Light

hello, i am  one of lucky people got hit navy time  server blunder of 11/19. in domain(server 2003)  the pdc not affected dc was........ what  gather..this server "time jumped" , assigned giant time offest value........ in end  happened server "tombstoned"   (according microsoft tech support)  in research, mentiond there way protect server having time jumbled ..... 1 of remedialtion steps said apply " somthing"    ?   dont know what... ensure clock not offest (or thing effect) .....anyone know guard against  this happening ?  fiasco when tombstoned server running entire domain dyfunctional; many frs  , kerberos errors  , spnego stuff...... nightmare http://support.microsoft.com/kb/884776/en-us is you're looking for? Windows Server  >  Windows Server

i have 2 2012r2 hyper-v hosts. on 1 of hosts, have no options set uefi boot order, either on existing virtual machines, or on new ones. on other host, options available. have series of powershell commands run create gen 2 vm.  here output hyper-v host: here's output bad host: i unable add boot entries, or modify: set-vmfirmware : operation not available. so, wrong particular hyper-v host, don't know troubleshoot - ideas? i removed hyper-v role completely, rebooted, re-added again , rebooted, , options there. wish didn't have that, fresh server build. Windows Server  >  Hyper-V

all, been trying track down why static dns entry in ad integrated dns zone keeps being deleted "system". the entry 2nd of 2 dc's. not fsmo role holder. if drill down adsiedit microsoft dns zones (cn=microsoftdns), find record in question , open propertires, see has been marked dnstombstoned true.   as long stays true, delete entry , that, however, if change attribute false, manually create a new dns entry, attribute gets changed true , record again gets deleted. below actual security log event viewer (edited bit) logged after dns ad object has been deleted. my question is, how troubleshoot/figure out why system keeps deleting dns entry??? thanks input.       -joe  a directory service object deleted. subject: security id: system account name: system account domain: nt authority logon id: 0xb713de directory service: name: domain.com type: active directory domain services object: dn: dc=domain-dc1,dc=domain.com,cn=microsoftdns,dc=

hi all i build vdi server hp dl 380 g9 2 xeon proc 128 go ram nvidia grid k2 grpahic card remote fx installed, when adding remotefx graphic adapter on windows 8.1 vdi (host) graphic experience when connecting host poor (for exemple firefox showing lines on button, can't enter url, show multiple times same image) windows move lag, excel scrolling lags, ... without remote fx problems disapears i add windows 7 enterprise collection, add remote fx graphic cards , ok ! so i'm sure issue windows 8.1, there special do thanks lot who'll read message , help arnaud hi arnaud, what's operating system rd virtualization server running on? best regards, amy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server  > 

hello, working exchange 2010 sp1 (ur6) let's have 10-distribution groups, need search dgs see if belongs of dgs? can done powershell script? thanks, this should help: $name = 'joe blogs' foreach ($group in ('group1', 'group2')) { if ((get-distributiongroupmember $group | select -exp name) -contains $name) { write-host "$name member of $group" } } grant ward, a.k.a. bigteddy what's new in powershell 3.0 (technet wiki) Windows Server  >  Windows PowerShell

this setting pki, enables support pkcs #1 v2.1 signature format certificate requests.  suggest property additive , in no way affects other signature algorithms. understanding allow increasing number of algorithms (hash , signature) in cryptography next generation (cng).  1.  current or upcoming technologies used for?  implement pki , wondering why should or should not use it.  2.  additive only.  in other words, of machines either windows or linux- want make sure not limit or make certificate incompatible hosts or applications. in essence, looking why (or why not) should enable feature go beyond acronyms pkcs (or cng) mean little me. i recommend not using alternate signature algorithm if deploying rsa signature sha# variant. use if deploying elliptical curve or other advanced algorithms. there many clients not support pkcs#1 v2.1 signature (windows xp, windows server 2003) , phrase not support means not @ (cannot trust root certificate, never mind enroll certificates).

anyone if there way align spanned volume. have 3 hard drives , need create spanned volume , propery align it. hi,   please have @ article:   create spanned volume http://technet.microsoft.com/en-us/library/cc772180.aspx   hope helps.   regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Management

hi all having problem in copying recent folder local remote pc using net use. here code      $local = "c:\projects\deployments\" ;      $path = "\\myip\deployments";      $recent =  get-childitem -path $local | sort-object -property lastwritetime | select-object -last 1      net use b: $path  /user:username password  copy-item -path $recent  -destination "b:\" -recurse -force     above script works perfect if take out $recent line , if specify exact folder name in $local           e.g  $local = "c:\projects\deployments\2014-10-13" ; getting strange error when run script, directory running script tries in folder recent folder needs copying. i sorted out, have write copy-item -path $recent.fullname  Windows Server  >  Windows PowerSh

every time i apply a group policy has preferences defined within following warning  log name:      application source:        group policy local users , groups date:          10/1/2008 10:06:47 am event id:      4099 task category: (2) level:         warning keywords:      classic user:          system computer:      dc01.domain.loc description: the client-side extension not log rsop data because failed error code '0x8004401e <unknown-message-text>'. event xml: <event xmlns=" http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provider name="group policy local users , groups" />     <eventid qualifiers="34305">4099</eventid>     <level>3</level>     <task>2</task>     <keywords>0x80000000000000</keywords>     <timecreated systemtime="2008-10-01t15:06:47.000z" />     <eventrecordid>939</eventrecordid>     <channel>applicatio

i have task change primary dns suffice from eu.example.com uk.eu.example.com if change manually in: system propretis -> computer name -> change -> more -> primary dns suffix on computer. it works fine , good. however need on few machines, thought gpo it. however gpo computer configuration -> admin templates -> network -> dns client -> primary dns suffix does diffrent, change nds suffix, change dont reflect in same gui manual change , can seen in ipconfig /all (but nevermind that), the problem after reboot falls of domain giving: the security database on server not have computer account workstation trust relationship and way fix found go machine, login local admin, remove , readd machine domain. is there way change primary dns suffix without machions losing domain trust ? hi vladimir2989, you can use policy setting prevent users, including local administrators, changing primary dns suffix. by default, primary dns suffix por

hi, i preferably want set policy on ou contains users only. i'd prevent users logging on workstations still allow them authenticate web application. unfortunately computer policy prevent interactive logon isn't viable can apply policy users. ideas on policy or solution? thanks correct - through browser right. when users use web browser, why want restrict access on external domain ? presume, in scenario, users using the browser and supplying their credentials log on external web service or website, don't see security risk on here. if external domain in use other users what's stop web users logging on other domain?  nothing -  you can expect if these accounts suppose website there's no policies etc. apart default/password policies/none @ all also passwords never expire website - they'll never able change passwords don't log in. so you'll have people able log in workstations on domain, non-expiring passwords little-to-n

hello i have installed dns server on win server 2012 i have setup domain follows: name type data (same parent folder) start of authority (soa) [7], se34accu7023.mautechconsulting.com., hostmaster.mautechconsulting.com. (same parent folder) name server (ns) ns2.mautechconsulting.com. (same parent folder) name server (ns) se34accu7023.mautechconsulting.com. (same parent folder) name server (ns) ns1.mautechconsulting.com. (same parent folder) host (a) 192.82.250.91 ns1 host (a) 192.82.250.91 ns2 host (a) 192.82.250.91 se34accu7023 host (a) 192.82.250.91 se34accu7023 ipv6 host (aaaa) 2002:c052:fa5b:0000:0000:0000:c052:fa5b www host (a) 192.82.250.91 (same parent folder) mail exchanger (mx) [10]  mail.mautechconsulting.com webmail host (a) 192.82.250.91 mail host (a) 192.82.250.91 i able send email mail software (i have tried 2 of them mailenable , smartermail) mail sending working correctly, not receiving email. is there issue dns config? thanks he

p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px helvetica} p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px helvetica; min-height: 14.0px} i having odd problem drives mapping on w2k8r2 server.   randomly drives become unavailable users remote on server itself.  server has 35 rdp users , no actual pc clients.  drives being mapped, on rdp server.  here layout:   \\server1 - pdc, dns, dhcp.  win2k8r2 xxx.xxx.xxx.150 \\server2 - rdp win2k8r2  xxx.xxx.xxx.155 \\server3 - virtual server 32 bit apps not compatible - win2k8 32 bit xxx.xxx.xxx.160   all 35 users log server2.  server 24/7 , in use 24 hours day between users in , offshore.  users 35, 10 off shore on night.   there 5 drive mappings setup via policy   f: \\server1 - ftp drop box m:, r:, q:, , p: - data shares on server2 off of local d: drive.   server2 has 2 raid arrays, 2nd array d: , shares live.  users log 155 , drive maps 155.  drive mappings show error cannot connect them, red x on drive. 

here's situation: user1 creates new word 2010 document , saves mapped network drive via webdav.  user2 opens document through mapped network drive via webdav, edits document, , saves it.  user2's edited document saved webdav server , appears on server having replaced user1's document.  when user1 attempts open user2 edited version of document, "details" show user2's edit information, word 2010 opens document last saved user1.   if user1 downloads document directly webdav server , saves user2 edited version desktop, opening direct download document opens in word last version saved user1.   causing this? hi, what version of operating system using? if problem affect specific user, please save document common network shared folder test issue. in office 2010: click file -> options-> trust center-> trust center settings. clear protected view. widows explorer : click 1 of following: tools -> folder optio

hi, i've powershell script consists of custom cmdlets stored in powershell profiles. i made batch file invoke script this: powershell.exe c:\myscript.ps1 -remotemachineslist abc123,abc456 -testserver xxx.xxx.xx.xxx -testversion 3.7 when run batch file normally(by double clicking), script runs identifying custom cmdlets used in script. but when invoke same via windows service, batch file invoked, in turn launches powershell script , says term not recognized name of cmdlet, funtion, script file,..... , closes window. i'm able see gui because i'm calling cmd.exe application using 'startprocessandbypassuac' in windows service. what's difference makes here not identifying custom cmdlets ? can see both ways opens cmds , powershell windows in admin mode itself. please . thanks in advance, /aravind  if there noprofile need specify explicitly in script includint location of modules want load. services not load profiles.   do.  contact service vend

does know if using group policy prefrences ie9 option new admx files server 2012? i know there's hotfix when using previous admx files didn't cover options in ie9. thanks in advance. hi, please understand windows server 2012 gpp support ie9 default. deploy gpp settings ie9 via gpp without installing other hotfix. if want enable gpp support ie9 in windows server 2008, please refer kb article have posted. in addition, following article may useful. how enable group policy preferences support ie9 http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/ best regards, andy qi technet subscriber support if technet subscription user , have feedback on our support quality, please send feedback here . andy qi technet community support Windows Server  > 

dear all, i have windows 2012 r2 fle server clustered. disks clustered disk all disks in mbr format one of disk needs extended beyond 2 tb i want know best approach convert clustered disk gpt mbr i have heard gptgen , not sure how reliable it, how can use diskpart in case i want retain data , convert gpt if possible hi vgahod, the diskpart command can achieve goal following steps. step 1: click "start", , input "diskpart" in search box. step 2: input "list disk", , select mbr disk want convert typing "select disk x" (x number of mbr disk) step 3: input "list partition", , select existing partitions , delete of them typing "delete partition x" command. step 4: : input "convert gpt". but far know, diskpart command can realize conversion between mbr , gpt great data loss. suggest backup data first. https://social.technet.microsoft.com/forums/en-us/8ea4ef68-1a6b-491c-9d68-29666a19f892/how-to-co

dear all, i managing set of servers within organization manage users performing rdp (several simple users , admins) , associate logons each of them can perform rdp specific machines. limit credential sharing among users. any ideas? thank in advance ak achilleas hi. can use restricted groups gpo setting add group containing users , admins remote desktop users group on machines. article explains pretty - http://www.vkernel.ro/blog/add-domain-users-to-local-remote-desktop-users-group-using-group-policy. hope helps. Windows Server  >  Management

hi, i setup vpn @ 1 of office virtual server. assigned public ip address , tried connect via pptp under ms-chapv2 authentication method. generates error 812 browse lot , double check on server both authentication same. disable network policy same error. please let me know missing thing took lot of time.  thanks jibran ishtiaq hi, check properties of user account used connect vpn server, , see if allow access is selected in dial-in tab network access permission column. if problem occurred @ beginning of completing vpn setting, suggest reference link check settings of vpn: checklist: installing , configuring pptp server http://technet.microsoft.com/en-us/library/cc776327(v=ws.10).aspx if problem still exits, helpful if may provide more information vpn deployment, tcp/ip configuration, device included, etc. best regards, eve wang please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft

buen dia. resulta que deshabilite la intefaz de mi windows server 2012 y ahora que deseo habilitarla me es imposible ingresar powershell para ejecutar los comandos necesarios. agradezco su colaboración. hi, i suggest refer below helpful links: from server core gui to… minshell http://blogs.technet.com/b/canitpro/archive/2012/10/02/from-server-core-to-gui-to-minshell.aspx switch between full , server core in windows server 2012 using powershell 3.0 http://blogs.technet.com/b/puneetvig/archive/2012/10/16/switch-between-full-and-core-in-windows-server-2012-using-powershell-3-0.aspx how turn gui off , on in windows server 2012 regards, yan li cataleya li technet community support Windows Server  >  Windows Server 2012 General

hey all, newbie gp here - familiar basic aspects of active directory here's scenario: i'm running microsoft windows server 2003, ad 5.2.  company work has ~250 computers, , logon access these machines controlled on individual basis via account>log on tab each user in active directory.  however, have dozen loaner-laptops that changing hands.  is possible set group policy these machines allow logon registered in domain (or in particular user group) rather having add machines each user's account (which pain , waste of time)?  know can administer kind of user/admin rights person has on computer through gp, can administer logon rights themselves?  if so, where? if set user account can logon single computer, gpo machines not change this. this not work users own rights block them logging on machines. (as have restrcited user logon machine x) your setup sounds admin heavy, there reason behind preventing staff moving machine?

we have old server 2003 file server named 'storage' ip address of x.x.10.12.  set new server 2008 r2 file server , gave unique name , unique ip address. i copied shared data on new server , changed name of old server storage1. changed storage1 ip x.x.10.9. i named new file server 'storage' , gave ip address of x.x.10.12. after making sure ping new hostname , ip address , share still mapped users, happy thereafter noticed ip hostname had changed on ping x.x.10.9. went dns , noticed there 2 entries named 'storage', 1 10.9 ip , 1 10.12 ip , users had access , didnt. removed incorrect entry (storage 10.9)from primary dns , propogated secondary , stabilised few hours later problem resurfaced there 2 records in dns storage ip addresses of both servers. another person unplugged 2 network cables old file server (storage1 x.x.10.9) , within few minutes whole company unable access shares on storage x.x.10.12. both servers became slow , unresponsive , started h

deleted sound computer windows xp. how fix this. need help these ones may help. http://support.microsoft.com/kb/978788 http://support.microsoft.com/kb/900871 (same steps sp3) also heed warning here http://support.microsoft.com/kb/950722       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum

is possible machine connected , joined in domain network got name changed itself, if domain admin deleting other machines manually in ad? >>>n ame changed itself no >> a domain admin deleting other machines manually in ad? what mean this? santhosh sivarajan | houston, tx | www.sivarajan.com itil,mcitp,mcts,mcse (w2k3/w2k/nt4),mcsa(w2k3/w2k/msg),network+,ccna windows server 2012 book - migrating 2008 windows server 2012 blogs: blogs twitter: twitter linkedin: linkedin facebook: facebook microsoft virtual academy: microsoft virtual academy posting provided no warranties, , confers no rights. Windows Server  >  Directory Services

hi, hope can i'm struggling work out happening. we have existing group policy sets screensaver come on after 5 minutes of inactivity, works great. have noticed users don't lock computers when step away , therefore decided set password protect screensaver option in group policy. set caused backlash users complained happened soon, decided extend screensaver 10 minutes. screensaver still activates after 5 minutes. if remove password protect screensaver part of policy wait 10 minutes part enabled reverts 5 minutes. test disabled prevent changing screensaver part see settings showed on screensaver options in windows 7 , shows correct. 10 minutes whether password protect part enabled or not. is normal behaviour? hope makes sense , hope can assist. have done usual of gpupdate /force , full reboots nothing seems make policy apply how want to. as per testing, “prevent changing screensaver” policy setting has no effect on this. try run “gpresult /h c:\result.html”  on f

hi, i have server 2003, if i create 10 users  and  we use server only for file sharing documents (shared folder) (in workgrup), need 10 cals ?, or if create 1 user on server , 10 computers connect server same user name, watch shared folder. need cals ? thanks hello, you have user cals or device cals. 1 user 1 cal or 1 device 1 cal, in case 10 users connecting server , using 10 machines number 10. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Windows Server General Forum

server 2012 dc, desktops 8.1. deployed 2 server using ad. both hp, 1 3 years old, 1 brand new, both wirelessly connected printers. initial deployment went perfectly.  both printers seen server, drivers installed, test print server worked.  clients received printers correctly, clients print both printers.  best invention since sliced bread. come in yesterday , 1 printer shows on clients (old printer).  new printer not available on clients. server still has printer active , can print test pages server no problem. group policy still shows server deployed printer in gpmc. no gp errors on server or client.  in fact client shows gp processing successful. group policy modeling shows 100% successful model. most recent server changes ms patches (most recent) applied last wednesday.  printers fine after reboot update. hi, >>come in yesterday , 1 printer shows on clients (old printer).  new printer not available on clients. how did deploy new printer clients,

receiving error on ad ds file replication service has detected enabled disk write cache on drive containing directory c:\windows\ntfrs\jet on computer vandc01. file replication service might not recover when power drive what mean can fix checked folder , size of ntfrs.jdb 12,296 mb hi, according error message, seems suffering event 13512. event logged informational purposes. when event logged, system administrator aware frs database may damaged if power drive lost. if enable write caching feature , if there provisions power loss (such uninterruptible power supply [ups] attached computer, hard disks, or drive controller), frs database may not damaged because frs not turn off write caching. please see details from: event 13512 logged on domain controller https://support.microsoft.com/en-sg/kb/316504 best regards, wendy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@micros

hi,   could please explain me wan ip mapping means? thanks in advance nikul hi nikul,   thanks posting here.   i assume referring address mappings feature in nat scenario , correct ? if , can explication “nat processes , interactions” session in article below in order better understanding.   how nat works http://technet.microsoft.com/en-us/library/cc756722(ws.10).aspx#w2k3tr_nat_how_rlsm   thanks.   tiger li please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Network Access Protection

can me buying smart card windows sc logon. don't know smart cards supported. there explanation needs support minidriver or microsoft csp . there no compatibility list, technical documents how works. where can find supported lists of smart card models , manufactures? is sle cards supported? i found gemalto .net card recommended...  hi, i dont think such list exists microsoft. idea behind base smart card driver is api , hardware vendors can make products compatible. , developed gemalto, that's why see gemalto cards mentioned in lot of documents.  the minidriver specification undergoing evolutionary process - see http://msdn.microsoft.com/en-us/library/windows/hardware/dn631754(v=vs.85).aspx. i prefer gemalto cards , have experience aladdin cards (now safenet). hope helps, lutz Windows Server  > 

hello! i have few questions rds cal per user licensing , cannot find strict answer how should be. how rds cal per user license usage looks like? should every physical user have own rds cal license or maybe every rds account should have rds cal license? what if have example 2 physical users, , have 1 rds account, , both using same rds account not in same time. should have 2 rds cal licenses or 1? how situation looks when have 2 physical users 2 rds accounts 1 of them quit company. need buy new rds cal license new physical user or new user can license of user quit? how situation looks non rds licenses, cal license remote desktop. example want use remote desktop connect server administration things. need rds cal or normal cal enough? other users? don't need rd service remote desktop. can just use remote desktop cal or have buy rds cal? best regards. hi, for rda user cals, each physical user needs rds cal. 2 physical users 1 rds account: need 2 rds cals if connect rds

hi  i have 5 user cal came along dell power edge win server 2008 r2 2 user able access server out of 5 . use work first 90 days 3 not working . please help  thanks in advance i guess mean remote desktop services feature? (that's feature limited two, know of) sounds haven't installed rds cals? this documentation should help: http://technet.microsoft.com/en-us/library/ff710503(v=ws.10).aspx the dedicated rds forum here: http://social.technet.microsoft.com/forums/en-us/home?forum=winserverts if purchased server 5 user (windows server) cals, not entitle use rds 5 users, because rds cals different (additional) from windows cals. http://www.microsoft.com/licensing/about-licensing/briefs/cal-add.aspx don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!) W

hello have book spent 6 months going through when doing networking course. book mcse guide managing microsoft windows server 2003 environment, enhanced . wouldn't got perfect marks in end of year test though, i'll need review texts. also, suggestions of books/videos/websites/articles study in order prepare 70-270 exam . in advance studying material suggestions, panarchy hi, look @ these web link, http://www.selfstudystore.com/microsoft-office/online-word-xp-training-video-course.htm good luck... system support specialist Windows Server  >  Windows Server General Forum

hello, i have windows server 2008 r2 server, ad installed , working that has been running year now, has been going great. untill today. i have had several users tell me no longer have thier shared drives server.  after checking, appears login script (that has been there since day one) asking user name , password reguardless logs in pc. odd thing tho, can browse unc path, , access shares fine way. make sure there wasn't issue login script, tried map drive command line, got same thing. does know why happening, , how can fix it?? my clients running winxp sp3 tia drew you can use gpp map drivers instead of net use command: http://blogs.technet.com/b/askds/archive/2009/01/07/using-group-policy-preferences-to-map-drives-based-on-group-membership.aspx this posting provided "as is" no warranties or guarantees , , confers no rights.       microsoft student partner 2010 / 2011 microsoft certified professional microsoft certified systems admini

i´m having performance problems when configuring new iscsi environment.  in desesperated effort find cause of problem, i´m using wireshark capture traffic, , check packages.  i´m seeing lot of packages header checksum errors... 0x0000 [incorrect, should 0xfe79] i´m seeing lot of packages [tcp acked lost segment] iscsi-target > 49152 [ack] seq=229  ones i´m suspecting wireshark isn´t capable of capturing packages, it´s missing some, end displaying errors.  checksum errors, shouldn´t happen..  any ideas of should be, or do, or troubleshoot steps ?  thanks in advance.  luiz a. camilo network administrator hi,  actually i´m currenctly in contact storage manufacturer, month, hasn´t solved problem.  correcting information, yes, there errors storage server, they're re-transmission packages. filtering , analysing package capture, , crc errors server storage.  firs using windows server 2008 r2 enterprise ver: 6.1 (build 7600).  created lun on storage, , instal

i seeing issue have users roaming profiles logging terminal services on windows 2003 server citrix , not holding settings when log off paticularly ie homepage setting. user login server desktop loads profile network share open ie change homepage setting log out log in , setting was. happening several users. have tested have access share profiles stored. has me stumped why setting keeps changing. if have ideas on can @ may causing great!! thanks, bill the issue resolved not profile issue not being able save url. there local policy set setting homepage. thanks! Windows Server  >  Windows Server General Forum

hi. i have audit success event says: ------------------------------------------- a user account locked out. subject: security id: system account name: vsdcv001$ account domain: vs logon id: 0x3e7 account locked out: security id: vs\ssteners account name: ssteners additional information: caller computer name: vsnbitsql001 --------------------------------------------- i'm assuming bad password causing this. thought these bad password events categorize under audit failure? log w2k8 server freddy hi, you assume right, bad password events categorize under audit failure, event id 4625. locked account appears successful audit eventid 4740. if case gets troublesome, try use account lockout tools along ad auditing. aware there can multitude of causes fot account lockouts. common ones (from experience): - wrong password input user - user changes password, , has cached credentials old password (check credentials in control panel , internet exp

in our domain have dc , adc windows 2012 r2 how take dc local drive backup adc machine. is there option synchronize or can configure time schedule etc plz want complete dc backup each , every drive daily backup needed.  regards, k suresh what adc? please read windows server backup documentation here:  https://technet.microsoft.com/en-us/library/jj614621.aspx mike crowley | mvp my blog -- baseline technologies Windows Server  >  Windows Server 2012 General

dear , my company wants naming convention problem new names more 15 letters so use windows server 2003 , names more 15 effect in our network ??? regards, hi there, yes maximum lenght can assign 15 character , 16th character used identity . please follow below article more information http://support.microsoft.com/default.aspx/kb/909264 sainath windows driver development Windows Server  >  Windows Server General Forum

hello. i'm trying migrate computers 2000sp4 domain 2003x64sp2 in virtual lab environment using admt v3.0 so, 1 network/subnet (192.168.33/24), 1 dc each domain, 1 dns-server on each dc, cross-forwarders setup on both dns-servers each other, dhcp setup onto 'old' domain gives clients both dns servers, 'old' , 'new'. after migrate computer, can't access unc \\clientxp client, say, clientxp2. receive 'logon failure: target account name incorrect." error , known kerberos error in event log: the kerberos client received krb_ap_err_modified error server clientxp$. indicates password used encrypt kerberos service ticket different on target server. commonly, due identically named machine accounts in target realm (newdomain.local), , client realm. perfect, decription case: identically named machine account in target , client realms. migrated machine one. but, question is, there nothing in migration guide issue. more then, access resource u

que tal, alguien sabe como administrar las cal desde administrador de licencias?, el snap-in al que se accede desde herramientas administrativas. el detalle es que se como funcionan las licencias "per seat", ya sea "per user" o "per device". hata donde se, cuando se tienen varios servidores se elige una de esas dos opciones, de tal manera que los equipos o usuarios pueden acceder cualquier servidor con windows. lo que no entiendo es como agregar las cal. leido tutoriales en donde te vas la herramienta administrador de licencias, de ahi en la pestaña "server browser" das doble clic en la entrada windows server y seleccionas el modo de licencia. despues agregas licencias y creas grupos, pero lo que no entiendo es como selecciono que computadora pertenecen las licencias que voy agregando, o que usuarios? Windows Server

i have several folders in group share on windows 2003 server have explicit permissions instead of getting permissions inherited.  i these folder have inherited permissions.  how can set folder inherit permissions?  thank you.   right-click folder, properties|security|advanced|change permissions here can choose include ..... (will add inheritance parent existing entries) replace .... (will replace entries parent)       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  File Services and Storage

hi all, so setting quotas , sending out reports large files , least accessed reports. , have noticed 2 things since activated fsutil behavior set disablelastaccess 0.   1. least accessed report use date accessed attribute or other attribute? 2. date accessed attribute appears change when go directory , list files. not helpful. how determine when file accessed/opened/read, not listing of directory names?  hi, 1. yes uses date accessed attribute. 2. if date accessed attribute changed go directory , list files, means date accessed attribute of files in system affected when list them --- not. should specific process accessed files , updated attribute. technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com. Windows Server  >  File Se