Search results for query: *

Next time start a new thread instead of resurrecting a thread that is over a year old.

First, start a new thread. Second, why do you need to reactivate your server? If you do, you will need all your license information. You should have your license info in a safe place anyway, for auditing purposes.

I think thats the problem. Every machine in the domain (XP, 2000, 2003) should have the ClientProtocols key and subsequent values in it. Right click on Rpc and do a new key. Call it ClientProtocols. Inside the new key, create five string values: Name: ncacn_http Type: REG_SZ Data...

Can you check to see if the 2000 machine has a HKLM\Software\Microsoft\Rpc\ClientProtocols registry key? And if so, let me know what values are in that key. On your CA, do you see anything in the pending request or failed request folders? What OS is the CA, and what type of CA is it...

They should be under HKLM\System\CCS\services\w32time\parameters. The article is correct. You can run w32tm /dumpreg /subkey:parameters to view them. It also seems like you are trying to treat the symptom and not the actual problem. If your servers are frequently getting out of sync with...

That is not autoenrollment. That is Automatic Certificate Request: http://www.microsoft.com/windows2000/techinfo/planning/security/autocertsteps.asp Two very different things. Autoenrollment requires 2003/XP clients and a 2003 Enterprise (not standard) CA. Let me know what the GPO...

How are you doing the cert request? Autoenrollment or automatic certificate request? Only XP and 2003 machines support autoenrollment.

You don't need to stop and start w32time on 2003. Just run w32tm /config /update when you make changes.

dcdiag will show who holds the PDCe role. You can also run 'netdom query fsmo', but you need to install the support tools to get netmon.

The firewall shouldn't be on if you do an install of SP1 on a 2003 RTM machine. The only time the firewall is activated is when you do a clean, slipstreamed install of 2003 SP1, or when you upgrade from NT to 2003 SP1. You mentioned it can't be accessed from the outside...does that mean you...

Check out this article on maxtokensize: http://support.microsoft.com/?kbid=327825

Is the account you are using to join a member of a lot of groups?

Also note that version two certificates can only be issued by CAs running 2003 Enterprise or Datacenter.

Making users administrators of their machines is a very bad idea. It's a great way to spread malware and cause general mayhem with your network. Your network should operate under the rule of least privilege. Users should have only the permissions that they need to do their work. General...

Disable the license logging service. This service (and the license manager it controls) is buggy and unnecessary. As long as you have the physical proof that you have enough licenses, you're fine. No auditor will ever look at the license manager. The license logging service is disabled by...

DNS? How is DNS set up? Is the new DC pointing to the old DC for DNS?

It's tough to say. It depends entirely on what applications you have installed. Generally it is not a good idea to configure your mail server as a multi-user terminal server. Those roles should be separated.

If you map a drive using the command above, you don't need to create an identical account on the MCE machine. I would suggest setting the share permissions to Everyone:full, and then ACL the file permissions so that this domain user has read (or whatever permissions you want to give that...

net share will show you the shares on a machine. Subinacl can display permissions for shares (among other things). subinacl /share sharename /display=dacl

Actually time in Active Directory is pretty simple. You just need to configure the PDC emulator in the root domain to sync with an external source. All other domain controllers, member servers and workstations that join any domain will be automatically configured to sync with the AD hierarchy...