Anonymous modification to AD user object,
In last three days I noticed one of the user-object ‘s timestamp (of
modifications) had changed and I confirmed that no one from the AD admins did
modify this user object.

I have a windows 2000 domain and I've added 2003 x64 R2 domain
controllers and removed all 2000 controllers. When I goto ADUC and right
click the domain, then select properties the function level is mixed and
it does not have the button to change this. All stations are XP and

I have company abc.com, we just bought company bac.com. Instead of creating a
another domain for this company. we are adding them to our active directory.
Is there a way that they can still use someone@bac.com, but actually they are
in the abc.com domain?

We operate a single domain structure with 2 domain controllers (both Server
2003 R2).  We only have one server in the organization that is not Server
2003 and it is not connected to the domain.  It is a Server 2000 machine in a
workgroup that regularly communicates with a Server ...

We have two main Offices - A and B. Office A is where our main DC is located
(Windows 2003 Domain native mode, single forest, single site - GC, DHCP,
WINS, DNS). Site B also has a DC (GC, WINS, DNS - No DHCP). The two sites
are connected by IPSec VPN tunnel (30MB bandwidth).

Please take a look of this. Just let me know weather this a solution and not
just a simple hint to ask in this forum.
We have implemented to our customer a FW based VPN and SBS 2003 R2
Windows-network. The user have same rights to shares weather he/she is

We have a policy not to delete an employee’s AD account (win 2003 & Exchange
2003) when the employee leaves the company, we only disable the account, and
the mailbox is dissociated from the account.
Obviously the disabled account can no longer be seen in the Outlook address

I am having issues with a ADUC (Active Direstory Users and Computers)
snap-in. When I go to create a user object in AD, I copy the user template
and create the user I get an error that it can create the home folder because
access is denied. I log in with my account on the server ...

I'm looking for some insights here as to how to best provide ongoing
reconcile between our production AD 2003 forest/domain and the isolated
lab environment built from a "mirror" of same.
Essentially, I have a requirement to capture the weekly changes in AD

I need a list of characters that can't be used for an Active Directory
username.
Thanks

need to upgrade a domain windows 2000 with 2 DCs to windows 2008 and I will
be adding a brand new server for the 2008 DC. I found few valuable tips from
Meinolf Weber, but have few additional questions:
- the phase when the schema is prepared for 2008 - how disruptive will this

Can anyone tell me how to verify the time it takes for ADAM instance
attributes to replicate to another ADAM attribute in the case of multiple
ADAM server setup

Below is the script that i use to find which are the users whose password in
my domain is expired. My domain is set such that users are prompted to change
password every 70days. But this script doesn't seem to work as i can find
user accounts which are inactive for more than ...

I have an attribute in ADAM which I Mispelled the LDAP name of it. I made it
inactive and tried to add another attribute with a similiar name in the
directory and will not allow me to do so. How can I add this attribute into
the directory with the same name? Please advise....

Sometimes i have to be a bit quicker then normal.
So if i make a group, user, etc i don´t want to wait de default interval
time to finish the replication.
Going to sites and services en replicating by hand gets boring.