I would like to create a group that can fully adminstrate our AD forest but is NOT a
member of domain admins. How do I get started?
I created a group and added the members (groupa).
I then added GroupA to the local administrators group on each server.
I also Delegated GroupA full control of
ios name. Same thing with the domain name in Client for
windows networks.
-Original Message-
From: Lori Demkovich [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 01, 2002 11:30 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir]
earch order. It seems to only happen on my RAS
server and on some remote sites which is the interesting thing, but definitely only
happens on 98 machines.
-Original Message-
From: Lori Demkovich [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 01, 20
Hi all, we have upgraded to Win2k SP3 and have dsclient on all our 9.x machines. We
started the upgrade on the original PDC and then migrated the fsmo roles to two
spanking new win2k DCs. DNS and WINS are great, Netdiag clean, dcdiag clean.
However, when clients log in, they get the "domain
results
Any errors in the logs?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Lori Demkovich
Sent: Thursday, September 19, 2002 11:14
To: [EMAIL PROTECTED]
Subject
Never mind someone had a trust for the domain itself listed... how weird is that?
-Original Message-
From: Lori Demkovich
Sent: Thu 9/19/2002 11:13 AM
To: [EMAIL PROTECTED]
Cc:
Subject: [ActiveDir] netdiag results
I ran Netdiag and the trust relationship test failed. It said,
Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'domainname' is correct.
[FATAL] Secure channel to domain 'domainname' is broken. [ERROR_NO_LOGON_SERVERS]
I've looked on Technet and can'
Does anyone have a handle on the going hourly rate of an engineer that specializes in
Intellimirror/packaging and mass deployments? Greatly appreciated,
Lori
Ëbú!¶Úÿ 0iËb½çb®àþf¢X¬¶f.+-!¶Úÿ 0iËb½çb®àþX¬µöªÙËZÈb½èm¶ÿÃ
&j)ZÈb½ç(ö¶+Þv*øÒf¢§-÷º+
Has anyone created a batch file for adding/removing AD accounts AND their E2K mailbox?
Thanks,
Lori
â²Ø§~m¶ÿà rدyØ«¢¸?¨¥+-ÙËEm¶ÿà rدyØ«¢¸?+-}ª¡¶bâ²Ö«r¯zm§ÿðÃ
V«r¯yÊ&ý§-÷¾4¨¥iËb½çb®à
We are in the planning stages for implementing an AD forest with a root and a
subdomain. We would like to have the root domain be responsible for managing both
zones. root.com and ad.root.com. The DCs in ad.root.com domain will point to the
servers in the root for DNS resolution. OK we are
Cindy, what you need is the Exchange 2000 Internals Installation and Setup Guide,
which I"ll send to you in a separate email if you wish. (But I think it is also on the
Technet CD) Its an excellent doc. Essentially, you'll do the following:
1. Install the ADC
2. Run /Forestprep
3. Run /d
yes
-Original Message-
From: Lori Demkovich [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 17, 2002 10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] /3GB switch
does this apply to all user mode ap
is not allocated to user mode apps. If Store.exe runs out of addressable
space, you would have to restart the service. So without it...you would not
be getting the additional RAM for Exchange.
-Original Message-
From: Lori Demkovich [mai
We have several multi-processor win2k member servers with 4GB of memory. (mail
servers) Because they are standard server, I know that I shouldn't use the /3GB
switch in the boot.ini. Can anyone explain to me why I should upgrade to advanced
server? Am I not getting the full value of the 4GBs
Tony
www.activedir.org
-Original Message-
From: Lori Demkovich [mailto:[EMAIL PROTECTED]]
Sent: Freitag, 17. Mai 2002 03:00
To: [EMAIL PROTECTED]
Subject: [ActiveDir] dsclient and NT 4.0 works
Group,
What are the benefits to deploying dsclient to 4.0 workstations and servers? Thanks
in advance,
LCD
.+-wèÛiÿü0Á§-÷º+ùYb²Øm¸¬´PÛiÿü0Á§-÷º+ùb²×Úªf.+-j·!÷¡¶Úÿ
0¨¥j·!÷¢oÚrدyØ«ãIV¶+Þv*è®
Would anyone know what, if any, the impact of installing the DSclient on win9x
machines would be PRIOR to AD deployment as a pre-migration task?
LCD
â²Ø§~m¶ÿà rدyØ«¢¸?¨¥+-ÙËEm¶ÿà rدyØ«¢¸?+-}ª¡¶bâ²Ö«r¯zm§ÿðÃ
V«r¯yÊ&ý§-÷¾4¨¥iËb½çb®à
A contact is just a forwarder - not a mailbox. It does not have a local mailbox to
open.
LCD
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Fri 5/3/2002 12:19 AM
To: [EMAIL PROTECTED]
Cc:
Subjec
r you are logging
them into a local account instead of the domain account.
Chris Green
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Lori Demkovich
Sent: Friday, March 22, 2002 3:
Can anyone help me with this one?
Another one of those W2K problems that has to be something we are
> overlooking.
>
> Converted an existing user who was on a Mac to a W2k PC. No other
> changes. They already had a login.bat in their profile from the
> conversion.
>
> When I log in as t
Dummy me - I was working my way thru email - going bottom up - so I didn't see that
you had a resolution. This was a good thread. - anyway you got your answer re: RPC
and DNS as well. Outlook uses RPC to communicate with the exchange server.
LCD
-Original Message-
Andy, what version of Outlook are you running?
-Original Message-
From: Andy Ward (GCS) [mailto:[EMAIL PROTECTED]]
Sent: Wed 1/16/2002 7:28 PM
To: [EMAIL PROTECTED]
Cc:
Subject: [ActiveDir] RPC Server weird error
I concur. If the sysvol directory is shared and you are not seeing replication errors
in the event logs, I wouldn't worry about it. Run Netdiag /v /l >c:\netdiag.txt to
get a more thorough diagnostic on the success of your install. BTW, I haven't seen
the event log/dcdiag report correlation.
Common complaint. Microsoft suggests using a separate profile for internet email
accounts. Yes inconvenient. (effectively: Go to Outlook properties and select
"prompt for profile"; then create a new profile just for internet mail accounts)
Remove the personal folders from your profile tha
My client has successfully upgrade to win2k and are in native mode BUT, all NEW users,
that get assigned a Windows 98 PC, get "user not found" almost immediately. After
several tries, the exchange server will authenticate the user. (domain info in a
minute). This same user can go to a Window
rejoin the domain? - joining the domain.xxx -
LCD
-Original Message-
From: Barneaud, Christophe
Sent: Mon 12/17/2001 9:58 AM
To: '[EMAIL PROTECTED]'
Cc:
Subject:[ActiveDir] NetBios Domain Name and DNS suffix domain
name
I am setting up a pilot Active Directory sy
box that I was
trying
to promote was bad. It needs to talk the DNS box the has the SRV
records
for the current Win2K DC
Diane
-----Original Message-
From: Lori Demkovich [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 11:32 AM
To: '[EMAIL PROTECTED] '
Cc: Jeremy Mosko
Hey all I have a good problem. We recently upgraded our domain from NT 4.0
SP6a to Windows 2000 SP2. The migration of the PDC went well, no event
errors, no dns errors, all our trusts are still functioning, users logon,
execute their logon script ect... All DNS and AD tests such as nltest,
dcdia
I vote for demoting it. Excellent recommendation.
[EMAIL PROTECTED]
-Original Message-
From: Barber, Tom
To: [EMAIL PROTECTED]
Sent: 8/14/01 10:43 AM
Subject: RE: [ActiveDir] Offline Domain Controller
As long as you don't change the other Domain Controllers (ie re-install
W2K), I don'
Somchai, this is almost always an IP property problem on the client. I
have never used the dsclient but am inclined to advise you to uninstall it
just until you have proven connectivity without it. You do not need it for
basic connectivity to the AD. Anyway, my advice:
(this assumes you are r
Yes, there is also a Microsoft Technet article on exactly how to do this.
(Install E2K in a child domain that is.)
Lori
-Original Message-
From: Tony Murray
To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
Sent: 6/27/01 3:14 AM
Subject: Re: [ActiveDir] Exchange 2000 and AD
Hi Stefan
I belie
31 matches
Mail list logo
