There are two exceptions to this rule: If there is only one domain in the forest, and if all DC's are Global Catalogues. "Mike B" <anonymous@discussions.microsoft.com> wrote in...

Hello everybody. I have a Windows 2003 AD up and running. It is a single domain model with 2 sites so far. The domain functional level is Windows 2000 mixed mode. In the first site I have a single...

When you "replaced" the old DC, did you run DCPROMO on it to remove it from the DC role? How much time did you give between running DCPROMO to create the new DC, and running DCPROMO on the one being...

You could use ADMT to migrate the users from one domain into the other, or also setup a cross-forest trust and may even be able to leave the users where they are. Though if the long-term goal is a...

Also, the KB 828297 hotfix contains newer binaries of lsass.exe than 827531, so if you're going to call in for download information for the hotfix, you might as well ask for the later...

Missed the original post, but if you're only going to have on Win2Kx DC and a few BDCs, you'll want to set the NT4Emulator and NuteralizeNT4Emulator registery keys on the machine while it is still...

In that case, I'd setup each of the locations as a seperate AD Site and consolidate into one Domain. As to if you want the users in seperate OUs, that would depend more on if there would be...

You could use the Windows 2000 version of AD Users & Computers from a Windows 2000 workstation/server. It doesn't know about the new benefits of the 2003 version, like the ability to easily move...

Press F8 as the system leaves the BIOS and before you see the Windows Server 2003 splash screen. John "ks" <anonymous@discussions.microsoft.com> wrote in...

One other situation where I've seen it setup is where an organization wanted to establish different password policies for different groups of users. A common example is a school, where the IT staff...

Running "gpresult /v" on a client machine as a user whose GPOs aren't quite applying as you were expecting would show you which GPOs were and weren't applying to that user & computer. If you don't...

Some of the settings applied to "Lockdown" users often need to be explicitally re-granted instead of just having the policy removed (or set to "not defined"). Create a GPO on some other OU that has...

(Standard disclaimers apply because I haven't actually done this, but this seems logical...) Join an NT4 BDC to the domain whose PDC is the Samba server. Install SP6a, and MS03-039 on the BDC,...

It looks like the user may be having problems accessing the file at: \\domain.com\sysvol\policies\{GUID} (or the user\...\gptmpl.inf file where the settings are stored inside the GUID folder) where...

Rob, If the drive letter does not change, I do not know why you would have this problem. One thing that you could do if you have another DC in your domain is to dcpromo down the DC with inadequate...

I wanted to move SYSVOL to another drive and was not clear on how to do that. Imoved NTDS just fine but can not find out how to move the SYSVOL directory to another location or I should say another...

In article <OEa7pWk2DHA.1764@TK2MSFTNGP10.phx.gbl>, Sam Munzani says... this depends on the services you already run in your environment - e.g. Exchange or Certificate Services are a no-go. Also a...

In article <269EFE69-66A1-4DB5-B71A-445E69B97188@microsoft.com>, =?Utf-8?B? REU=?= says... what I've heard from ADS it's really great. However I'm really sorry that I did not have any time/chance...

Reminder : Last chance to fill this survey today. thanks, Kannan C. Iyer Program Manager, Directory Services Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers...

The standard way to do it is: entry.Invoke("SetPassword", new Object {"newPassword"}); entry.CommitChanges(); Essentially, you are just calling the underlying IADsUser::SetPassword method via...