Active Directory | Forum profile

Hello aconti, Any chance that you use RODC FAS(Filtered Attributes Set): http://technet.microsoft.com/en-us/l...59(WS.10).aspx Is that a self created group or one of the builtin's? Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >...

Glad to help. :-) -- Paul Bergson MVP - Directory Services MCTS, MCT, MCSE, MCSA, Security+, BS CSci 2008, 2003, 2000 (Early Achiever), NT4 Microsoft's Thrive IT Pro of the Month - June 2009 http://www.pbbergs.com Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. "Ace Fekay [MCT]"...

> On Nov 27, 5:23*am, "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> > wrote: >> Are you just restting via a vLAN change? *What happens when you do the >> command below from a command prompt? >> >> ipconfig /registerdns >> >> Is the client registering the ip address at the same dns server you are >>...

Howdie! The Alley Cat schrieb: > Next week I'm going to install a Windows Server 2008 R2 x64 ( > well...obviusly :-) no x86 version out there ) for a Root and Child > Domain Controllers in a 30 domains forest. I'll start with a new > configuration and since the number of domain controllers is very high, > we won't use a multidisk configuration. > I mean: the Disk Layout will be made up...

hume.spamfilter@bofh.ca wrote: > Aha! So, currently I'm subclassing inetOrgPerson... pretty arbitrary. If > I subClass top, I might push my custom class back and let user/inetOrgPerson > take precedence? No answer my own question, no, I can't do that. I have to inherit from inetOrgPerson as a structural or I mess up the inheritance chain and AD rejects the user object. So it looks like I'm down to my choice...

that's never worked for me, I always end up having to restart the DC in DSRM and then do the authoritative restore "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message news:OBckLTeaKHA.5852@TK2MSFTNGP05.phx.gbl... > Here are the recovery scenario's > > If you need to do a full database recovery then you need to boot into > DSRM, restore Active Directory, do an...

Hello I have just changed membership of a user and added it him to another group from the main DC however when I am trying to view the membership of the same user from an RODC it gives me this: Membershuo information for this object cannot be found in the global catalog. The RODC is set up as a GC and also the main DC. I have tried to use sites and services to try to replicate to the RODC but in vain. If I add a user on the main DC after a...

Wildcard characters are not allowed in DN attributes, like memberOf (assuming that's the purpose of the "*" character). If there are three OU's with groups of the same name, you can AND 3 clauses, each of which specifies the full DN of a group. If the DN value itself includes a "*" character, it must escaped by replacing it with "\2A".

On Nov 27, 5:23*am, "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote: > Are you just restting via a vLAN change? *What happens when you do the > command below from a command prompt? > > ipconfig /registerdns > > Is the client registering the ip address at the same dns server you are > looking at when you do your nslookup? > > -- > Paul...

Hello, I was just wondering how other make sure their DC's time is kept correct as ours over the months can drift ahead of itself so I change oen DC's time time to the correct time and "net time \\DCname" the others, very manual I know.