Light

hello all, i have configured active directory domains,  main.lib.uop, sci.lib.uop, med.lib.uop   & eng.lib.uop . running separate domain controllers. i'm going restructure entire active directory    topology newly created active directory, “lib.uop” domain controller root. want add above domain controllers child domain of lib.uop   . how ? thank you best regards. as great merge (better known grafting) different domains, not possible.  need either establish trust or create new child domain , migrate ad objects it.  if migrate objects, microsoft provides free utility called active directory migration toolkit (admt v3.2) move objects.  can bit of challenge if these larger domains, have done before , works great. http://blogs.technet.com/b/askds/archive/2010/06/19/admt-3-2-released.aspx -- paul bergson mvp - directory services mcitp: enterprise administrator mcts, mct, mcse, mcsa, security+, bs csci 2008, vist...

greetings,    i have weird permissions issue shouldn't exist. have share named "departments". share has domain admins:fc , authenticated users:rw. folder being shared called departments. ntfs permissions domain admins:fc , authenticated users:rw , inheritance disabled.    under folder, departments, have numerous files , folders. want restrict access 1 folder, licensing, security group labeled "spla tracking". disable inheritance folder, , apply following permissions: domain admins: fc, spla tracking: rw. seems simple enough. member part of spla tracking group have access folder, licensing.  yet, opposite occurs. no member of security group allowed access. if run effective access view folder directly file server, states security group, spla tracking, not have permissions, "access limited share".    no matter permissions assign @ share level, domain admins:fc , authenticated users:fc, same effective perm...

hi, i'm implementing brand new pki. i've been following mspress windows server 2008 pki , certificate security book intently , have been implementing verbatim situation fits mine i'm deploying 2 tier pki, offline root , pair of issuing/policy ca's , intents , purposes i'm on page 133 of book. my offline root standard edtn\standalone ca, lets use rootca it's hostname. second tier dc's in 2 locations. my friendly name ca newrootca these make easy obscure real identities , keep consistent throughout troubelshooting thread. my issue when using commands :- certutil -dspublish -f rootca_newrootca.crt rootca certutil -dspublish -f newrootca.crl the second command trying publish crl fails following error:- c:\>certutil -dspublish -f newrootca.crl ldap:///cn=newrootca,cn=rootca,cn=cdp,cn=public key services,cn=services, dc=unavailableconfigdn?certificaterevocationlist?base?objectclass=crldistributionpoint?certificaterevocationlist ld...

this pretty simple question, although can't find answer - have kms server a kms (b) key windows server 2008 r2 applied.  never planned deploy 2008 (r1), finding have in few scenarios.  need install 2008 (r1) kms key on kms server well, or should activating using 2008 r2 kms key? nevermind, found table information looking here: http://technet.microsoft.com/en-us/library/ff793422.aspx looks 2008r2 server group b key should activating of following: windows server 2008 r2 group a windows server 2008 group a windows server 2008 r2 group b windows server 2008 group b windows vista volume editions windows 7 volume editions Windows Server  >  Windows Server General Forum

hello everyone. i have great question you: my network consist of parts: 1st. lan 192.168.0.x/24 2nd. lan 10.x.x.x/8 3rd. lan 172.16.x.x/12 there r70(fw-checkpoint) connects between 1st. , 2nd , 1st. , 3rd(dmz). the third lan dmz of course attached r70 also, , on dmz edimax home router connects dmz internet. the problem that: when try ping between 1st. lan , dmz there reply, instance xp machine 192.168.0.55 trying rich edge server 172.16.0.10. when try ping between xp , edimax home router(172.16.2.1) there request time out. what issue??? eternals81 probably first issue posting questions wrong forum.  might want post forum site specific networking or 1 related network+ certification. Windows Server  >  Platform Networking ...

hi team, we facing peculiar issue in if trying remote connect terminal server during 1st time alone getting error " computer cannot cannot remote computer". if try again connection getting established. issue occurring while trying connect terminal server client pc's. guess issue should terminal server side. assistance appreciated on this.  details: terminal server: windows server 2008 r2 machine virtual machine screenshot of error message attached if trying remote connect terminal server during 1st time alone getting error " computer cannot cannot remote computer". if try again connection getting established. issue occurring while trying connect terminal server client pc's. hi, is rds farm configured or single remote desktop server setup? i suggest check event logs terminal , remote desktop services logs find more clues under event viewer -> applications , services logs\ microsoft\ windows. in addition, please patch syste...

hi there, i'm trying find script can use group of remote pcs join new domain. these windows 7 pcs moving win2003 server win2008 server. i found in forum great batch file uses netdom command, getting netdom work in windows 7 means having first download 200mb+ rsat tools windows 7 , enabling command line tools in add new features windows. (correct me if i'm wrong here. tried copying on netdom.exe own laptop (where works) wouldn't on other laptop.) since none of computers i'm trying move new domain have rsat installed, seems overkill, , defeats purpose of trying automate can sort of thing remotely on several pcs @ once. so i've read add-computer cmdlet in powershell. add-computer appears work on local computer only. but can cmdlet pushed out remote computers using script, group policy, or group policy prefs. have psexec util sysinternals. the computers don't need reimaged or renamed, moved 1 domain another..... ideas? thanks in advance, sir_timbit...