We have to give the permission to read/write msIIS-FTPDir and msIIS-
FTPRoot AD user attributes for all users under an OU (or to all users
belonging in a security group) to a particular AD user. How can this
be accomplished?

I am trying to run dsquery / dsget batch commands to get the members of a
few global security groups and put the output into a text file. I have
tested a few groups and found that ht e security groups with small group
membership work ok, however groups that have a very large list ...

I'm missing a domain local group required for the operation of Read-only DCs,
I need some way to properly create this group and I'm a little stumped as to
why it missing in the first place...
2 Windows Server 2008 DCs

When adding a new domain controller to the domain, the Sysvol will not
replicate.  This error has occurred on three Servers I promoted to test.  
Sysvol is replicating fine between the other 8 dc’s (4 in 1 site, each of the
other 4 in their own site).

Hi group,
I am looking for some more information as to how the recycle bin
operates when you have multiple domains.
We have the following structure:

I have just started working on a network that has 3 DC's, one was in-plac
upgraded from NT4.0 to Win2k to Win2k3, many issues, the other 2 were upgrade
from Win 2k  to Win2K3.  I have some Win2K8 servers on the network and joined t
the domain, we have a mix of Win2k and XP ...

We created a web form which allows users to change their password. We
used the information in this KB article [1]. Usually it works, but when
the userpassword is expired  we get this error message.:

(Sorry it is long winded) ;-)
I have an issue which is driving me crazy now and has been going on for
weeks.
The long and short of it is some files that are on the network in the

Two forests with two way trusts, Forest1 is at Server 2008 level, Forest2 is
at Server 2003 level.
We are trying to support a LDAP client that only allows for a simple bind
against Active Directory. It is used to look up contacts/emails. All of the

I've been getting this error since we upgraded the domain controllers t
server 2008. After enabling the detailed logging I get event ID 288
about every 3 minutes from my Mac computers:
The following client performed a SASL (Negotiate/Kerberos/NTLM/Digest

There is a similar post to this back in 2007, but it never got answered.
Every few days, right around 5:30 after everyone has logged out, all of a
sudden there is a spike in the non alloc memory usage and all services start
to drop out like dns, login ability, etc. At times it ...

Group Policy question:
We currently have maximum password age set to 90 days and plan to modif
the setting to 45 days.  My question is, what happens to users who hav
passwords that are older than 45 days?  Are they automatically locke

I came into an office of about 40 users where they keep all passwords in an
xlsx.    I had never kept passwords before- never needed to- .  Is this a
common practice?
-- Carly

Hi @all,
I have a bit of a problem with smartcard logon to my Windows AD-Server.
I've read the KB article and did all the needed stuff the mention i
there :

Hello, Hope someone can help.  I see in the DHCP scope options you can add
Static default routes, but that does not seem to be what I need.  I am
looking for a way to static routes from DHCP that are similar to the routes
you can add from the command line using the route ADD ...