They're mixing up different statements and rephrase them to their advantage -
it is true that SBS doesn't support a second SBS DC in the same domain/forest
(as every SBS has to hold all FSMOs), but another non-SBS server can act as a
second DC in the SBS forest just fine.
/Guido
-Original
Hello,
Windows 2003 Single Domain
I have a security group with a 120 users which I want to export and add them
to a new Security Group.
I have tried using the following query but it fails. It says DSMOD Failed:
The parameter is incorrect
This is the query:
dsget group
Just a thought .
what about a program installed under his user account? I know shouldn't be
like this I had once an updater (hp printer) running under a user account -
caused a lot of trouble and was only seen on that laptop with the local
printer .
Cheers,
Kat
From: [EMAIL PROTECTED]
It should work, I just tried it myself.
jorge
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Amy Hunter
Sent: woensdag 20 december 2006 10:22
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] OT: DSGET/DSQUERY
Hello,
Windows 2003
Amy,
your command looks good. I also made a test:
dsget group cn=oldgroup,dc=. -members | dsmod group
cn=newgroup,dc= -addmbr
and it worked!
Does the first part of your query work?
dsget group cn=RBAC-Officer-X-X-R,ou=security
groups,ou=testpol,dc=testpol,dc=org,dc=uk -members |
i have to create a new Windows 2003 child domain in Active Directory.
I ve found MS KB Q255248 which describes the actions but the KB
applies to Windows Server 2000, only.
Is there anything special with a Win 2003 child domain or can i use
the steps described in KB255248 to create the child
Dont know what is described in there but things to take care of are:
* Domain Functional Level
* DNS zone delegations for the new domain
* Forwarding from the new child domain up the tree
* Anonymous access configuration during creation
* OU structure
* GPO structure
* delegation of control
* etc.
When remote controlling a user's session on a Server 2k3 TS is there a
way to allow both users to see the mouse pointer? This makes it easier
when doing training. Currently, when one user is controlling the
session, the other user can only see what is going on on the screen, but
not the mouse
(see Subject line as to why you cannot edit the policy on a DC)
Because for Vista you need to be on a Vista box for the Group policies
in Vista to make sense.
The firewall rules alone grab a virtual set up ..set up a DC and a
Vista box and fire up the group policy settings for Vista's
Very cool but you'd have to have one heck of a printer (plotter or
similar) to equal the one that came with the dead tree version =)
Thanks,
Andrew Fidel
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
12/19/2006 08:32 PM
Please respond to
Thanks, this got me closer to the correct query. It sure saved me a lot of
tries, trying to get the query right using (!attr=val), instead of using
(!(attr=val). I however did not get to managed to get it working completely.
Even with the (!(attr=val) The query outputs exactly the same.
The query
Talk to your account team if you want one (or more) ... one of my
accounts they were giving them away.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, December 20, 2006 1:24 PM
Hi Everyone,
I assume everyone knows about:
How to restrict FRS replication traffic to a specific static port
http://support.microsoft.com/kb/319553
I was wondering about the configuration for DFS-R. Does anyone have experience
with that working through a firewall? (instead of opening 135 and
We open port 135 for our subnets only. We made changes to registry to
force high ports through a range and open those ports in firewall policy.
-Z.V.
Almeida Pinto, Jorge de wrote:
Hi Everyone,
I assume everyone knows about:
How to restrict FRS replication traffic to a specific static port
14 matches
Mail list logo
