Slartibartfast

Knowledge of server virtualisation (particularly Hyper-V) would be advantageous!

What's the DNS configuration on the DC network interfaces? How are the DNS servers ordered on there?

I'll probably pop in on Friday - just a short hop on the tube from my office!

Your share permissions (not NTFS permissions) are probably wrong - these default to Everyone - Read Only by default - they should be Everyone - Full Control.

ICT Solutions have not always filtered WSUS - it used to work quite happily! The 407 error is probably due to AD authentication on the cachepilot - there's a config option in WSUS to adjust the proxy authentication settings. The upstream WSUS server used to be 10.96.207.100 but could well have changed since I last looked.

Have you guys split the roles across at least two servers - client access/hub transport on one and mailbox on the other?

This is a fun bug! We had to shut down all VMs (couldn't vmotion), update each host and bring everything back up again. Oddly, it only affected one cluster; another was absolutely fine!

Can you post the results of dcdiag and netdiag?

If you have multiple domain controllers the DNS network connection configuration on each DC should list the other DC IPs first with the local IP being the last on the list.

D'oh! Virtual Hosts on Apache serve a similar purpose. I don't think that's possible under IIS.

You might be able to perform a 'repair' installation using the VL media.

SRV records can do this. See SRV record - Wikipedia, the free encyclopedia

What version of Exchange?

It may also be advisable to take the opportunity to tidy up permissions on the home folders (using xcacls.vbs as suggested above).

Both sites use DFS R2 replication. Have a look at: John Howard : DFS Namespace Active Directory blob size in Server 2003 R2 (but I don't think there are enough links for this to be an issue) I'd be very surprised if this was anything to do with the RAID controllers - the RAID configuration (and hardware) differs between sites. Have you created a DFS diagnostic report?

I use OTRS:ITSM (OTRS::Enterprise Open Source Trouble Ticket System - Service Support System::Welcome!) here, having recently moved away from GLPI. While the OCS Inventory integration was great, GLPI's handling of incoming e-mail was rather crap (no attachments, incoming e-mails not linked to existing tickets etc).

Defragmenting a drive can cause the shadow copies to be deleted (see Shadow copies may be lost when you defragment a volume). I suspect that this may be due to the shadow copy storage area being on the same volume. I encountered this issue the other day (VolSnap Event ID 25) - moving the shadow copies to another volume seems to have solved it (but beware of All shadow copies of shared folders are deleted when you start Windows Server 2003). Also see http://support.microsoft.com/kb/826936/en-us .

You can redirect Application Data and Desktop with Group Policy.

Just to clarify, there is no such thing as a 'primary' or 'secondary' DC - this is an NT throwback. A DC is a DC.

http://www.reephamhigh.com/content/blogcategory/29/89/ There is a very good chance that the closing date for this post will be extended. The template of that site looks rather familiar...

Domain admin accounts should not be for day-to-day general use.

I would create a group ('User Administrators' or something), assign permissions to that and then add the user to that group. Assigning permissions to individual users is a pain to manage. After setting up a group and assigning the permissions to it, you can just add users to the group as necessary without having to fiddle with xcacls every time.

I'm up for that!

A DHCP server with free addresses will offer an IP address to any network adapter that requests one. The domain is irrelevant. The client sends a broadcast to discover DHCP servers; from the looks of it your 2008 server was the first to respond with an address offer.

Redirecting 'Favourites' in this fashion appears to stop group policy assigned favourites appearing. Other than that, it works perfectly.