two days ago error 0xc0000227
http://support.microsoft.com/kb/311502/en-us occured on the primary DC
(DC1) of a customer.
I tried several steps from http://support.microsoft.com/kb/258062/en-us

I have an LAN with win2003 server with AD.
I need create GPO, always copy shortcuts to desktop by my users when they
effect logon.
I test by script logon, but one problem my users not permission write in

We have a single domain with two DC's running on a 192.168.x.x network
(single site).  We need to change the whole network to a 10.10.x.x network.
What would be the easiest steps to update the NIC's on the DC's to the new
IP scheme so I don't break anything within AD?  Simply set ...

I've been doing some experiments with user rights to add and remove
computers from a domain.
If I'm doing the following :
I take a computer that's a member of a Windows 2003 SP1 domain.

somehow/someone deleted my aspnet user.  I found this on how to restore it,
but it doesn't work.
http://www.mvps.org/marksxp/WindowsXP/aspdot.php
I tried re-installing dot net 2.0  Any better ideas?

We have 2 forrest each with a single domain. We want the administrator from
both forrest be able to cross forrest for admin purposes plus be able to
assign permissions across the forrest.
When you go to a folder on Forrest A and go to Security it gives you the

Good Afternoon Group,
I have a problem at the moment which I do not know how to tackle and I am
hoping you guys may be able to help. Currently I have 2 Windows 2003
domains. Domain_A and Domain_B. There is a one way trust relationship

If I disconnect the 2nd DC from the first DC, GPO error occurs on the
2nd DC, not on the first DC;
If I "transfer pdc" to the 2nd DC using ntdsutil, and disconnect the
2nd DC from the first, GPO error only occurs on the first DC, not on

One of my user is getting account locked error but when I check out
that user in AD users & Computers it says that account is not disabled.
I have faced similar problems in past as well. Pls let me know if
anybody knows the cause for such problem & any solution.

When attempting to move the operations master I get the following message.
"The requested FSMO operation failed. The current FSMO holder could not be
contacted."
Any help is greatly appreciated.

Hi, i am from Russia and my english not good and i need your support.
I currently have Windows 2000 domain with single Domain Controller without
Exchange server. Domain working in mixed mode. I decided install Windows 2003
Server R2 as a secondary domain controller, then demote ...

We changed the domain Administrator today and one NT4 BDC complained about
access denied.  We have 4 Windows 2003 DCs running interm mode, NT4 is in
the remote office with VPN link between sites.  From the NT4 BDC, I could
see some success syncs, as well some bad ones.  The bad ...

I add DNS services from the Add and remove panel on the new DC but when I
launch DNS management console on the new DC I don't have any entries in
the forward lookup zones.It has been approx 4 hours , intra site replication
is set for 3 hours.

We decided to block saving all image files on the file server.  The file
server is windows 2003 R2.  So, I installed file server resource manager.  We
have around one thousand folders on the file server. Then I created file
screen for the root drive.  If I want to create file ...

i am wondering if there are any best-practice recommendations on running
certificate services on a member server vs. a domain controller. i have a
simple pki with a single enterprise root CA.
thanks.