KCC

hi guys, would love issue been struggling couple of days now. i have rds 2012 r2 gateway configured , works great windows clients both internal , external communication. problems comes when want use  ipad apple. installed latest rd client microsoft , works great internal network device moved external network client error while connecting. gateway located in domain network. the error “failed parse authorization challenge”, this see in log file rd client. [2014-mar-06 16:53:49] rdp (0): --- begin interface list --- [2014-mar-06 16:53:49] rdp (0): lo0 af=18  addr= netmask= [2014-mar-06 16:53:49] rdp (0): lo0 af=30 (af_inet6)  addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff [2014-mar-06 16:53:49] rdp (0): lo0 af=2 (af_inet)  addr=127.0.0.1 netmask=255.0.0.0 [2014-mar-06 16:53:49] rdp (0): lo0 af=30 (af_inet6)  addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff:: [2014-mar-06 16:53:49] rdp (0): pdp_ip0 af=18  addr= netmask...

we have hp proliant dl160 g6 2 quad-core processors. os windows server 2008 r2 standard edition. upgraded 12gb of memory (6 x 2gb) 48gb of memory (6 x 8gb). each processor has 24gb  (3 x 8gb) available it. have learned windows server 2008 r2 standard limits amount of usable memory 32gb. how windows operating system decide 32gb use? does use 24gb connected cpu1, , limit cpu2 8gb? does limit both cpu1 , cpu2 using 16gb each? thanks! hello, this question belongs more hp. afaik each processor use half of ram. each processor requires ram easy remove half each processor side , should still work. removing ram 1 processor complete may result in problems. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog: http://blogs.msmvps.com/mweber disclaimer: posting provided no warranties or guarantees , confers no rights. twitter:   Windows Server ...

i have windows 2003 server r2 standard edition, service pack 2 has begun "hanging". server specs hp proliant ml370 g5 dual intel xeon e5320 (8 cores) 4gb ram windows 2003 r2, service pack 2 terminal server sunbelt software vipre enterprise antivirus software during normal operation, users start disconnected server , unable reconnect. console become unresponsive , ther server has hard rebooted. have found svchost process ram usage starts grow rapidly , "hangs" server.  if kill process server recovers , performs thing starts over. svchost has following services registered: application experience lookup service com+ event system , support server workstation network location awareness (nla) rasman schedule sens windows management instrumentation computer browser net logon file replication service svchost starts out @ boot-up using 18mb ram, after 45 minutes using 45mb ram, @ little on hour using 85mb, 9...

i found weird behavior of break in nested loops. here test-code: #1 :outerloop foreach ($x in 1..3) { 'x' + $x :innerloop foreach ($y in 1..8) { ' y' + $y if ($y -ge 5) { break innerloop } } } #2 :outerloop foreach ($x in 1..3) { 'x' + $x :innerloop foreach ($y in 1..8) { ' y' + $y if ($y -ge 5) { break noloop } } } #1 breaks inner loop expected. #2 breaks outer loop though specified not-existing label "noloop" break. expect error or warning. @ worst expect non-existing label ignored and the outer loop breaks. does see logic behind behavior? thanks. posted it @ uservoice: http://windowsserver.uservoice.com/forums/301869-powershell you invited vote there. sorry. direct link here: http://windowsserver.uservoice.com/forums/301869-powershell/suggestions/11531280-break-in-nested-loops-behaves-weird ...

we migrating netware ms active directory solution our k-12 school district.  have brand new intel modular server putting on.  have general recommendations how divvy servers?  looking best example data storage home directories, common shared directories, msi installers, network programs, etc...  there benefit breaking out students home directories , putting them on 1 server , putting staff on server?  suggestion im not sure reasoning of it.  or make sense "load balancing" between students , staff.  setup clustering these if makes difference.   any suggestions appreciated. hello, if understand correct not have knowledge microsoft active directory domains? project should better done consultant or microsoft support. you should use @ least domain 2 domain controllers/dns servers/global catalog server(this 3 roles/functions can on 1 machine) per domain , 1 member server file server, 2 needed if talk using clustered environ...

i need run windows remote desktop have mac. ideas? hi, you can use free microsoft remote desktop app mac connect windows pro/enterprise/server versions: https://itunes.apple.com/us/app/microsoft-remote-desktop/id715768417?mt=12 -tp Windows Server  >  Remote Desktop Services (Terminal Services)

i'm newbie in scripting world studying , working everyday.  i not want before or after have in quotes, in quotes -messagesubject "x1x2 abcd" meaning i'm getting whats in quotes , has whats in quotes before , after.  ie xzxz x1x2 abcd or x1x2 abcd efg, etc.  i want x1x2 abcd   apologies not being able explain better.  script: get-transportserver | get-messagetrackinglog -resultsize unlimited -start "04/20/2016 1:00:00 am" -end "04/22/2016 11:59:00 pm" -messagesubject "x1x2 abcd" | select-object timestamp, eventid, {$_.recipients}, sender, messagesubject, serverhostname | export-csv  thanks hardserv does give desired result? get-transportserver | get-messagetrackinglog -resultsize unlimited -start "04/20/2016 1:00:00 am" -end "04/22/2016 11:59:00 pm" -messagesubject "x1x2 abcd" | where-object messagesubject -eq "x1x2 abcd" | select-object timestamp, eventid,...

can please advice changes need on win 7 laptop able connect rd client app? thanks! hi, if device runs rd app , windows 7 laptop in same network, can refer steps in article configure windows 7. allow connect computer using remote desktop connection http://windows.microsoft.com/en-us/windows7/allow-someone-to-connect-to-your-computer-using-remote-desktop-connection however, if not in same network, may need configure network device. allow remote desktop connections outside home network http://windows.microsoft.com/en-us/windows7/allow-remote-desktop-connections-from-outside-your-home-network hope helps. jeremy wu technet community support Windows Server  >  Remote Desktop clients

i'm against doing in place upgrades, i've got windows 2008 r2 domain controller ca for our domain.  know of potential problems when upgrading dc , ca windows 2012 r2? thanks hi, any update issue? meanwhile, ca migration, please refer to: active directory certificate services migration guide http://technet.microsoft.com/en-us/library/ee126170(v=ws.10).aspx regards. vivian wang Windows Server  >  Windows Server 2012 General

hi guys, a knowledge question dfs server windows 2008 r2. i have 4 data center on each europe location, , install dfs server on location attach data on site location. domain level windows 2008. example: site a: 192.168.1.x site b: 192.178.1.x site c: 192.188.1.x site d: 192.198.1.x i have setup dfs server on site , working, example ip number: 192.168.1.100, setup new dfs server site b, c , d. using full mesh replication. when setup new server on site b example ip number: 192.178.1.100 , ready use. if user logon site b, user have use dfs server site b , not site site. (to data server site a) if dfs server site b down user data site a. have use site b, how can build way on each location. i heard have crate site option , other information use costs options. ( , need domain controller on each site) can advice how build , best practice dfs server on multiple locations 1 or more dfs server on location. kind regards, hakan good luck everyone. hi hakan, ...

i have powershell job running inside sql agent. when run powershell script manually on command line, it's fast, when run inside sql agent, hung long time, , don't know script hanging, there way know line powershell script running the way typically debugging of script write out file... simple slapping time , line number or give , idea of how long each part takes add-content $log "$(get-date): start of script" add-content $log "$(get-date): processing xyz" etc etc Windows Server  >  Windows PowerShell

hello ! i have lot's of problem our failover cluster... :( the configuration made man left entreprise.... (sorry in advance poor english) we have : a dell md3200i san. 3 dell r710 server (hyper v server 2008 r2 - core) 1 dell r310 server (windows server 2008 r2)   the r310 used vmm console , cluster management, doesn't have access san. the 3 r710 used failover cluster hyper-v. each r710 connected 2 iscsi link san. yesterday, 2 r710 made bsotd... loosing vm :( in vmmn status of vm "missing". when try access "c:\clusterstorage\volume1" in dos mode (from r710 server), have "the file cannot accessed system" :( when open computer management console, see "quorum" (empty), , big disk vhd, disk have "reserved" state... if try connect our cluster, have error message, cluster not found, error code 0x800706ba.... :(   do know, if recreate failover cluster, i'm loosing data in san ? i'm open if ha...

because there new .msi packages have downloaded , replaced old 1 (and have different version names) wanted keep easy possible user mustn't rename file specific name that script won't break. the problem is, tried wildcard. however, in every .msi installation recieve 123 returnvalue , seems not having found file. in .exe installations works fine no errors although, both .ps1 files close identical. post lines changed of script, didn't work anymore .msi files: working unique name: $install = join-path ($config.installer.globalsettings.nasdrive) "/7 zip/7zip.msi" see above: long replaced .msi package renamed "7zip", script works, can annoying lazy users, tried pick .msi file in there (since one). not working wildcard: $install = join-path ($config.installer.globalsettings.nasdrive) "/7 zip/*.msi" remember, line .exe file looks same (only using .exe instead of .msi @ end) it's confusing me, why doesn't work .msi files aswell...

how can export printer queue excel sheet without software? on windows 8, use get-printjob powershell command job information write-output generate file. there several csv options in powershell convertfrom-csv convertto-csv export-csv import-csv name     get-printjob synopsis     retrieves list of print jobs in specified printer. syntax     get-printjob [-printername] <string> [-asjob [<switchparameter>]] [-cimsession <cimsession>] [-computername     <string>] [-id <uint32>] [-throttlelimit <int32>] [<commonparameters>]     get-printjob [-printerobject] <ciminstance> [-asjob [<switchparameter>]] [-cimsession <cimsession>] [-id <uint32>]     [-throttlelimit <int32>] [<commonparameters>] description     get-printjob cmdlet retrieves current print jobs in specified printer....

i've started using server 2012 take advantage of de-dup. switched on surface tablet recently. while setting new sccm 2012 environment noticed couldn't navigate unc path on main sccm server. today realized latest oses (either windows 8 or server 2012; i'll 2012 on) can't perform file sharing 2012 system isn't local. let's assume following (fake ips): office austin, tx * server a1, server 2012, 100.1.2.100 * server a2, server 2012, 100.1.3.100 * server a3, server 2008, 100.1.2.101 office boston, ma * server b1, server 2012, 10.2.2.100 * server b2, server 2012, 10.2.3.100 * server b3, server 2008, 10.2.2.101 unc/ file sharing works a1 a2, fails a1 b1 or b2. conversely, boston servers can't use file sharing austin. a3 , b3 (server 2008) can access 6 servers. can ping of them, rdp them, etc. unc ip address fails, it's not dns issue. on windows firewall domain firewall turned off (and block locally if issue). appears...

probably easy question guys--i'm trying configure wds server deploy following images: windows 7 enterprise x64 windows 7 professional x64 my images factory install.wim , boot.wim files windows installation media...which means haven't made changes install.wim or boot.wim files--they're clean. my issue wds console can accomodate 1 64-bit image , 1 32-bit image pe unattend file windows pe portion of unattended installation. my windows 7 enterprise x64 image works 100%. problem that, if choose windows 7 professional boot image, windows 7 enterprise ends installing. think reason because peunattend has instructions in installimage section install win 7 enterprise. the way work around if disable windows 7 enterprise boot , install images in wds console. the question is, given limitations in wds console, how can deploy both windows 7 enterprise , professional? hi, please refer blog provided detailed steps deploying windows 7: http://blog.augustoalvarez.c...

hi all, <couldnt find , dsc forum , posting in powershell. experts out their, need > our deployment goes this, tfs drops location invoke rm client activity -> using ps/dsc, invoke ps script upload binaries blob , copies binaries blob destination folder of azure vm .  the major challenge respect web.config transformations, since these vnext deployments using dsc script transform web.config files.  http://www.donovanbrown.com/post/2014/09/05/tokenization-for-dsc https://gallery.technet.microsoft.com/xreleasemanagement-db1baef1 below dsc :  question 1 ) have 5 web.config files 5 folders of tfs build drop loc,how transformation changes dsc before copying destination folder of azure vm.  my web.config files reside folder1\web.config        folder2\web.config .. etc  how can transform same ?  my dsc looks below :  $configdata = @{    allnodes = @(       @{     ...

when try generate report on group policy modelling new pc have put on network receive following error. an error occurred while generating report: given key not present in dictionary. whilst if same pc has been on domain sometime receive no errors. what issue? group policy modeling runs against dc in domain, rather target client. guess underlying issue have policy settings, applying new machine, don't apply existing one, , policy either corrupt, or you've hit bug in gpmc settings reporting. know policy areas apply existing machines? as example, issue on ms kb describes getting error when using gp preferences: http://support.microsoft.com/kb/2692409/en-us darren darren mar-elia ms-mvp, group policy www.gpoguy.com www.sdmsoftware.com - "the group policy experts" Windows Server  >  ...

first apologize posting here.  have not found windows server 2003 security forum yet.  link appropriate location appreciated. all want know how patch server 2003 box has wmp v10 installed ms07-068.  bulletin has links 9.1, 9.5 , 11, not 10.  vulnerability scanners version of wmasf.dll installed on server vulnerable.  attempts run patch 9.1, 9.5 or 11 fail (obviously). so there patch v10? on side note, looking wmp 11 server 2003 yields versions xp , vista.  assume 1 can run xp wmp 11 version on server 2003, confirmation nice. thanks hi,   <<a link appropriate location appreciated.>>   i suggest post windows server 2003 issue 1 of newsgroups on site instead:   http://www.microsoft.com/technet/community/newsgroups/serveros/win2003.mspx   the newsgroups can either reached nntp client or through web. url general windows server group is:   http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server....

hi all, i see xp sp3 supported hyper-v rc, not see official release of xp sp3. do need wait official release of xp sp3 xp guest work on hyper-v rc? thanks, jon xp sp2 has worked on hyper-v quite time.  i've been running months , works fine - except without integration components, need use ctl/alt/leftarrow free cursor vmconnect window.  sp3 change experience.  and, don't think have long wait xp3, either.   tgc   Windows Server  >  Hyper-V

hi, please advise howto setup direct access windows 7 & server 2012. config home lab dynamic ip. i'd hoped find step-by-step guide screenshots ... s. stevewonb actually i'm looking step step guide, i'm planning next weekend. can have here might help. http://blogs.msdn.com/b/canberrapfe/archive/2012/07/12/simple-direct-access-setup-with-windows-server-2012-rp.aspx http://channel9.msdn.com/events/teched/northamerica/2012/wsv302 Windows Server  >  Windows Server 2012 General

hello, i'm trying configure high available vm failover clustering through vmm 2012 sp1. my environment below spec: storage: ibm ds3512  hosts: ibm x3650 m4 (2 host) management server: ibm x3250 m4 now i'm sucked up on adding storage on vmm 2012 sp1, tried few steps mentioning add smi-s agent on host servers, still couldnt achieve task.   abdul razak guys, i got issue solved on storage part, did follows 1st mapped lun both host through iscsi initiator 2nd installed enhanced storage , iscsi target server features on both host. 3rd installed iscsitargetsmisprov.msi on both host machine. finally used scvmm server specify these 2 host storage provider smis wmi option. abdul razak Windows Server  >  Windows Server 2012 General ...

where in registry on windows server 2003 can find lan printers mac address hi, thanks post. afaik, there no kind of registry key record lan printer mac address. thanks, miles please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Print/Fax

hello, trying write script adds computer object in active directory group.  script works fine if run against computer object has been in ad long time.  however, if run script on object has been added domain, fails.  purpose of process run on newly domain joined machines, isn't working. i following error: the following exception occurred while retrieving member "add": "unknown error (0x80005000)" anyone have ideas why happening , ideas on how fix it?  script below (note: can't use ad cmdlets accomplish have able run servers not have components installed): # parameters, if not specified ask them or set default value. param ([string] $adgroup, [string] $computername) if (!$adgroup) {  $adgroup = read-host "enter active directory group add object to: " } if (!$computername) {     $computername = $env:computername } # set ldap search parameters find computer account. $computerfilter = ...

i thought confident not possible add member server domain when have access rodc, google search got me doubting wanted double check. we have dmz contains 2 rodcs. these have ipsec tunnels read-write dcs, , no other devices in dmz allowed communicate rwdcs. have been asked if can add member servers dmz without having access rwdcs , immediate answer 'no' - rodcs unable add computer objects member servers need access rwdcs able join member server domain.the workaround build member servers on trusted network access rwdcs , move them dmz once in domain. then saw forum post suggested can 'netdon join' command specifying rodc target write referral it's writeable replication partner add computer object. correct or speculation on someone's part? the dcs , member servers concerned windows server 2008, , forest/domain functional level windows 2008. firewalls between dmz , trusted network allow dc dc traffic, , not allowed open them member servers. many in adva...

got issues adminsdholder resolve of losing right send in exchange ; user got admincount of 1 if dont in protected group. im editing on user in adsiedit set @ 0 1 hour later sdholder put 1 , clear right had givent users ... try create new user still have him on admincount 1 domain user protected group ...  hi alex, you can use powershell script below set admincount 0. reset ad admincount attribute , compare protected accounts http://gallery.technet.microsoft.com/reset-ad-admincount-195bf65e#content best regards, amy Windows Server  >  Directory Services

i have 2 windows 2008 server working dc/dns. clients machines are windows 7.auto-configuration proxy.pac file (http://servername/pac/proxy.pac )  being used internet access (ie8) through iis7 . now know configuration, here issue: browsing internet, takes way longer (30-60 seconds)....ie shows "connecting" on left top corner , shows "detecting proxy settings" @ bottom left corner . it takes longer first time , second time page load , there's no delay long first ie page left open. when use nslookup resolve server name fine. using ip address of server instead hostname fix issue rightaway. all network settings seems fine. tried add/remove dns suffix list have seen kind of issue ? how can fix ? hi marius/tiger, ..it turned out ip ver 6 issue enabled on my dns, removed ip6 entry of server in dns and fixed issue. want verify though...that don't need ipv6 yet future use ?? ...

i having trouble ms virtual machine running windows server 2008 ent. times out or stops responding after physically disconnect or log off.  vm configured iis web server , has test site stops responding. if log on site works fine. the host server has 4 nic's. addresses using ipv4. #1 nic dedicated host on 192. local network domain gateway. #2 nic disabled. #3 nic on internal 192. network domain, no gateway. #4 nic on external 66. network, no gateway. using virtual network manager in hyper-v, created 2 vn's, 1 lan (domain) , 1 wan (internet), these added vm webserver.  assigned ip's each, gateway assigned on wan nic.  in iis, external ip (66.) assigned site.  site resolves when i'm logged in, , times out after 5-15 minutes after logging out, domain network doesn't have issues. i've not been able identify why virtual network wan adapter on vm webserver times out.  thanks on this, bill     ...

i apologize in advance ... i'm out of league here, pushing through anyway. 1 - have server 2008 r2 & running. 2 - using rds run application - runs fine, systems normal. 3) set iis , remote apps manager guidelines suggested, told remote app manager make target app available on web , works!   i'm not using , rds broker or of that, server name. when enter url  localhost/rdweb ... comes rdweb server , in remoteapps window app ... , runs!!   but ie8 on localhost.   if open url "server/rdweb" local xp machine on intranet, * remote apps page!!!  not list app.   if address "server" xp machine, default iis page ... iis/web services seem running. if address "server/rdweb" localhost, app shows , runs .. rds , remoteapps seem working.   keeping in mind of greek me ... , authors have penchant writing documentation geared toward people "in club" -- obvious thing can see in error when trying p...

hello, it's been few years since i've done this, have created vpn between 2 companies , 2-way trust between 2 windows 2003 native domains.  now have created group on domain need add administrators groups in domain b, can't select domain (only b), remember has done in way domain local, global , universal groups, can explain how i'm not cloudy/confused, keep simple :) thanks you need "domain local" group; others not work case. see below link explanation. using group nesting strategy - ad best practices group strategy    (written ace-mvp ds) regards biswajit biswas my blogs | technetwiki ninja best regards biswajit biswas disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. mcp 2003,mcsa 2003, mcsa:m 2003, ccna, mcts, enterprise admin Windows Server  >  ...

hi, currently our desk requesting have access our server 2003 sp2 print server. want ability delete print jobs stuck in various queues. take manage documents permissions correct permissions grant @ printer level. have recommendations on permissions? best way desk connect, using mmc console remotely connect? other recommendations. there 3rd party software has used in past or more advanced features well? thanks,   mark morowczynski|mcse 2003:messaging, security|mcitp: enterprise support|mcts:windows mobile admin|security+|http://almostdailytech.com correct. manage documents printer permission need desk able delete print jobs. easiest way can think have them connect through windows explorer. if connect via unc path (ie \\printserver ) can right click on given printer share , choose open manage queue. Windows Server  >  ...

here scenario i have 2008 rodc has no internet connection, , users can't login. is there way configure rodc allow still?   hi,   yes, mentioned before, in order allow rodc authenticate user logon itself, need configure password replication policy cache logon password. password replication policy lists accounts permitted cached, , accounts explicitly denied being cached.   you need ensure connectivity between rodc , windows server 2008 writable dc: ====================   when rodc makes request replicate user's password, writable windows server 2008 domain controller rodc contacts allows or denies request. allow or deny request, writable domain controller examines values of allowed list , denied list rodc presents request. if account password being requested rodc in allowed list rather denied list set rodc, request allowed. so, let rodc cache users' password, should ensure connectivity between rodc , windows server 2008 writable dc @ first. after user auth...

hello, i want move folder on 1 server to server.  example: server 1 e:test server2 f:test. i keep whole shabang in tact (permissions, etc...) from test folder , subfolders intact.  not want inherit permissions parent destination drive.  basically, test folder should not inherit permissions drive f:.  should use robocopy or xcopy or solution? if either can job, can provide example command line?  tried testing cant seem right.  i'll either test folder, test folder subfolders no files or doesnt copy.  ive notice on output logs , using robocopy gui, these access denied errors.  need edit registry in order this? ive read somewhere may need done.  suggestions appreciated. thanks!! hi no idea if 'correct' way it, , annoyingly still have fiddle shares, have scheduled task doing pretty describe. command line use follows: robocopy.exe e:\test\ f:\test\ /copyall /dcopy:t /mir /r:6 /w:60 /e /zb /mt:30 /log+:e:\miref.l...

hi  im using wsus manage pattern file updates scep 2012 clients proplem pattern files applied machines today computers had pattern file (1.185.908.0)  but when check on microsoft website latest pattern file ( 1.185.926.0) synced wsus see if there new files  available , return nothing new... manualy ran "mpam-fex64" , client got update (1.185.933.0)  so seems wsus server missing every other updates,,  can ms slow update there wsus store or wrong wsus.. configured check updates every hour..  i tested let workstation check online updates , result same "no new pattern files"   best regards  jon g jón g sævarsson can ms slow update there wsus store or wrong wsus.. configured check updates every hour.. configured "every hour" bit excessive, more you've not configured wsus server , wsus clients able definition updates in timely manner. in addition synchronizing wsus @ least 3x daily (every 8 h...

hi, have configured user john doe (jdoe)'s email forwarded smith's mailbox.  i running ps query:  get-mailbox jdoe| ft forwardingaddress result:            domain.local/microsoft exchange system objects/will smith how can have result list smith's email address oppose full name. thanks. right, because of 'get-mailbox'.  command 'get-distributionlist'....  here command corrected since didnt take dls consideration. $(get-mailbox jdoe).forwardingaddress | get-recipient | ft primarysmtpaddress Windows Server  >  Windows PowerShell

i borrowed code below , modified suit needs, getting error below, can assist. getting error: move-adobject : operation not performed because object's parent either uninstantiated or deleted   at c:\projects\ad_lockdown\ad_desktop_move_to_noncomp_ou.ps1:75 char:5 +     move-adobject -targetpath $targetou +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : notspecified: (cn=xxxxxxx,o...c=xxxxx,dc=net:adcomputer) [move-adobject], adexception     + fullyqualifiederrorid : operation not performed because object's parent either uninstantiated or deleted,microsoft.activedirectory.management.commands.moveadobject ********replace xxxxx computer name , domain respectively.******** code: *******************************************************************                               ...

i in process of ugrading 2003 domain controllers windows 2008. have primary installed fsmo roles attached , second 2008 dc added mix well. still have 1 2003 dc left decommissioning tonight. have domain uses two-way external trust not transitive , want ensure there no problems decommissioning 2003 dc , promoting domain , forest level functionality 2008.  cannot lose trust relationship nt 4 , must able contact side of network @ times. hi, thanks post. trusts created between windows nt 4.0 domains , ad ds domains 1 way , nontransitive, , require netbios name resolution. for more information, please check link ( http://technet.microsoft.com/en-us/library/cc816837(ws.10).aspx ) hope helps. miles please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server ...