1.  Active Directory 2003 R2 / Exchange 2007 SP1 brand new setup
2.  DNS/DHCP integrated with AD
3.  Site A = 192.168.25.0/24  Site B = 192.168.26.0/24  Site C: =
192.168.27.0/24

Is this possible please?  We have a small company with an SBS2000 server and
want to migrate the users and data onto the main w2k corporate domain.  Is
it possible to setup trusts between both systems.
Thanks.

when installing the first domain controller for a new domain (and domain in
a new forest) and this domain controller will also be the DNS server.
Does it make any difference if you install the DNS component first via
Add/Remove Windows Components, before running dcpromo (Active ...

I have Windows Server 2008 running on a Virtual Server 2005 R2 SP1 VM that is
hosted on a Vista PC. My domain controller is Windows Server 2003. When I go
to Active Directory Users and Computers on the DC and right click on the
Server 2008 object and select "Manager Computer", I ...

On SBS 2003R2 I'm getting this error in the Application log:
Windows cannot bind to PSRT.local domain. (Local Error). Group Policy
processing aborted.
Help and Support gives these suggestions: (I have noted the results below)

When I run: repadmin /showvector /latency DC=domain,DC=pri
I get the following output:
7ca2d91e-5761-4013-b700-77e3444208ab @ USN     51071 @ Time 2007-08-10
23:33:51

Can you change password of a machine account for a Windows 2003 member
server using netdom?  I ran into some info that machine account passwords
could only be changed on domain controllers.
The reason for this is because we were doing DR testing.  We failed over and

Is there a way to completely remove Enterprise admin
group/Root-Administrator right from Child  domain?  (i.e. removing only
Enterprise admin group from child domain-administrators group is still not
enough as member of Enterprise admin group still hold certain permission to

We are in the midst of upgrading our Forrest from Windows server 2003 SP2 to
Windows server 2008. We will be doing a gradual migration from Server 2003 to
Server 2008 introducing one 2008 server at a time and then promoting. How
will the KCC start building the topology once the ...

I've recently placed a single RODC in a perimeter network, which is
separated from the internal network by a firewall.  There is an AD site and
subnet associated with this configuration.  I'm experiencing several issues
that I'm looking for help on.

I used the AD delegation wizard to give a security group permission to
create/modify/delete user objects and groups for a user and group OU. This
OU has several sub OU's.
After using the wizard I went back and switched my ADUC to advanced view and

I have a doubt about security and transfering FSMO roles in W2K3 Server:
This transfer is protected by W2K3 Server's ACL, that should be restricted
only to computers that could be affected by the transfer. What object
permissions and/or ACL's manage role transfering? How could be ...

We have Win2K3 domain with all WinXP PCs. The password policy is the default
domain policy.
Searching in google it says - "By default, Windows pops up with a message
that a user's password is going to expire 14 days before the expiration date."

I found this warning on my Windows Server 2008 Domain Controller, does it
cause any big problem to my domain?  We do not use any smart card logon
mechanism.
"The Key Distribution Center (KDC) cannot find a suitable certificate to use

Should not the Primarylogonscript for the domain users be place in the Domain
Policy and not just at the root of the Domain in Active Directory Tree?
Also, doesn't the log on script go in the DC's Sysvol\domain\script folder -
why would it be in a Security Descriptor folder?