then export the data to txt or excel file, or send it directly to your printer.
It can be downloaded from http://www.vision-it.org.
> On Thursday, March 29, 2007 11:08 AM RLG wrote:
> I'm trying to create a query on AD 2003 DC that lists any group that has no
> members. I found this but it doesn't
I'm trying to delete some old computers object from my AD 2008, but
for two of this I receive the following error:
"Object %computername% contains other objects.Are you sure you want to
delete object %computername% and all of the objects it contains?"
I saw trough ADUC -> view -> "users, contacts, groups, and computer as
container" that this computer contains the follow:
Computer1 ->
I recently had a domain controller crash. Just prior to that
(thankfully) I created a backup DC in VMWare. After the PDC crashed,
I thought I would just boot up the VMWare version and all would be
fine. No joy. The domain will not show in the SQL Server Management
Studio Locations when trying to create q Windows login to SQL server.
When the Virtual DC boots up, none of the AD tools
We are about upgrade our two (2) DCs. We currently run a 2k3 domain,
but want to upgrade to 2k8 later this year. We have approx 300
computers & 300 users. If anyone has any recommendations/thoughts,
we'd appreciate it.
Thanks in advance,
Tom
We just experienced the same issue with one user. Turned out the user set up his phone to synchornize his Outlook Calendar to his phone via hard cable, which he didn't do regularly so when his AD password changed something was still set in Outlook with old password to synch with phone. We removed the phone from Exchange and everything is now working for the user.
> On Tuesday, June 17,
Hi,
The <CAName>.edb file is about 2.5GB right now. Seems pretty large to
me, is that an acceptable/manageable size? Is there any way to shrink
it or see what is making it so large? Looking inside the
Certification Authority MMC I don't see nearly that much data.
Thanks.
That has to be absolutely the lousiest solution EVER from Microsoft....
The download is not available at the link--one must CALL Microsoft to receive the file or download a 600mb + TRIAL VERSION to get a 100k file out of it. What are they trying to protect!?!??!?!
By the time I get through to Microsoft's tech support, it's be quicker for me to drive all the way across town (and I live
I am working on fixing some issues with our network. A quick rundown
of the topology....
We have multiple locations that each have at least one DC, our main
location has 2. I have users that are solely based in one location so
there profiles are stored in a Share on the DC called USERS. This is
the easy part.
I also have users that either A. work with a laptop so they can work
from
Hello Everyone,
My name is Yekini and I have been studying Active Directory 2008 for some time now and so far, everything has been going great; until I started studying and trying to master inter-site replications in Active Directory Sites & Services. Yes, we have intra-site and inter-site replications. In a nutshell, I completely I understood the whole concepts and configurations that needs
We have 2 domains Windows 2003 R2 with Intransitive 2 way Trust(Domain
A and B ). We want to migrate all the domain users and its mailboxes,
groups security/distribution, SIDs groups from Domain A to B. What is
the tool i can do this in one shot?
ADMT 3.0 is supporting for only Ad users only, not the mailboxes isnt
it ?
Hi all,
I am just struggling with a bug which emerged after moving my asp.net
application to another server.
The server came preinstalled, probably with some security modifications. I
can query list of users only from domain security groups I belong to.
Example:
(&(objectCategory=person)(objectClass=user))
- correctly returns all the users
but:
Hi,
I look after a Win2003 Domain that is Trusted (one way external) by a
completely separate Win2003 forest. In order for the Admin in the
Trusting domain to access my AD security groups and to assign those
groups to the Access Control Lists of various resources within the
Trusted domain I need to create an ID within my domain that he can use
to log on.
What are the minimum access
Currently, I have 3 AD servers, one forest, one tree, one site, very
simple configuration. My main AD server holds all of the FSMO roles.
Until now, there hasn't been a need to have any sort of sync or
network connection between our office (corporate) and any of our other
offices. The closest office to us (700 miles) just lost their IT
Director, and we've been asked to support their
Experts,
I got a user who got "access denied" if he opens the folder directly
using UNC path. However if he navigates thru "network places" then he
has no problem at all! Needless to say, his permissions are set
properly on the target folder.
He can map to that share fine, but again if he tries to open the
driver letter, access denied.
Can any one explain why so? What's the
If I put my Win XP client into Microsoft domain, it will synchronize
to my domai controller ?
Where I can verify this configuration to be sure it will take time
from DC and not external source ?
I have the same problem . On a windows folder , I need to give write only access to users to create files but do not access (read, list or modify ) the files created previously. I tried using security options of the folder and deny access to all atributes other than write . However I could not accomplish what i wanted . I created an excel file in the folder but other users can read the file
I am trying to setup referral using 2 ADAM instances on two separate windows box. I have following two instances
One system has instance1 with DN CN=Users,DC=rtp,DC=raleigh,DC=ibm,DC=com
on port 389 and 636
and another system has instance1 with DN CN=roles,DC=ibm,DC=com
now I want to create a referral from the first one to 2nd one.
How do I start on it
drm wrote:
Re:
Periodically in our Windows 2003 R2 AD implementation we have an issue with
workstations that get this message when trying to login.
I know you can simply rejoin them to the domain, and that works
swimmingly... But why does it happen?
Hi guys,
I need some help with Server 2008 GPOs. This may be a noob question so
be gentle!
I have various servers in OUs and need to prevent users accessing
other servers via a logged on server.
e.g.
User1 logged onto Server A in OU A, must not be able to access Server
B in OU B from Server A, but can logon to Server B directly.
Would dedicated logon accounts be better?
Any
My company has about 150 users of which 100 of them never access the
Corporate network. These are Webmail and Smartphone only users (they do not
have company issued PCs). The only reason the have an account in AD is for
email access. So I am looking for recommendations for password change
procedures, policies, and tools. We run Exchange 2007 and there is a
password change feature
Hi,
I have over 8 years of IT experience but very new to the Data Center
space and have 3 questions. If someone can answer, I would really
appreciate!
You can consider these questions more of a brainstorming ideas.
1. If a facilities capacity is re-classified as 5 MW lower than it was
previously, what needs to happen here?
2. We need to expand Network capacity at a facility by 2
Hello. We are looking into updating our GPO infrastruture to the ADMX
file format with a Central Store.
My understanding is that ADMX Files are needed for Windows 7/Vista/
Windows 2008 policies. If that is true, can ADMX files be used with
the standard (non-central store) infrastructure?
And... in a large international company, is it best to use a central
store or store policies on
I have done a frustratingly silly thing: I added the AD DS role to a
standalone Windows Server 2008 R2 server, creating a new domain in the
process and making the server a DC. SQL Server 2008 was running on the
server at the time. I managed to get SQL Server running again, but now I
want to remove AD from the server.
When I run dcpromo, I'm prompted to say whether this is the last DC
See http://www.petenetlive.com/KB/Article/0000301.htm
Double wrote:
server rejecting replication requests
05-Sep-07
I have 6 windows 2k3 servers running AD and all were working fine until, i
believe, one of them had a network card failure. This caused the server to
go off line for a few days. Now that the network is up and running i find
errors in replication between it and
See http://www.petenetlive.com/KB/Article/0000301.htm
Double wrote:
server rejecting replication requests
05-Sep-07
I have 6 windows 2k3 servers running AD and all were working fine until, i
believe, one of them had a network card failure. This caused the server to
go off line for a few days. Now that the network is up and running i find
errors in replication between it
Hello.
I am currently managing a very large domain with all 2003 DCs. My
intention is to replace all of the 2003 DCs with 2008. I would like
to use fresh DC installs, no in-place upgrades (too messy)
As each 2003 DC is migrated to 2008, I would like to keep the same IPs
(so DNS addresses do not have to be changed on clients) and use the
same hardware.
My idea to complete the
I have a question about something that may be causing me some issues.
I have roughly 20 laptop users that can either work from home (VPN),
be in their "main" office or work in a different office. We currently
have 4 offices that are connected together with site-2-site vpns and
each has its own DC for logins.
Currently for users that are only in one office, their profiles are
stored in
Here i have gathered some of the most important interview questions on
Windows Active Directory Services. These are related to Windows 2003
AD environment. Please click on the following link to see them
http://www2.isupportyou.net/2010/07/some-windows-active-directory-interview.html
Hi,
Does anyone know how I can allow a certain user to edit GP though the Group
Policy Management console? I can only seem to do it if I grant the user to be
a member of domain admins. (Using Win Server 2008 Ent R2).
Any info is appreciated. Many thanks.
Mehds
I have a Dell laptop running Windows 7.
For the last couple of days, I have been seeing a blue screen each
time I attempt to resume operating the laptop from a "Hibernate"
mode.
I see the following message displayed:
IRQL_NOT_LESS_THAN_OR_EQUAL
Unexpected Shutdown
Can anyone offer any guidance for resolving this issue?
Thanks in advance.
In a windows 2008 domain when i use adfind to query the
lastLogonTimestamp I get the results, but its in that tm format.
Command:
adfind -csv -b "dc=aaa,dc=domain,dc=net" -f
"&(objectcategory=persobjectclass=user)" lastLogonTimestamp
result
"CN=John
Doe,OU=ou1,OU=client,DC=aaa,DC=domain,DC=net","129046786635663532"
is there any way to get the results showing the time and date?
This is a multi-part message in MIME format.
------=mesnews_0_0702102221
Content-Type: text/plain; charset="iso-8859-15"
Content-Transfer-Encoding: quoted-printable
Hello,
(first, sorry if I make mistakes but I am not fluent ;-))
we have a strange behaviour and I dont understand why.
Here is the situation :
1. We have an old NT4 domain named MSNT and we have migrated (long
What is Happening?
This message is to inform you that Microsoft will soon begin discontinuing
newsgroups and transitioning users to Microsoft forums.
Why?
As you may know, newsgroups have existed for many years now; however, the
traffic in the Microsoft newsgroups has been steadily decreasing for the
past several years while customers and participants are increasingly finding
Hi,
I've just built a test lab which has our 2 x windows 2003 DC's in it. I
want to have a look at Windows 2008 AD so I was wondering is it best for me
to upgrade one of the test DC's to Windows 2008 or create a 3rd Windows 2008
member server and promote it?
Thanks
Hello,
We need to update what font our company uses in Office Apps etc, can a GP do
this?
Is there a way that a Group Policy Object can be backed up on a Server Core
machine? Like we do using GPMC in a full dc. Using Powershell?