Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Search results for query: *

  1. mlichstein

    Logon Error

    Next time start a new thread instead of resurrecting a thread that is over a year old.
  2. mlichstein

    The terminal Server has ended the connection

    First, start a new thread. Second, why do you need to reactivate your server? If you do, you will need all your license information. You should have your license info in a safe place anyway, for auditing purposes.
  3. mlichstein

    Windows 2003 CA and Windows 2000 Clients?

    I think thats the problem. Every machine in the domain (XP, 2000, 2003) should have the ClientProtocols key and subsequent values in it. Right click on Rpc and do a new key. Call it ClientProtocols. Inside the new key, create five string values: Name: ncacn_http Type: REG_SZ Data...
  4. mlichstein

    Windows 2003 CA and Windows 2000 Clients?

    Can you check to see if the 2000 machine has a HKLM\Software\Microsoft\Rpc\ClientProtocols registry key? And if so, let me know what values are in that key. On your CA, do you see anything in the pending request or failed request folders? What OS is the CA, and what type of CA is it...
  5. mlichstein

    Change Time Sync Freqeuncy

    They should be under HKLM\System\CCS\services\w32time\parameters. The article is correct. You can run w32tm /dumpreg /subkey:parameters to view them. It also seems like you are trying to treat the symptom and not the actual problem. If your servers are frequently getting out of sync with...
  6. mlichstein

    Windows 2003 CA and Windows 2000 Clients?

    That is not autoenrollment. That is Automatic Certificate Request: http://www.microsoft.com/windows2000/techinfo/planning/security/autocertsteps.asp Two very different things. Autoenrollment requires 2003/XP clients and a 2003 Enterprise (not standard) CA. Let me know what the GPO...
  7. mlichstein

    Windows 2003 CA and Windows 2000 Clients?

    How are you doing the cert request? Autoenrollment or automatic certificate request? Only XP and 2003 machines support autoenrollment.
  8. mlichstein

    Change Time Sync Freqeuncy

    You don't need to stop and start w32time on 2003. Just run w32tm /config /update when you make changes.
  9. mlichstein

    How do I promote a BDC to a PDC?

    dcdiag will show who holds the PDCe role. You can also run 'netdom query fsmo', but you need to install the support tools to get netmon.
  10. mlichstein

    Cant use Terminal Services after SP1 Install

    The firewall shouldn't be on if you do an install of SP1 on a 2003 RTM machine. The only time the firewall is activated is when you do a clean, slipstreamed install of 2003 SP1, or when you upgrade from NT to 2003 SP1. You mentioned it can't be accessed from the outside...does that mean you...
  11. mlichstein

    Win2k3 & XP Pro Machines Cannot Join 2000 Domain

    Check out this article on maxtokensize: http://support.microsoft.com/?kbid=327825
  12. mlichstein

    Win2k3 & XP Pro Machines Cannot Join 2000 Domain

    Is the account you are using to join a member of a lot of groups?
  13. mlichstein

    Implement PKI before or after domain upgrade?

    Also note that version two certificates can only be issued by CAs running 2003 Enterprise or Datacenter.
  14. mlichstein

    user account privilege !!!!

    Making users administrators of their machines is a very bad idea. It's a great way to spread malware and cause general mayhem with your network. Your network should operate under the rule of least privilege. Users should have only the permissions that they need to do their work. General...
  15. mlichstein

    Client Access Licsense for windows 2000

    Disable the license logging service. This service (and the license manager it controls) is buggy and unnecessary. As long as you have the physical proof that you have enough licenses, you're fine. No auditor will ever look at the license manager. The license logging service is disabled by...
  16. mlichstein

    AD problems(FSMO, GC)

    DNS? How is DNS set up? Is the new DC pointing to the old DC for DNS?
  17. mlichstein

    Terminal Services Change

    It's tough to say. It depends entirely on what applications you have installed. Generally it is not a good idea to configure your mail server as a multi-user terminal server. Those roles should be separated.
  18. mlichstein

    domain vs. workgroup share permissions

    If you map a drive using the command above, you don't need to create an identical account on the MCE machine. I would suggest setting the share permissions to Everyone:full, and then ACL the file permissions so that this domain user has read (or whatever permissions you want to give that...
  19. mlichstein

    display share permissions from command line

    net share will show you the shares on a machine. Subinacl can display permissions for shares (among other things). subinacl /share sharename /display=dacl
  20. mlichstein

    time - it's a pain

    Actually time in Active Directory is pretty simple. You just need to configure the PDC emulator in the root domain to sync with an external source. All other domain controllers, member servers and workstations that join any domain will be automatically configured to sync with the AD hierarchy...

Part and Inventory Search

Back
Top