Does anyone know if you can have a 2000 domain (or 2003 in 2000 Mixed
that will recognize the 2003 R2 extended AD attributes
I am receiving some conflicting information about whether I have t
have a 2003 DC or not.  I should only have to update the schema wit

Hi i was hoping some one could help. I am using Windows Server 2003 and with
roaming profiles. We have just undergone a process to rename our staffs
usernames from name specific to job role specific to make employee change
over easier. An annoying problem that i have found is ...

I'm looking for a script to generate a list of users which are not part of
the groups A, B and C, for instance.
That is, if user is not member of groups A, B or C, then > file.log
Thanks.

They want me to:  "Please research an AD setting that would allow us
to have .net programs on a network drive but not have to run the
caspol or gack commands, as we have done before"
They run:  "CALL "%systemroot%\microsoft.net\framework

About five years ago we set up something in AD to automatically map
everyone's T: drive to a common network share. Unfortunately, no one
remembers how we did this and we're a small ISV, so we share IT duties (i.e.
we don't have an admin).

Wondering if anybody has a script that will Query All users in every
group in Active directory and/or vice versa (all groups to which every
user belongs to)?
Ideally I would like to export this to textpad or excel.

I've been asked to set to a few machines in my AD environment to be staight
up GMT time versus our local time zone which is (GMT-8:00) Pacific Time. I
have my PDC emulator set to local time, but they need this client machines
set to GMT due to some processes and log files that ...

Can someone tell me what I'm doing wrong?
I have a small active directory domain.  I'm really using it as an
educational lab.  It has 6 workstations and a single Windows 2003 AD
DC.  All of my workstations are in the default container called

I want to create a mirror server. We have a Windows 2003 domain and I
ended up getting a spare server the other day that isn't much in the
way of power but it's got a nice RAID and some RAM and a dual
processor board.

Hi, we have Windows server 2003 and most users have roaming profiles.  About
10 of the users when they log on of a morning there computer connects to the
network but the only icons on the screen are My computer and recycle bin.  
What is happening.  We have the profile path in ...

We have several DC's in our organization in multiple sites. In one
site, we use an application that authenticates users based on their
group membership, using LDAP (e.g. checking if johndoe is part of the
Developers group).

This is a pretty obvious question I think, but I just want to be -
absolutely- sure.
If I implement a new password policy in our domain, but do not enable
the "maximum password age", then the new settings will only affect -

We have 1 domain w/2 dc, (servers=2003) In the event log I have error 2091,
NTDS Replication, and it shows a deleted record.
This record is referencing and old dc that died and held the role of the
infrastrucutre master.  

We have assigned home folders (P:) to our users in AD.  They are in the form
\\server\share\username.
More often than not, it works fine, but randomly, when a user logs on, the
home folder ends up as "share" rather than "share\username".  You can

We are running Windows 2003 AD in native mode. We have several OU’s in which
we would like to delegate administration. However, is it possible to delegate
control and specify how many objects can be created within that OU? I know
the number of objects that can be created in AD is ...