I am pretty new for Activedirectory Deployment.
we have a nine branch over nationwide. now internationally.
HQ:had 4 Dc(Web,CRM,DC,Exchange)
each store has 1 DC

Cannot create trust between 2 Windows 2003 domains "trust operation failed -
operation cannot be performed on this domain"
Forest and Domain functional level are set to Windows Server 2003 on each
forest

I'm looking for advice/tips on assigning and publishing apps through AD.  I
have a single domain with two sites (different cities) and under those cities
I have OU's for servers and workstations.  I have several GPO's that are used
for various tasks in those OU's.

I want to have an ADAM synchronized from AD. For each User in AD, an
entry is created in ADAM.
I'm not sure that user proxies are required, since I read that it is
for legacy applications and it is not needed.

Maybe some one here can help me, or point me in the right direction at least.
AdamSync produces the following log...
----------------------
AdamSync LogAdamsync.exe v1.0 (5.2.3790.2075)

I have modified the permissions on an OU to exclude authenticated users,
account and print operators. However when I create a child OU under this OU,
authenticated users, account and print operators are added to the DACL. How
can I stop these permissions being added to further ...

I need to allow my users the ability to downloads documents to a pc but
prevent them from installing apps.  I have been able to stop them from
installing but they also are not able to download docs.  What GPO setting can
I use to allow the downloading of docs while continuing to ...

I've been asked to produce a report showing each user in Active Directory
with a list of all those having access to their mailbox, and the type of
access those users have.    Is there a way to create a report like that?
Thanks in advance!

I'm finding when my users roam to XP machines, their various settings roam
with them (as it should be).
But when they roam to Vista machines, many settings are not coming down from
their roaming user profile.  I suspect these are all HKLU registry settings

We are planning to go for Exchange 2007 single forest topology with country A
being the hub and no Exchange server in other countries, like what Microsoft
is doing. But I would like to find out for the branch offices within each
country, can I just have an AD server at each ...

We have two domains, Domain A (Windows NT Domain) and Domain B (Windows 2003
Domain) with both way trust. When we try to access any share folder of some
particular servers in Domain B from particular servers in Domain A, we get an
error message saying that no logon server is ...

I need to run a report showing all users that are logged on as well as the
length of time they have been logged on.  I can't find anyway to get this
information other than looking through the event viewer security log and that
doesn't show usernames.  If anyone has an eaiser way ...

How to set to a SINGLE domain account to never lockout?
I know how set this globally using Group Policy:
Computer Configuration
    Windows Settings

Hello,
I am fairly new to setup a DC with AD. When choosing the domain, I planned
to use mycompany.local instead of mycompany.com.
Is this a good way to do or is this creating any trouble and difficulties?