I'm new to Active Directory in Windows Server 2003, I was wondering is there
anywhere I can get a list of groups already installed and what they do in
more detail?

I am running Windows 2003 R2 and had the box compromised by a virus.
Symantec cleaned it all up I think, but I keep getting reinfections.
After investigating the windows firewall, it had been disabled.
Further, it appears that a group policy has been applied to it that I

I am a new guy and its my first job as a System Manager of a Windows 2003
Server Domain with Windows XP Clients. I want to create a Secondary Logon
(User) at the Windows 2003 Domain Controler (apart from Domain
Administrator)who should have ONLY below mentioned Rights:

I am trying to enhance the security on our network by implementing an
"Domain Isolation" solution by using IPsec and group policies.
The enviroment looks like this:
- Small network, only one site.

I'm running a Win2003 R2 server with AD (at home for file sharing);
yesterday i decided to do a backup by just copying the D: drive onto a 1
TB external drive. On one file it gave "Access denied" error and so far
I can't find a way to get rid of it:

After we format a user's machine we noitice that we forgot to backup the
Certificate.
Now we need to recover both a user certificate and the machine certificate
issued by our internal CA.

Hi! From some month when I try to open Certification Authority mmc I received
the following error: "The specified service does not exist as an installed
service.
0x424(WIN32:1060)". I have checked in Add/Remove Programm and all flags are

Hey guys im trying to implement audit policy in our network and im trying to
test it. i setup a certain folder to be audited and i tried to create a file,
delete a file, move a files and check the security log events. and theres a
lot of security logs about the activity that i did ...

On a terminal server I've enabled "Audit Logon Events (Success/
Failure)" in the Audit Policy for the machine. On a successful logon
event (Event ID: 682) for the security event log it shows the user as
System and in the log information it shows the username that logged

I've searching high and low for an answer but it doesn't look like
anyone has asked this question before. The company I work for has 5
domain controllers (all in separate locations - Aus, UK, India etc).
The company's main IT Dept (who I work for) admins all these servers,

I'd like to know, how can I configure the permissions for a service so that
only Administrators can start it.
I have a problem with Microsoft Office 2007 installed on Windows 2003 SP2
Enterprise. When I start for example Word as an Administrators member - all

I have the following problem on my AD-Domain (3 Domain Controllers
with MS-PKI):
all the domain controllers have recurrent errors in the Application
Event Viewer that say:

Hi, going through the security logs which I apparently don't do
frequently enough, I found a computer account in AD that I don't
recognize. I looked through my list and it wasn't on the list. Called
the 1 vendor that gets in and it wasn't there's. The computer

I have a Windows Server 2003 R2 Enterprise system setup with AD and as a CA.
It also has IIS installed for Web Enrollment.  However, even from the system
itself, when I go to http://localhost/certsrv, request a certificate,
advanced certificate request, submit a certificate ...

I don't know if this is the right group to pose this question to and if it's
not, I apologize ahead of time.  I'm wondering if anybody out there can
recommend a good two-factor authentication solution that meets the following
criteria: