KCC

hi all, in domain have 3000 users has been created in different ou's according business units. default "authenitcated users" has been permission "add workstations domain" settings. but customer want block users 1 ou [ around 900 users] "add workstations domain" settings. if remove default "authenitcated users" settings in dc policy need create new group remaining ou's , need add . instead of pls let me know want deny users domain "add workstations domain" settings i'm not aware of mechanism control a user right directly based on location of user account. however, can leverage concept of shadow groups (used provide similar functionality fgpp) - means create group contains user accounts in given ou (more @ http://social.technet.microsoft.com/forums/en/winserverpowershell/thread/623a3408-3861-4d10-ad8d-0c39d8d17362 ) once that's done, grant or deny right "add workstations domain" members of group h...

started a new network admin position!  previous admin left hundreds of ad groups without descriptions or documentation.  there way discover these groups used for?  see below link checking delegation & permission. http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx regards biswajit biswas my blogs | mcc | tnwiki ninja best regards biswajit biswas disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. mcp 2003,mcsa 2003, mcsa:m 2003, ccna, mcts, enterprise admin Windows Server  >  Directory Services

hello, trying replicate main file server secondary/backup file server.  have 1 share trying replicate using dfs.  after adding replication group have not seen files replicated backup server.  ran diag , got following message: warnings (there 1 warning report)         this member waiting initial replication replicated folder lnprofiles$.    affected replicated folders: lnprofiles$   description: member waiting initial replication replicated folder lnprofiles$ , not participating in replication. delay can occur because member waiting dfs replication service retrieve replication settings active directory domain services. after member detects part of replication group, member begin initial replication.    last occurred: friday, december 18, 2009 @ 4:49:12 pm (gmt-5:00)   suggested action: replication begin after initial replication complete. if state not change, see microsoft web site.  warnings ...

my script looks like: param($username, $psserver, $type, $status, $unit) # if(@(get-module | where-object {$_.name -eq "activedirectory"} ).count -eq 0) {import-module activedirectory} # $erroractionpreference = "stop" if ($username -eq $null) { $x= "a username parameter must provided." $x exit } if ($psserver -eq $null) {     $x= "the qualified name of domain controller must provided."     $x     exit } # $objdomain = new-object system.directoryservices.directoryentry $objsearcher = new-object system.directoryservices.directorysearcher $objsearcher.searchroot = "ldap://" + $psserver $objsearcher.pagesize = 1000 $objsearcher.filter = "(&(objectclass=user)(samaccountname= $username))" $objsearcher.searchscope = "subtree" $user = $objsearcher.findone() if ($user -eq $null -or $user.count -eq 0) {  ...

hi, i want use hp vsa shared storage 2 hyper-v nodes. short question: can start virtual machine stored (vhdx file) on shared storage on both nodes? i.e. if 1 node fails (would simplest setup manual failover, think) or have use fail-over-cluster? if yes, cluster 2 nodes supported (i read additionally lun heartbeat or that)? thank you! rib11 hi, i want use hp vsa shared storage 2 hyper-v nodes. short question: can start virtual machine stored (vhdx file) on shared storage on both nodes? i.e. if 1 node fails (would simplest setup manual failover, think) or have use fail-over-cluster? if yes, cluster 2 nodes supported (i read additionally lun heartbeat or that)? thank you! rib11 it not work way expect. use create csv on top of shared lun , either configure vm ha (very little downtime) or guest vm cluster (virtually no downtime). second preferred done shared vhdx. see: http://technet.microsoft.com/en-us/library/cc742396.aspx http://technet.microso...

is there way speed re-connection after live migration? so if in vm live migrates feels hangs 10 seconds reconnects , fine..... while ok not ideal. there way improve this? actually 10 seconds sounds long time me. in experience using shared nothing live migration i've seen switch being instantaneous, continual ping possibly dropping 1 or 2 packets, , quick enough it's unlikely users notice change. in terms of whether can improved i'd yes. as can see technical overview here http://technet.microsoft.com/en-us/library/hh831435.aspx final step signal sent switch informing of new mac address of servers new destination, wonder if slow switch on might connected that, or perhaps other network issue. is network connection poor between servers might cause delay during final sync of changes between server copies? moving between subnets? Windows Server ...

i tried upgrade windows 10 windows 8.1 ,  got "code 80200056 ".    how fix it? something here might help. https://support.microsoft.com/en-us/gp/windows-update-issues or try them on here. http://answers.microsoft.com/en-us/windows       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server 2012 General