What steps are required for me to setup my PDC to sync it's time with an
external source on the internet?  I have read kb 816042 but the thing that
concerns me is this statement:
"When you configure the authoritative time server to sync with an Internet

I have a few problems with the Windows user created for my new
assistant. Something seems to have gone wrong and I think it may have to
do with AD.
 Here are the problems.

Setting up a new citrix environment. I am using HIDECALC but am having
trouble determing the best way to handle this. This policy works against the
user so I either have to link this policy to the OU in which the user/s
reside or drop the users into the OU in which the policy is ...

How do I give all athenticated users the rights to read a custom
attribute?
Thanks
Mike

Is there a setting in group policy that controls the printer separator pages?
I want to define a custom separator page and have it pushed out.
Where is the setting to do this in GP?
Thanks.

Had two DC's, but only one was GC. The DC with GC died.
Probably can't recover to get the old GC data back on the second DC, but can
I at least make the second DC start a "new" GC?
It did let me make it the owner of all the FSMO roles.

Sorry for the long post I am a little confused in regards to configuring an
external time server for our domain.
Currently we have several unix box's that are acting as time servers in our
env.  Those unix box's are synching to external time servers.

Probably a silly question but can I copy adprep.exe from the cd to a remote
infrastructure manager server and while remoting that server run adprep
/domainprep? Or is the cd needed because adprep needs other files on the cd?

I've added a Global Group to the BuiltIn group Print Operators to allow my
Help Desk administer our domain printers. They cannot access the driver tab
on our printers (greyed-out) unless I explicitly add them to the security on
each printer. What am I missing here?

We are planning to migrate users and PCs to a new forest in the not to
distant future, as our part of the company is going to be sold off.
Will Netdom create profiles on migrated users' PCs? or will i have to
recreate each users profile?

I was able to extract the Quicktime.msi and Itunes.msi files and create a
computer GPO to install them.
But...  Nothing seems to happen.
As some MSI files not available for a push via Group Policy?

I've asked a similar question a few days ago but am looking at some more
in-depth advice.
We have a forest called forest F. Within the forest are 3 domains. (A,B and
C)

I have just stared at a new company. The network and active directory
structure was extremely badly set up on PC's rather than real servers. I
think the best thing would be to start from scratch on new equipment. I have
purchased new 2003 sp2 32+64 bit boxes for AD, Exchange 2007 ...

I have aproximately 75 users that at one point or another logon to any of 3
2003 Terminal Servers.
They run an application that is installed on a shared drive. The application
has many modules and thus executables. Every time they try to run one of the

Just a quick question really to settle a debate about a redesign of AD
structure we are having.
What is the ideal way within USers and Computers to organise things?
My opinion was we have a group called Servers in which we put all of our