Stupid question.  I have a GPO that simply adds a bunch of HKCU keys.
It deploys fine for the first time.  When I delete these entries
however, they never come back.  I've waited 3 days already, and
nothing.

This a new installation.   After a MS update which required a boot, MMC
stopped working.  Run AD, it returs the message :This app has requested
runtime to terminate in an unusual way.
SBS 2008

I just wanted to know, how to add a single group to multiple distribution
list (appr 150 lists).
and members those are in single group needs to manage all the 150
distribution lists (i.e they should be owner of the distribution list).

A Windows Server 2003 Enterprise R2 SP2 domain controller (the only DC in
the AD domain...yes they know it was a bad plan) with no backup. It won't
boot (a variety of boot errors - all of which I've normally been able to
fix, but I can't now) I actually had this happen once ...

I'm looking for a software tool that I can use to create reports based on
Active Directory.
Specifically, I want to create a printed company contact list using the
Name, Address, Phone, and other information, that is currently contained in

I have an active directory domain i'd like to rename
I'm toying with the idea of maybe just building a whole new domain
My issue with the renaming is all my user's profiles are going to get
lost on the local machines right? Then i also have exchange 2007 which

What is the proper syntax for entering multiple time servers on a PDC?
If I am using dns names do I use 0x1 or not?
Do I have a space between servers?
Does the space have to be enclosed in quotes for the command line?

Windows 2003 FFL and DFL, I recently had to move the PDC role from the
configured DC that is the time server to another DC. How important is it to
keep the PDC role on the DC that is the time server?

Domain functional level; W2K3
Auditing Enabled
domain admin account !Admin was continually locked out after running
spyware/malware tools on an XP machine w/KB958644 patch installed.

Currently we only have AD in our corporate headquarters, but would like to
expand to our mfg facilities. To restrict access to the internet at these mfg
facilities the workstations are pointed to a DNS server that does not forward
to the internet. However, our AD DNS servers do ...

I need to retrieve all windows 2003 standard and enterprise servers from
active directory 2003 in csv format.  From the ADUC console, the OS shows
windows server 2003 for both OS.  Is there a way to do this?
thank you!

for testing a new software i need to  install a new root domain controller
on my nework using the same configuration (domain name and DNS zone ) of a
another root domain controller on the same subnet.
Now the qeustion is :

I have setup a test-environment, which is a clone of the production domain
controller. I want to synchronize a specific OU with Security Groups via the
ldifde tool.
I need also the SID's of the security groups, because there is a member

We have more than 200 DC . I want to know how would i query which DCs are GC
or not.
Mean- I want to query entire forest to locate all GC servers.

We have some delegation done in our environment already, however the same
has not been documented. I am now trying to document what is already done.
Is there any easy way to dump all the SACLS so that i know which OU's are
delegated to which users/groups?