Search results for query: *

What's the exact event number, Source and description of the error in the eventlog?

Have you tried running dcdiag /s:<dcname> /test:RegisterInDNS ? If the server has any problems registering in DNS this command will let you know. Regards, MJanssen

Hi, Sorry my mistake i copied the wrong link. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03mngd/26_s3wts.mspx That's the link i wanted to copy into the post. This is probably the same link you found. If you look at the 2nd table in the article...

Hi, This sounds like you haven't set the DNS servers in the TCP/IP settings of the servers. Every server in an AD environment needs to point to a DNS server for registration and name resolving. Because the DC is also the DNS server you can use the server's Ip-adress to point to itself for name...

Hi, Have a look at the display properties (in the terminal session.. not the local display settings). It's probably the screensaver option that locks the screen after being idle for 2 min. or more. If these screen saver options are on but you cannot change them they are probably part of a GPO...

Hi, I assume that the w2k3 utility you use is the built-in time service (w32time) that comes with w2k3. By default w32time should update once every 8 hours. Here's a link on how you can configure w32time. http://support.microsoft.com/default.aspx?scid=kb;en-us;223184 Hope this helps...

Hi, You can split up a class C network into 4 subnets (1 per AD site)of 64 addresses of which 62 are usable.. you'll end up with a subnet mask of 255.255.255.192 http://www.weird.com/~woods/classc.html regards

Try adding the dns suffix for the domain you want to browse in the DNS tab of the tcp/ip settings. (on the clients) regards,

Hi, I don't know if your hardware supports it but maybe you can use something like "wake on lan" to run maintenance scripts. regards, MJanssen

Hi, Thanx for the reply... Yes, I've seen this article before... It's definitely an option if you wanted to regulate queries on a domain or site level. The ideal situation would be that you could link a securitygroup/users to that policy with rights to do large queries on AD. That way anybody...

Hi, More and more applications are able to use LDAP queries to retrieve information from Active Directy and use this info for the application.. In principle this is a good thing but.... At the moment we're experiencing performance issues (response times of DC's)because of applications running...

Maybe using Software restriction policies is an option. Have a look at these links: http://www.windowsnetworking.com/articles_tutorials/Software-Restriction-Policies.html www.virusbtn.com/files/johnlambert_vb2002.pdf http://support.microsoft.com/default.aspx?scid=kb;en-us;324036 Hope this...

You've got 2 ways of fixing this. 1. restoring the failed DC to it's last known functioning state using backup media and do nothing else 2. seizing all the FSMO roles to the 2nd DC and cleanup all metadata of the failed DC in AD. After you've done this don't restore the failed DC to it's...

Hi, I'm not sure if I understand the question but... Normally the KCC will check the replication topology at regular intervalls but it will only make a new connection when things have changed. An example of a change could be the failure of a WAN connection or the creation of a new site. ...And...

Hi, Yes, AD would restore replication when the connection comes back on-line. Just make sure you keep the down-time as short as possible. Depending on the amount of object/attribute changes in your AD, A long downtime could result in replication conflicts or even data loss. Running DCPromo will...

Hi, I forgot to mention.. in this case you might be better of tweaking the cost of the different sitelink objects. regards, MJanssen

Hi, Your interpretation is correct. In the URL below you can see how to disable the KCC from making new connections. http://support.microsoft.com/kb/242780/ There's one if... by disabling the KCC from making new connections you lose an important piece of Active Directory redundancy. In other...

Hi, Where having problems with kerberos authentication in Windows 2003(AD). The problem is that in some cases the UDP request is too large to fit in one packet. The result is that the fragmented UDP packets are dropped by our network equipment. MS says there are two ways of solving this. 1...

Hi, I'm looking for a tool that is able to do on-line restores of AD objects/Attributes as well as the entire AD Database. The built-in tooling (ntdsutil) is just not flexible enough. Any ideas? Thanx, M.Janssen

I'm looking for a tool that is capable of on-line restores of individual Active Directory objects, attributes, GPO's. (With on-line I mean without having to reboot into recovery mode). Thanks in advance...