jmair

Lucky enough the batch didnt need to change to much.. Here is the example I'm using in case this can help anyone else. I have a batchfile in the root of the folders that share the usernames of the folder. for /D %%I in (*) DO iCACLS.exe "%%I" /T /grant "mydomainname.int\%%I":M "mydomainname.int\Domain Admins":F pause This gives the user Modify permissions and the Domain Admins full.

I have 400 folders on a server with individual access. Each foldername is the name of the user and I used to use xcacls to manage individual permissions for these folders on Win server 2003, now that we've moved to 2008 xcacls doesn't work. What's the new hip replacement for something like this?

I'm wondering if part of the problem could be that I'm also logged into a samaba share. But we're getting locked out very often (every 10-20 min).. I've made a new OU for the Admin accounts and removed inheritable policies and changed the account lock out policy to 99 login attempts to see if that's what is causing the lockouts. I'll post results in a bit. Thanks for the help MYK-IT. *** yep.. Changing the login attempts fixed the issue. I can only guess that samba also has something to do with it unless somebody else has been trying to lock out my account constantly for the last week. Thanks again MYK-IT

Where can I go to change how often a user gets locked out in Group Policies. I have a user account (two of them) that are admin and often have several remotes to other machines at the same time. These accounts are getting locked out, but where in GP can I change this?

Looks like it's working. Not sure what I did any different. But I'm not complaining. Thanks for the help guys!

Serverside it's Server 2003 R2 64bit, client side currently is XP s2 or higher (depending on the client machine)

very new to the 2008 server and I'm running into a login script issue. This is how I have my login script setup GPO/Teachers_OU/ User Configuration/Policies/windows Settings/Scripts(Logon/logoff)/ it targets a login.bat The login.bat is located in sysvol/mydomain/scripts/login.bat I checked the permissions on the scripts folder, and authenticated users have read/execute. from the client machine, i can navigate to the login.bat file and run it. It works fine that way, so I'm assuming I'm missing something simple yet fundimental to 2008 GPO. Thanks!

[solved] I shared the NTbackup bkt file full access to everyone and restored. In the advanced tab, I unchecked 'Restore Security Settings'. After restoring, the destinationfolder looked empty. I then checked the properties of the parent folder and noticed the gigs of data I was trying to restore inside.. I then hid, and unhid the files and they all were visable again.

I'm trying to restore data made by our 2003 server on a diff network. I'm trying to restore some files to my drive and continue to get (to the effect of) " Some Files Were Not Copied Over - Access Denied " I've changed the owner to myself. I've updated the security permissions to me and still get the same issue. Ideas?

Reinstalled from scratch again.. Nothing installed except clean os from a stamped win 2003 std disc I've used a million time already and the presetup disc from HP so the install will see the scsi Raid drives... Anyhow, same issue. Even with firefox. I also can't ping/tracert microsoft or (and this is the scary part for me symantec.com) just like those old virus used to do. It's a six year old machine anyhow and this sounds like a good time to start finding money to replace the machine =) Thanks a ton again for the support again guys.

via the HP disk. initially locally, but remoted into it from home working on the issue. Also, I've been able to install SP2, but still no microsoft.com or windows update site. (sp2 was via other machine's download.)

I agree, I've seen that also. However no software, (including java, adobe etc) are installed yet. Just Server 2003 and drivers from the HP driver disc. I have noticed after I tried to install Veritas, that it also fails to install. So I'm wondering if it's more than just microsoft.com (perhaps it's an activex install that's failing) I'm currently trying these steps on You cannot install some updates or programs

I have one of the wierdest Windows 2003 installs to date for me. I'm stumped and I hope one of you can assist. I just did (now my second) clean install on a server that crashed. I go to Windows Update and ie 6. cannot display the page. I double check all ip, subnet dsn stuff and it's fine. Then to confirm I have no internet, I go to Google. Problem is, it seams that I can get to any website, except microsoft.com and any other windows site. I use the KVM to check if another server is having the same issue, and it's not. To doublecheck again my mic settings, I copy all but the ip of the nic of the known server able to access microsoft.com. this is a server 2003 standard install. All drivers are installed, but I can't get to windows-update site.. ideas?

A few years ago I had a vbs script that would pull users from an Excel sheet and put them in my Windows 2003 Active Directory. I've tried searching for something like this again, but haven't found anything and to be honest, I'm not sure if it would work in 2008 R2 anyhow. Would any of you have one to share by chance?

I have to take the PCD down to make some serious changes, and to clean the dusty beast. What would you suggest to have the network functional while the PDC is offline?

Global catalogue -CHECK DHCP and DNS Installed - CHECK DNS Replication - CHECK Able to see both servers from both servers in AD Sites/Services and DHCP (scope identical to primary dns) Still when I unplug the Primary DNS, clients cannot log into the domain. Shouldn't the BDC just take over transparently? I know I'm missing something, any ideas other ideas?

NOPE! I'll look that up now.. and thank yuo for the quick reply!

I finally added a Backup Domain Controller yesterday. I've got to be missing a step though. When I take down my primary Domain Controller (restart or just unplug the cat5) users can't log onto the domain. Other than adding the secondary domain controller to the network, is the something I need to do afterwords in order for it to be recognized by on the domain so clients can log in? (I've checked the both DCs and have seen that the records swap and that both servers are domain controllers.. or it appears to be that way anyhow.) I'll be happy to provide any info to help solve this little problem.. Thanks!

Our school board has requested that our Maintenance Department implement software so they can generate reports and keep track of where the money goes etc etc... I was wondering if any of you have software in place such as this and can suggest something before I make a blind purchase.

I'm a huge fan of starting fresh and clean with major upgrades on PCs. However, I need to upgrade our email server from server 2003 to 2008 and the exchange from 2003 to 2010. Instead of upgrading though, I would like to format the drives and start from scratch with Server 2008 and exchange 2010. My questions are.. 1: Will I run into an issue of trying to name the rebuilt server the same as before? 2: Can I simply export all mailboxs to a pst file and import them later without an issue? Any advice or suggestions are welcome.

I looked at my firewalls logs and noticed that port 1935 (an adobe port from what I got from google) is not only #1, but #1 by leaps and bounds. 1: TCP Port 1935 (6,1935) 817 MBytes 2: Send E-Mail (SMTP) (6,25) 64 MBytes 3: Web (HTTP) (6,80) 60 MBytes Anybody know what else this port could be used for as default?

First, thank you all for the replies. The reasoning for going more 'paperless' isn't about the environment, for us it's trying to take the first steps in switching from an analogue style of communication that's comfortable to most of us to a digital style of communication that's comfortable to the students. _Adam_ , when you get a chance, could you PM me with some example of how you're using Sharepoint and Acrobat with students and staff?

I've been asked to sketch out a 'dream' scenario where there is a paperless, bookless, pencil and pen-less classroom. Has anybody done this? Any suggestions for me? How do you do it?

I have all the students running through ISA 2006. They are on a 'white list'. Only sites staff have given the ok for is what they have access to. I've made a custom google search page on our website and have given domain and url exceptions to our site and a few of the custom google search urls that are static. The problem is, I want to be able to wildcard a url string exception to look like - Google Search but I only know how to do it for a structured domain url string like http://www.google.com/somepage/* Below is a complete url that is getting blocked. And this will change based on the search string. http://www.google.com/custom?hl=en&client=google-coop&cof=FORID:9%3BAH:left%3BCX:Park%2520County%2520School%2520District%2520RE-2%2520Google%2520Search%2520Engine%3BL:http://www.parkcountyre2.org/images/stories/2009/logo/logo1.jpg%3BLH:100%3BLP:1%3BT:%23333333%3BLC:%23333399%3BVLC:%23663366%3BGALT:%23000000%3BKMBGC:%23E6E6E6%3BKMBOC:%23CCCCCC%3BKMTC:%230000CC%3BKMTVC:%230000CC%3BKMUC:%2300CC00%3B&rurl=http://www.parkcountyre2.org/googlereturn.html%3Fcx%3D006744015453707654308%253Af2ciscck6cw%26cof%3DFORID%253A9%26ie%3DUTF-8%26q%3Dred%2B%252330%26siteurl%3D10.1.1.5%252Findex.php%253Foption%253Dcom_content%2526view%253Darticle%2526id%253D200%2526Itemid%253D38%26google_rsg%3D__AvFb8ACbtgsjMzE4cWvct_5jZR8%3D&cx=006744015453707654308:f2ciscck6cw&ad=w9&adkw=AELymgX5STQKOsITehhR9eFyQfbeSdgfdDtIOGFjfHgPGMgMJjIPI7d5UUXrsWclvEGr-4fxlYqguRrxOHt8WzuFfsN83iiv-WCJFj7Zf-eKmkdiI9X8R5o&boostcse=0&q=red+%2330&start=90&sa=N

Thanks!