I noticed that a couple of servers "DNS-DC-WINS", each with 2GB physical
memory each are operating at 400-500 available MBytes.
Is there any specific regkey I need to tweak to make them take advantage of
the physical memory, or should I just pump more physical RAM on them ?

I am an It auditor.
Ive noticed in our active directory that the everyone group is a member of
the domain admin group with change password permissions.
Is this a default setting/proper delegation. I am assuming it just gives the

I have some test machines that contain ghost images for different operating
systems. Each of these images has a different machine name and is part of
the AD domain. There are situations that we do not load these images too
often and then when we load after 2-3 months, we see that ...

can someone tell me how this container is actually populated and which
objects get stored there?
It's definitely not "all objects from trusted domains" as some papers
say. If it is only those objects that are used in domain local groups

When i execute:
"ldifde -f c:\real.ldf -s SERVER -d "CN=Real,CN=Users,DC=domain,DC=loc" -r
objectClass=group -l member"
And open real.ldf members context name not appear. Appear strange characters

I hear time and time again that a domain is not a security boundary in AD
and that only the forest is a true security boundary.  Obviously this is
technically true.
My question is not because I don't understand AD structure, but because I'm

Sometime ago I downloaded and installed an utility that will add another tab
to the User Properties window.  This shows some additional user information
such as UID, last logon/logoff time, etc.
I pretty sure I loaded on a domain controller but the tab has disappeared.

is it possible to configure a script, gpo, or push something through
AD, ldap, that will remove all permissions from the local
administrators group of the machine and replace it with ones I want on
there.

I move a domain group to new OU that i want to be managed by a user. I grant
read/wirte permission by using Delegate Control wizard, then i create a new
MMC in the user's desktop and select that OU and choose "New window from
here" in the context menu. Now i got a MMC console ...

I used this parameter to publish my GC early.  Now that my GC has finished
replicating, is it safe to remove this key from the registry?
Can anyone help?
Thanks.

I am physically moving a new, operational Domain Controller to a new site
and subnet for a branch office.  The server is 2003, r2 on a 2003 ADS domain.
It is a third DNS server, DHCP server for an new subnet (turned down) and DC.
What is the best recommendations for moving this ...

Using Win2k3 R2,  1 domain,  2 DCs with DNS servers (secure).  Say DC1 and
DC2.  DC1 works fine and admins can logon normally.  So in order to test DC2
I unplugged DC1 from the network.
Problem is nobody can logon on DC2.  I just removed and reinstall AD

I'm having a bit of trouble with AD. I have several users who have send as
rights on other users mailboxes.
But now I have created a new user and I want to grant two other users "Send
As" rights so they can send mail as the other user.

some further info on the problem:
after some searching in the newsgroup I've found out that (using the
LDAP-tool) I see an entry in the user properties for the problem user :
Matched DNs:

I have 3 locations
each has 2 servers to be setup as DCs.
This is what im trying to do.
domain.com