I'd like to setup security on all of my user objects so that a single user
account can read two attrubutes but no others; is that possible?  Obviously I
don't want to go in to every user so something that is domain or OU based is
preferred?  Anyone know how to do it?

Is there a way to tell when an OU was deleted and who did it?  I have
auditing enabled and am auditing (set in the default domain policy):
Account management
Directory Service Access

When I setup all users on a windows 2000 server running terminal services I
setup just user name. Now under Documents and settings it shows the user
names and a duplicate user name. Example is \\username. Newly created is
\\username.terminalserver. How do I fix to just use the ...

Is there any way via GPO or otherwise to give users power users rights and
not local admin rights to enable/disable the Windows Firewall as need
dictates?
Thank you

We have one domain spread across multiple locations. all the locations are
connected using a point to point vpn. When you look at the dns servers at any
of the locations they list all the domain controllers/dns servers in the
forest. When users logon at location "A" we want them ...

I'd like to have our internal developers begin using Active Directory
for security within their applications.  This would simplify user
management by allowing users to have the same un/pw on 20 different
applications.  My thought is that we would use LDAP to directly query

I have 2 questions regarding best practice for ADAM password policies:
1) I want my ADAM users to have a different password policy than the
surrounding AD.
I still want to centrally manage the policies. Now what I've learned, I

I am trying to establish a trial environment with AD+exchSvr2003.
I have a private ISP ,being a private guy & have no Email domain(couldn`t
find where to acquire freely).
My AD domain is rafi.org.

I have 2 labs with 20 computers each, and I have 1200 users.
I have in each lab 2 printers.
1) How can I assign for each user all the printers in script?
2) How can I assign for each user the printers in the lab that he is working

I have a RIS server running 2003 standard. It's installed on one of my DC's,
i can add images to it from cd's just fine, and installing one of those
images is working. However, when i run riprep.exe on a machine that i wish to
make an image of, i get the following error over and ...

I have two 2k3 DCs in a single site, single domain configuration.  DC1 holds
user files and profiles, DC2 runs Exchange 2k3.  
My password change cycle came up earlier this week.  Once I changed my
password, DC1 rejects me.    If I try to access my shared folder hosted on

recently all of the user's Security Event logs have been filling up. They are
filling up
with entries that appears that the Domain Administrator account  
login/logoff. It is happening at a rate of about 100 entries per hour. This

The company owns 12 DC's. On 3 of them, I get the errors 1030 & 1058
("Windows cannot access the file gpt.ini  ...). All are Server 2003, patched
the same way, ...
I read some (a lot) articles of the knowledge base, Technet, ... and I

i have depoyed the following scenario in my environment.
- I created a Group Policy Object with GPMC SP1 on my W2k3 Server (DC)
- Also i supplied this GPO with a Security Filter so that the settings just
have

I am beginner with Active Directory and I want to know:
- How I do backup and restore an active directory if it is a child domain?
- What folders (or files ) and registry is replicated for an active
directory child