What do you find is the ideal RAID config for AD?  Consulting services said
that each DC should have 6 15k disks...2 RAID 1 for the OS/AD logs, 4 RAID 10
for SYSVOL/NTDS.DIT, etc.
I think this is overkill for a DC (we have 14 DCs in 6 domains).  The 4

It has recently become a requirement at my company to have a report showing
all user accounts modified in tha past x months.  
I thought this information could be found fairly easily by running a script
similar to the one used to determine accounts that have not logged in for the

Is there a utility that can tell me which directories a particular user has
access to?
I've recently come upon a customer that has failed to properly use groups
when assigning permissions to directories. I need to find out who has

I am looking for all kinds of input and opinions, please feel free to comment.
please keep in mind, I am a Sysadmin with Zero budget, so I am looking for
freeware solutions.
Right now, I have a crummy method of viewing the event logs, and I would

Hopefully someone can give me some pointers on the best way to tackle this.
I am in the middle of a netware to AD migration while I am having a complete
network overhaul including having the network routed and subnetted, as it
really needs it. Basically at the moment we have 2 ...

Background Information:  I have a windows 2000 domain that has 82 domain
controllers in about 40 sites.  All DC's are Windows 2000/SP4.  I want to
test the AD upgrade process so I created another DC at my location and let it
replicate all of AD. I then took it off our LAN and ...

What is the best way of clean demotion of a domain controller? I will be
promoting this server again as a Domain Controller in a different forest.
Thanks
TagaR

I want to lock down some terminal servers.  I put them in a OU, created a
policy, and enabled loopback.  How can I exempt an admin from being subject
to locked down settings when he need to logs on to the terminal server?  Do I
need to disable loopback for everyone then?

their username?

I am posting this in the hope that somebody will be able assist me with an
issue that I am experiencing with the 'Autoenrollment' of computer
certificates from an Enterprise Root CA, which is located in a single
Windows Server 2003 domain (Forest Root domain).  The domain has ...

After adding a Win2003 DC to my domain, I get this message about every 12
hours:
Source: KDC
Event ID: 20

Is it possible to exclude a PC from a GPO. Our situation is that we would
like the GPO to apply to a staff member when they logon to a classroom
machine, but not apply when they use their laptop. We have made the user a
member of the local administrator group on the laptop but ...

I can not apply group policy on workstation member of domain, although on
server everything is properly arranged. When user log on to domain their
workstations simply do not react on group policy defined on server for their
OU.

Our file server died and we need to reinstall the OS on it.  I assume I
should be able to delete the object from another one of our DCs in AD Users
and Computers, then DCPROMO the new box.
However, when I push delete on the old DC object, it says there are

I would like to know if there is a way to find out the user ID of the person
who joined a PC to Active Directory. Thanks