I finally was able to replace my win2k DC with a new & improved win2k3
model.
I added the win2k3 server to the network, ran adprep & forrestprep to
prepare my domain for the addition of the new server.

How can I move the user accounts in between 2 child domain?
Use ADMT or move tree?
Can I keep the mailbox in the existing Exchange server in this user account
migration?

Hello, what is the advantage you get when you create additional UP
suffixes. Let's say that for example I have a child domai
north.test.com and I create a user with the UPN suffix of test.com Th
user will still be created in the child domain and not in the paren

We currrently have 2 sites, both have two Windows 2003 SP2 DCs.. I just
recently added a Windows 2008 x64 DC to site B.
The PDC is located in site A, when a user is locked out, unlocked, or a
password change is done on a DC in site B, it is immediatly replicated to the

Am new to certificates, this might be a very basic question, but still...
Have been asked to set up LDAPS for an instance of ADAM. I believe there is
some application which will access this application using ldaps. Now i have
few questions:

I need to define a group policy so that it is filtered by members of group
"A" , as long as they are NOT members of group "B".  Is that possible with
GPO?
Thanks for any advice.  I am fairly new at group policies, and would

I have noticed that Windows Automatic Updates will sometimes turn Windows
Firewall back on.  Is there a setting within a Group Policy that can enforce
the Disabled state?

Hi NG,
I have the following Problem on one of my servers (MS Server 2003 SE
SP2).
After disabling an account

i have a pdc (primary domain controller)  and some adc (additional
domain controller). now one of adc servers defined as time server and
i want to change time server to another one. how do i can?

one of the DC the security log full very fast, the log file size is 4096 and
it was full after half of the day.
What could cause the log, most of the vent id is 560 ,538 & 680.
what could cause it those event  ?

We need to temporarily take down one of our branch office domain
controllers (W2003 standard ed. - sp2) for atleast a month. Would
there be any adverse affects by taking a server down for this long? I
am wondering whether AD or DNS could remove the server from the

Can you provide me the link from where 2008 Server Core OS can be
downloaded.
Also please point me to any information which talks about benefits and
gotahs of using server core as DC, DNS, DHCP etc

   I'm reading your "Inside Windows 2003 Server.
   But there is a place which I don't understand, I hope you could
give some prompt.
   "Chapter 13"

Have a Windows 2003 Forest with an Empty root and a child domain. Forest &
Domain functional level - W2k3. I have introduced a new w2k8 RWDC. I would
like to know at what time do we start seeing the above said groups in AD?
will they start appearing only after the 1st RODC is ...

We'll be implementing password aging soon, if a user never changed the AD
password for 1 year, I set the maximum age to 90 days.  Will the password be
expired the day the policy is enabled?  Or it will be 90 days once the
policy is set?