Morning All;
It seems some of the computers I have in my OU "Company Computers" does not
get a site according to AD.  I run the following script;
Set objADInfo = WScript.CreateObject("ADSystemInfo")

I would like to prevent automatic un-selection of "Allow inheritable
permissions from parent to propagate to this object" (security tab) on
several domain ADMIN accounts grouped in the same OU on windows 2003 server
in native mode.  Can someone suggest the best way of ...

In out domain I have a user, who can not delete files from his desktop (they
re-appear after reboot) on his pc (he can add files without a problem). Using
another pc, he can delete files from the desktop. He is not using active
desktop and neither local nor domain policy ...

Another setup issue that I cannot find a clear explanation for.
I have 4 locations with Domain Controllers. all Server 2003, SP2.
Location 1 has 2 DC's the FSMO, or PDC, and a backup.  Both have DNS setup,
the backup also runs DHCP.

Users have problem after logon to the domain, some applications on their
local machine is no longer running and the desktop was change.
HOW TO workaround with this issue?

I am member of Enterprise admin group and I am trying to remove a user from a
group but I cannot do it and the Add and Remove buttons are greyed out.
I checked my "Effective Permissions" on a group and I have full permission.
There is not a permission missing.

Hello. The desire is the following:
The following C class subnets should be a member of the SITE1 site:
5.5.30.0/24 through 5.5.120.0/24.
However, these C class subnets are part of SITE2

Windows 2003 DC and XP workstation.
I created a GPO to apply DNS suffixes and I discovered that it is not working.
I created an OU for test, I moved the computer account to that OU and I
linked the GPO to that OU.

I have a problem with one user account that it keeps locked out. I tried to
unlock it but it becomes locked again immediately afterwrads.
Don't know what's wrong and how to fix it.
Please help

We have a 2003 AD with sp2 32 bit and just added a 2003 r2 64bit server.  
We tried to run Adprep from the 2nd cd of r2, and got the following error.
ADPREP.EXE is valid, but is for a machine type other than the current machine.
Any thoughts, our goal is to have the new machine be ...

I've about 50 odd servers in my domain .Wanted to know if there is a need to
enforce indiviual server policy on the server for hardening..
Can someone guide me how it can be done..resources etc...

We have Singel Domain with 2 DCs at the Datacenter. I am getting time errors
in the PDC. When i run the command to resync time from any domain computer as
below i get error from the PDC but not from the second DC.
################################################

This article: http://technet.microsoft.com/en-us/library/bb691348.aspx
says:
"In ADFS, the timed logoff, also known as session expiration, does not
interoperate with Outlook Web Access. You must turn off timed logoff in ADFS

We have a small department that is represented as an OU in our overall
corporate Active Directory. We want complete control over the objects
under our OU. Unfortunately our Enterprise Admins are ppl at an offshore
location which is considered to be a risk to our data on our servers

I would like those of you that have a lot of experience with Widows Server
2003 to read this and may be give me some hints on what to do.
Hardware:
HP Proliant ML115 Server