Search
Register
Login
READ THIS FIRST - before implementing "HIGH SECURITY" recommendations.Threats and Countermeasures Guide - A MUST-READ How to integrate software updates into your Windows installation source filesImproving Security with Domain Isolation -Microsoft IT implements IP Security (IPsec)Guide to Securing Windows 2000 DNS - by NSAAn Introduction to Learning About Network Security - Another SANS MUST readPROBLEMS: Client, Service, and Program Incompatibilities That May Occur When You Modify Security Settings and User Rights AssignmentsActive Directory Operations Overview -Troubleshooting Active Directory Replication ProblemsActive Directory Disaster Recovery Windows Server 2003 Domain Rename Tools You Must Rename the SYSVOL Member Object to Rename a Windows Server 2003 Domain ControllerError using Rendom.exe to change the DNS or NetBIOS name of a W2K3 Domain when Exchange is presentWindow Server 2003 Default Group Policy Restore Utility - Dcgpofix How to rebuild the SYSVOL tree and its content in a domainTroubleshooting journal_wrap errors on Sysvol and DFS replica setsDcgpofix does not restore security settings in the Default Domain Controller Policy to their original stateWin2K3 SP1 DC throws errors if not backed up within a given time periodHow to restore deleted user accounts and their group memberships in Active DirectoryAuthorization ManagerHow to detect and recover from a USN rollback in Windows Server 2003SPNs required by Virtual Server are not registered in AD when you try to install Virtual Server 2005 on a Windows-based DCMicrosoft Virtual Server support policyMicrosoft Announces New Price, and Availability of Linux Support, for Virtual Server 2005 R2Name Resolution in Active DirectoryHow to optimize the location of a DC or GC that resides outside of a client's siteHOW TO: Rename a Windows 2003 Domain Controller Domain Controller's Domain Name System Suffix Does Not Match Domain NameComputer Name Does Not Match the Windows 2000 Domain Name After Upgrade Windows Server 2003 Technical ReferenceTCP/IP Technical ReferenceIPv6 Technical ReferenceHow DNS Support for Active Directory Works How DNS WorksDNS Tools and SettingsDNS Support for Active Directory Tools and SettingsReconfigure an _msdcs Subdomain to a Forest-wide DNS Application Directory PartitionWindows 2000 DNS White PaperWindows 2000 DNS - Good Aging and Scavenging informationBest Practices for Delegating Active Directory AdministrationAutomating TCP/IP Networking on ClientsFrequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNSWindows 2000 DNS - Chapter 6 Windows 2000 Resource Kit Planning for Windows 2000 DNS, Part 1 Planning for Windows 2000 DNS, Part 2DNS Errors 5788 and 5789 When DNS Domain and AD Domain Name DifferA DNS server that is running Windows Server 2003 cannot resolve new A resource recordsUsing the DCPROMO /FORCEREMOVAL Command to Force DC DemotionHOW TO: Raise the Domain Functional Level in Windows Server 2003Memory Support and Windows Operating SystemsCreating More Efficient Microsoft Active Directory-Enabled ApplicationsManage the Active Directory Schema in Windows Server 2003 Enterprise EditionView and Transfer FSMO Roles in Windows Server 2003 Semantic Checker Cannot Rename Conflict-Mangled Phantom NamesWhere groups can be createdDescription and Update of the Active Directory AdminSDHolder ObjectAdminSDHolder Thread Affects Transitive Members of Distribution GroupsDelegated permissions are not available and inheritance is automatically disabled - AdminSDHolderGroup scopeGroup TypesUpdates to Restricted Groups ("Member of") Behavior of User-Defined Local GroupsYou cannot view a user's Universal Group membership in Windows Server 2003 Active Directory Users and Computers when Universal Groups do not reside in the local domainHow to Block Specific Network Protocols and Ports by Using IPSecPKI Enhancements in Windows Server 2003Domain Migration Cookbook - IntroductionHow to prevent overloading on the first domain controller during domain upgradeHow to set up ADMT for a Windows 2000-to-Windows Server 2003 migrationHow to set up ADMT for a Windows NT 4.0-to-Windows Server 2003 migrationYou receive an error message when you try to use version 2 of the Active Directory Migration Tool to migrate a Microsoft Windows 2000 Server domainHow to create MAPI profiles without installing OutlookInteroperability and Migration from Novell Directory ServicesMigrating from Novell to Windows Server 2003DNS: Stub Zones and Conditional ForwardingDNS: Stub Zones and Conditional Forwarding -TranscriptConfigure DNS Dynamic Update in Windows 2003The DNS Client Service Does Not Revert to Using the First Server in the ListExplanation of the Server List Management Feature in the Domain Name Resolver "You must be an Administrator to run this application" error message when you attempt to upgrade to Windows .NET ServerAdministering Windows Server 2003-based computers using Windows XP Professional-based clientsWindows Server 2003 may not use multiple processors with Pentium Pro or Pentium II processorsCluster Setup may not work when you add nodesVision-related accessibility software may not workSound-related accessibility software may not workTroubleshooting Windows Server 2003 Shutdown ProblemsTroubleshooting Windows Server 2003 Startup ProblemsTroubleshooting a Web Server in Windows Server 2003Automated Deployment Services Technical OverviewOperations Performed by the ADPREP When You Add a WIN2K3 DC to a WIN2K Domain or ForestExchange 2K AD Connector Does Not Successfully Replicate Changes to Group Membership in W2K3 AD in Forest Functional Levels 1 or 2Exchange 2000 Recipient Update Service does not replicate changes successfully in forest functional level 1 or 2 in W2K3 ADWindows Server 2003 ADPREP Command Causes Mangled Attributes in Windows 2000 Forests That Contain Exchange 2000 ServersUsing Extension Mechanisms for DNS (EDNS0)How to view and set LDAP policy in Active Directory by using Ntdsutil.exeWindows Server 2003 Remote Access/VPN Server RoleWindows Server 2003 Network Access Quarantine ControlDeploying Remote Access VPNs - Windows 2003Virtual Private Networks for Windows Server 2003 - One Stop References and LinksShadow Copies of Shared Folders: Frequently Asked QuestionsWindows Server 2003 AD Branch Office GuideReducing the workload on the PDC emulator masterOptimizing Global Catalog Server PlacementLingering objects may remain after you bring an out-of-date GC back onlineHow the Active Directory Replication Model WorksFixing Replication Lingering Object Problems (Event IDs 1388, 1988, 2042)Outdated Active Directory objects generate event ID 1988 in Windows Server 2003Event ID 1388 or 1988: A lingering object is detectedAssessing Exchange 2003 Schema Change Replication TrafficHow the Global Catalog WorksHow Active Directory Replication Topology WorksWindows Server 2003 Shadow Copies of Shared Folders Shadow Copy Client: Accessing Shadow Copies on Windows Server 2003Love at First Snapshot (Shadow Copies on Windows Server 2003)
Windows 2000 Server Active Directory HomeConnecting to SMB Share on a Windows 2000-Based Server May Not Work with an Alias NameMicrosoft Active Directory Security CenterStep-by-Step Guide to Active Directory Sites and ServicesWindows 2000 Server Active Directory - SupportActive Directory Disaster RecoveryWindows 2000 Certificate Services and Public Key InfrastructureStep-by-Step Guide to Setting up a Certification Authority Step-by-Step Guide to Certificate Services Web PagesSupport WebCast: Windows 2000 Public Key Infrastructure and Certificate ServicesHow to Create a Bootable Disk for an NTFS or FAT PartitionDisaster Recovery of Active Directory on Dissimilar HardwareSecurity Operations Guide for Windows 2000 ServerPhantoms, Tombstones and the Infrastructure MasterWindows 2000-Based Domain Controller Is Slow to Remove an Object in a Global Catalog Viewing Deleted Objects in Active DirectorySoftware Update Services Deployment White PaperMicrosoft Software Update Server Deployment GuideOverview of Windows 2000 Server RolesCannot remove remote orphan security object from a local domain group in Windows Server 2003 HOW TO Remove Data in Active Directory After an Unsuccessful Domain Controller DemotionHOW TO Remove Orphaned Domains from Active DirectoryEvent ID 1000 and 1202 Occur Every 5 Minutes DCs Limitations in Windows Memory-Mapped File may break Event Log Size settings The event log stops logging events before reaching the maximum log size ADC Filtering and Object-Matching How to Move a Windows 2000 Installation to Different HardwareHow to Add or Remove Windows Components with Sysocmgr.exeWindows 2000 Recovery ConsoleDescription of the Windows 2000 Recovery ConsoleHow to configure Active Directory diagnostic event logging in Windows ServerHOW TO: Enable Kerberos Event LoggingEnabling Debug Logging for the Net Logon ServiceService Pack Deployment Guide (Win2K SP4)Symptoms of Multihomed BrowsersDefault Processes in Windows 2000Step-by-Step Guide to Active Directory Sites and ServicesHow to disable the Knowledge Consistency Checker from automatically creating replication topology Urgent Replication Triggers in Windows 2000How to Enable Domain Controllers to Modify the SchemaUsers Can Log in Using User Name or User Principal NameHow to Change Active Directory Display NamesHow to Configure a Global Group to Be a Member of the Administrators Group on all WorkstationsThe Local Administrator Is Not Always the Default Encrypting File System Recovery AgentComputer Account OU Can Be Specified by Using the Unattend.txt UtilityUnable to Create Windows 2000 Server Image on RIS ServerPassword Complexity Requirements Message Does Not Provide Intelligent InformationChanges Are Not Applied When You Change the Password PolicyUsing Group Policy to Delete Cached Copies of Roaming ProfilesHow to Verify Internet Domain Registration Information with InterNICHow to configure RPC dynamic port allocation to work with firewallsActive Directory in Networks Segmented by FirewallsPort Requirements for the Microsoft Windows Server SystemActive Directory Replication over FirewallsHow to Promote and Demote Domain Controllers in Windows 2000DSACLS Syntax and Usage.Disabling WinXP-SP1 new "Default Program" option.How to Turn Off ESMTP Verbs in Exchange 2000 Server.Users with Roaming Profiles Cannot Use EFS On Domain ControllersModes Supported by Windows 2000 Domain ControllersHow to Automate Windows 2000 Setup and Domain Controller SetupRemove Data in Active Directory After an Unsuccessful Domain Controller DemotionDCPROMO Space Requirements for Active Directory Database and Log FilesWindows NT-Based BDCs No Longer Synchronize After a Windows 2000 Domain Is Switched to Native ModeOne Unsuccessful Logon Attempt May Trigger the Default Windows NT Lockout PolicyGathering Blue Screen Information After Memory Dump in Windows 2000 or Windows NTHow to Delegate Specific Right to Unlock Locked User Accounts How To Install and Use RSoP in Windows Server 2003 Registry Contains a Group Policy Setting That RSoP Does Not Display FSMO Roles Transfer and Seizure in a NutshellKeep Domain Group Policies from Applying to AdministratorsDesigning Organization-wide PoliciesAdd User Wizard Does Not Prompt for User TemplatesHOW TO: Use Adminpak.msi to Install a Specific Server Administration Tool in Windows 2000How To Delegate the Unlock Account Right Configure Group Policies to Set Security for System Services Delegated permissions are not available and inheritance is automatically disabledMinimum Permissions Necessary to Perform Exchange 2000 Server-related Tasks Description of FRS Entries in the RegistryFolder Listing of the Support Tools Included in Windows 2000How to Change the Display Names of Active Directory Users with Active Directory Services Interface ScriptHow to Change Display Names of Active Directory UsersManaging Services Using ADSI and Windows Script HostHow to Use the RestrictAnonymous Registry Value in Windows 2000How to Disable PCT 1.0, SSL 2.0, or SSL 3.0 on IISHow to Manage File Shares Using ADSITrusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data .Using SID Filtering to Prevent Elevation of Privilege Attacks.Cached Logon Hashes -from Is-It-True.ORG.Disable Password Caching in Office 2000 Controlling the Active Directory Search Buffer SizeUsing Ldp.exe to Find Data in the Active DirectoryHow to edit an LDAP query in custom search by using ADSI EditDeleting Objects from Active Directory Using Ldp.exeAutomating the Creation of Computer AccountsExtending the Active Directory Users and Computers Snap-inHow to Reset License Manager InformationHow to Reset License Manager Throughout an Enterprise -(NT 4.0)Configuring License Service Replication in Windows NT Server 4.0 or Windows 2000The Licensing Service (Llssrv.exe) Changes from Started to Starting and Does Not Respond to SCMStep-by-Step Guide to Kerberos 5 (krb5 1.0) InteroperabilityLoopback Processing of Group PolicyKerberos Administration in Windows 2000How to Use NLTEST to Force a New Secure ChannelHow to Determine Trust Relationship ConfigurationsUsing Repadmin.exe to Troubleshoot Active Directory ReplicationStep-by-Step Guide to Distributed File System (Dfs)Initiating Replication Between Active Directory Direct Replication PartnersMicrosoft Certificate Authority Is Required to Perform Inter-Site SMTP Based Active Directory ReplicationHow to Install/Uninstall a Public Key Certificate Authority for Windows 2000How to Optimize Active Directory Replication in a Large NetworkHow to Modify the Default Intra-Site Domain Controller Replication IntervalThe Role of the Inter-Site Topology Generator in Active Directory ReplicationGlobal Catalog Server Requirement for User and Computer LogonHow to Disable the Requirement that a Global Catalog Server Be Available to Validate User LogonsDebugging User Profiles and System Policies in Windows NT4 (Win2K has the dll already)FSMO Placement and Optimization on Windows 2000 Domain ControllersHow To Assign Scripts in Windows 2000Windows 2000 Active Directory FSMO RolesHow to Find FSMO Role Holders (Servers)Flexible Single Master Operation Transfer and Seizure ProcessHow To Delegate the Unlock Account RightHow to Automate Ntdsutil.exe Using a ScriptHOWTO: Use ADSI to Query the Global Catalog for a UPNHow to Verify the Creation of SRV Records for a Domain ControllerAuthoritative Restore of Active Directory and Impact on Trusts and Computer AccountsAuth Restore of groups can result in inconsistent membership information across DCsHOW TO: Perform an Authoritative Restore to a Domain Controller in Windows 20000How to Change the Recovery Console Administrator Password on a Domain ControllerAuthoritative Restore of Active Directory and Impact on Trusts and Computer AccountsPurpose of the BOOT.INI FileSafe-Mode Boot Switches for Windows Boot.ini FileSafe Mode with Networking Does Not Support NWLink IPX/SPX NetBIOS-Compatible Transport ProtocolDescription of Safe Boot Mode in Windows 2000Situations in Which Windows May Not Start in Safe ModeRestoring Previous ControlSet After Using LastKnownGoodHow to Install the Windows Recovery ConsoleHow to Change the Recovery Console Administrator Password on a Domain ControllerHow to Copy Files from Recovery Console to Removable MediaAssign Software to a Specific Group By Using a Group PolicyDescription of the SET Command in Recovery ConsoleHow to Disable a Service or Device that Prevents Windows from BootingGathering Blue Screen Information After Memory DumpHow to Use Dumpchk.exe to Check a Memory Dump FileBooting From Mirror After Primary Partition Is LostCannot Delete Files or Folders with Extended CharactersBOOT.INI and ARC Path Naming Conventions and UsageHow to Create a Bootable Disk for an NTFS or FAT PartitionMaster Boot Record Not Written to Mirrored Shadow PartitionSetting Up the Domain Name System for Active DirectoryPrimary and Active Directory Integrated Zones DifferencesActive Directory-Integrated Domain Name Is Not Displayed in DNS Snap-in with Event ID 4000 and 4013 MessagesName Resolution and Connectivity Issues on Win2K DC with RRAS and DNS InstalledMoving a DHCP database to another serverInstalling DHCP and DNS on a Domain ControllerDHCP Dynamic Updates with DNSConfigure DNS Dynamic Update in Windows 2000DHCP Registers NetBIOS Names with DNSRouting and Remote Access IP Addresses Register in DNSHow to Enable/Disable Windows 2000 Dynamic DNS Registrations -Registry HacksMicrosoft DNS Server Registry Parameters - Part 1 of 3Microsoft DNS Server Registry Parameters - Part 2 of 3Microsoft DNS Server Registry Parameters - Part 3 of 3Registry Settings for the Microsoft DNS Server Record Is Registered in DNS even if You Choose Not to Register the Connection's AddressDynamic Update Is Set to "None" for a DNS Root ZoneDNS Client Name Resolution in Windows 2000 ServerThe Structure of a DNS SOA RecordCreating a DNS Alias RecordDescription of DNS Reverse LookupsDescription of the DNS SRV Resource Record TypeDNS Records Registered by Windows 2000 Domain ControllersHow to Create a Caching-Only Name Server with Microsoft DNSExplanation of a DNS Zone TransferUsing NSlookup.exeHow to View Saved DS, DNS, and FRS Event Logs from Another Windows 2000-Based ComputerHow to Identify Group Policy Objects in the Active Directory and SYSVOLVirtual Private Networks for Windows 2000Access Control Entry Inheritance Changes in Windows 2000Access Control Entry Inheritance for Active Directory ObjectsDomain Security Policy in Windows 2000Windows 2000 Security Templates Are IncrementalHow to Publish non-MSI Programs with .zap FilesHow to Distribute Terminal Services Client Using Active DirectoryHow to Push the CD Key with a Windows Installer InstallationWorking with Transforms for Assigned or Published Programs in Active DirectoryHow to Patch a Software Installation Stored on a Network Server That Is Deployed Using Microsoft Software InstallerHow to Integrate Product Updates into Your Windows Installation Source FilesFolder Redirection Feature in WindowsRegistry Settings for Folder Redirection in WindowsConfiguration of the My Documents FolderRedirecting the My Documents Folder for All Users in Windows 2000Files Excluded from Offline Synchronization -Client-Side Caching (CSC)-%UserFirstName% and %UserLastName% Variables Are Not Resolved in Remote Installation Services TemplateRequirements for Imaging Clients with Riprep.exeHow Windows 95 and Windows 98 Directory Services Client Uses AD Site InformationVersion Conflicts with the Directory Service Client Version of Windows 95 and Windows 98 System FilesMapped Drive Access Denied to Windows 2000-Based ServerPXE Client with Revision .99j Boot ROM May Not Be Able to Contact RIS ServerDescription of PXE Interaction Among PXE Client, DHCP, and RIS ServerAssigning a Windows Installer Package with Minimal InteractionHow to Add Third-Party OEM Network Adapters to RIS InstallationsHow to Configure Microsoft DHCP Server for BOOTP ClientsOptional Registry Parameters for the BINL ServiceRemote Installation Rbfg.exe Tools Works Only in Windows 2000How to Use the MoveTree Utility to Move Objects Between Domains in a Single ForestUsing Group Policies to Control Printers in Active DirectoryInstalling Windows XP Service Pack 1 by Using Systems Management ServerDescription of the DNS SRV Resource Record TypeAutomating the Creation of Computer AccountsGroup Type and Scope Usage in WindowsOptimizing Windows NT for PerformanceCreating Performance Alerts in Windows 2000Initiating Replication Between Active Directory Direct Replication PartnersHow to Optimize Active Directory Replication in a Large NetworkUrgent Replication Triggers in Windows 2000Default Security Concerns in Active Directory DelegationHOWTO: Manipulate the ThumbNailPhoto Attribute of a User Object in the Active Directory
