I get this error in the EV viewer for one of our servers saying thi
"Attempt
to update DNS Host Name of the computer object in Active Director
failed.

Hi Guys,
Hoping you can help out this damsel in distress ...
We've got about 38 DCs world-wide and we have a hard time securing these
DCs. I mean how does on know exactly what protection a DC needs and how do I

I am expiriencing following problem:
I have defined two-way trust between NT and 2003 domains, but i can not see
users of NT domain in 2003 and can not see 2003 users in NT domain (while
trying to provide NTFS permissions).

I was wondering why if I add a computer name in a computer OU, that when
another person tries to join this computer to the proper OU, they are getting
access denied error.  This person has the same righs as me.  If I go and try
to join the computer, it lets me.

i've reinstalled 2 server were before srv1 was pdc and srv2 bdc. Now
srv2 is pdc and srv1 is bdc. To reinstall i've correctley moved FSMO
from srv1 to srv2. (Active directory is 2000 native mode)
now the preblem is: if srv2 is down the AD on srv1 (bdc) is slowly...

I use GPMC from an XP box at our office for editing GPOs on our W2K DC.  I'm
trying to get the DNS Client (in CompConfig/AdmTempl/Network) setting -
specifically the DNS servers - to apply to XP clients but it's not working.  
The rest of the GPO's settings get applied.  I also ...

Situation:
One forest.  Several domains.  Every domain has one DC in a remote
location.  One of those locations has just been sold, and removed from
under us.

We are having an issue where a new global group we delegated rights (full
control) to GPO's and OU's are not able to see or manage the existing GPOs
using GPMC.  The new group is able to see a few GPOs but only the GPOs which
have "authenticated users" as group on the GPO.

To all,
 I have been asked today if there is a way to prevent DHCP from giving out
address to PCs that are not members of our domain.  I can't see that I can do
that, but I would think that there's a way.

2 Win2003 DCs
Beast1 = The origional role master holder with AD, DNS, DHCP
Beast2 = grunt backup for AD, DNS, and king of the Web servers.(IIS)
Beast1 died after installing SP1 (go figure..) it's DEAD....

We've got this gpo for primary dns suffix
Computer Configuration\Administrative Templates\System\DNS Client
set to forest.com, enabled and enforced, permissions checks out
but the clients are still using their default primary dns suffix which is

Hello. I am currently running a 2003 Domain. I would like to set up a second
DC to act as a backup if I ever need it. Can anyone direct me to a step by
step guide on how to do this? I also want to set up a backup DNS. I am new to
Active directory, any help would be greatly ...

We've got a domain with win2k and win2k3 DC's,  and one NT 4 BDC, so it's
using win2k3 schema in mixed mode.
We might need a name change for our domain so just checking whether a domain
change is possible for our domain

Does anyone have a ldap query that will tell me  which users in my AD 2003
have OWA enabled.  Is this possible?  Please help.  Thanks.

Howdy everyone,
I'm completly new to setting up a server. I ran the role manager wizard and
did a typical install of roles...VPN, Domain controller, DNS, and DHCP.
However, I can not get a computer to find the domain. Any suggestions on what