We are running Active Directory on Windows 2003 server.  Is there a way to
find out all the users that have password expire on June 30, 2008?  Thanks.

We have Windows 2003 domain and we are in the process of implementing
password policy across the domain.
What will be the suggested/ recommended pathway to exclude administrator/
special purpose admin related accouts from this password policy?

I have a domain Active directory on a windows 2000 Server and I moved the
rights I made on a pc with steadystate to the server with the active
directory with SCTSettings.adm. Then I did some changes in the group policy
at the All Windows Steadystate restrictions hopping that this ...

a new customer has a w2k3 server on location vienna with a single level
domain "intern" and no "intern.local" as normally used.
we have to install a second AD-Controller an location linz (connected with
vienna via a 2 MBit VPN-Tunnel).

I need to move a domain controller to faster better hardware. The new
hardware will have different drive controllers and most likely a
different storage layout. What are best practices to ensure minimum
disruption to the network?

I have very little AD experience, so I hope someone here can help me.
I work for a small international organization that needs a distributed
database with all their customer contacts. Contacts added to the
database in one office needs to be visible in another office.

When running 'dcpromo' I receive the following error: 'The new domain cannot
be created because the local Administrator account password does not meet
requirements.' I have tried multiple passwords using 6 or more Upper case,
Lower case, & Special characters. This is a new server ...

We have a Windows 2003 domain.We are in the process of implementing password
policy on the domain.
Currently we add helpdesk staff to server operators group for AD
administration. Is there a role based administration model in Windows 2003 so

Morning,
I'm reading lots of documentation regarding this online here :
http://technet2.microsoft.com/windowsserver2008/en/library/9c91be5f-df14-40b2-b1
76-2b1852a51e611033.mspx?mfr=true
There's some information I can't find though regarding the upgrade process

I am looking to extend our AD into a larger environment.  However, there are
servers that will have local admins who I do not want to be able to perform
any queries against AD to get information.  For example, I don't want these
local admins to be able to use a normal ldap viewer ...

Shortly I have put 2 Windows2000 PCs in a domain. They seem to be set the
same and they use the same application.
By one of them all is working fine.
By the other, when the application tries to save a file, it displays an

Can you disallow Anonymous Bind in AD?

I have a somewhat new additional DC in production however the FSMOCheck
is failing for it's PDC and I get an error when trying to access the GP.
I have included a DCDiag, I can not determine the cause for this. The
DCs are connected across a high speed WAN. Any help is much ...

I have a Windows Server 2003 system which is the DC.  When I try to add a
new user I get the error message from Active Directory, "An error occured.  
Contact your system administrator".
If I try to reset the password on an existing account I get the message:

Server information of each site
Site A (Production)
Server A1 (Application server - Window cluster) Server B1 (Database Server -
Windows/MS SQL cluster) Server C1 (Database Server – Windows/MS SQL cluster)