sukh

correct. Full will only let you recover from your last full successful backup.

1. You need a min of Win 2003 Sp1 for your scheme. Yes we had Sp2 on the DC and some DC's as Win 2003 R2. 2. Yes, we still have 2003 DC's in place 3. Our 2008 DC's are R2 and have Exchange running with R2 I assume you are going to use DAG? If so you will need Ent Edition. Sukh

IF there is only one server as stated in the post which peforms the role of a DC in addition to holding the files, then users wont be able to access files. Edutechforschools will only know. can However they can at least access the internet/intranet. Even so, why not have the files/shares replicate to the second DC and provide more availabilty instead of seperating the DC/shares on each server. Even if your have RAID setup, this only protects you from hardware failure. This doesn't cover protection at the application layer. Where as having multiple server DC's (and other roles such as DNS/WINS/DHCP) offer this. This way you're covered at the hardware level and application level. This doesn't mean you shouldn't have RAID. Also, if it is a single server then need to ensure that it FT all around, i.e network cards, teamming, CPU's, RAM etc.. This is why I recommend having two DC's, this way your core infrastructure is HA. Sukh

Let us know how you get along.

No reason why you can have WSUS or your AV on your DC as well.

@Michael - I suppose the disadvantage would be that if the main DC goes down, then all your users (staff, admin and students) will be impacted serverly and wont be able to work. Moving all the roles to a single server is a single point of failure. Depending on what the server does in addition to being a DC (DNS/DHCP/WINS) I do see this as an oppportunity to make services highly available and minimise downtime. Most applications will still work on a 64bit server it still has a 32bit hive. More issues are around drivers/hardware. Sukh

PM me your details Sukh

There's always workarounds which can work. However, if a supported configuration is not supported by the vendor, I generally wont move away from it in terms of support. You don't know what other issues it can cause. If you're not concerned about support then you can attempt to try and see if it works. You wouldn't deploy Win 7 to a PC where it doesn't meet the pre-reqs (hardware), if you had a MSFT contract and there were issues with drivers which may be a cause, they wouldnt support you. Not sure where you can download from now, if you have site, I can upload a copy for you (trial 90 days). Sukh

Hi Intel suggest no. Desktop Boards — Supported operating systems Have you tried to deploy and faced issues. Sukh

High Availability/Fault Tolerence. Sukh

Hi 1. If you have a spare server and there's no other use for it. I would use this a a backup DC, provide HA/FT. 2. You can leave the server as Windows 2003 but I would recommend you rebuild to W2K8R2. As windows 2003 will be retired soon and to use new features of W2k8R2, you need to get rid of Windows 2003 DC and raise Fores/Domain func. Sukh

I would check what James has suggested, also, for any other GPO's that you may have applied at the OU level, i.e if you have a OU for computers/laptops etc... If the issue still remains, get results from gpresult and post here. Sukh

@Edu-IT I assume you are using a full recovery model. Therefore, your thought is correct. Simply doing a full backup won't mean log truncation will occur. You have to backup the log files. If you're not concerned about point in time recovery then you can backup the logs to disk and keep for x days which will then delete the logs. Then continue with your normal backups in additon to your transaction logs backups for x days and deletion after x days. Sukh

@witch In your unattend.xml file under the section Microsoft-Windows-Security-Licensing-SPP component, set SkipRearm to 1 then save this. Then try to sysprep again. If you plan to sysprep /generalise more than 3 times, then you have to set this setting to bypass the activation clock. Also, ensure the reg key is set. Can you also check %WINDIR%\System32\Sysprep\Panther directory for any log files such as seterr.log and post/PM. Sukh

@witch In your unattend.xml file under the section Microsoft-Windows-Security-Licensing-SPP component, set SkipRearm to 1 then save this. Then try to sysprep again. If you plan to sysprep /generalise more than 3 times, then you have to set this setting to bypass the activation clock. Also, ensure the reg key is set. Can you also check %WINDIR%\System32\Sysprep\Panther directory for any log files such as seterr.log and post/PM. Sukh

@witch - What didn't work? Both the reg key and injecting drivers. Just to confir, the issue you still have is that you dont see a volume? Sukh

@witch - Not sure where you are with injecting drivers? HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\GeneralizationState to 7 then try tp sysprep again. Sukh

@gareth - Have we nailed the slow GPO processing to one GPO, i.e the IE GPO? Or is GPO processing still slow with other GPO's? Sukh

@gareth - PM me the file. Have you nailed the GPO to one policy, i.e IE GPO? Sukh

Hi Generally I would only create the groups and mail enable from EMC or EMS. Key is to have universal. Sukh

Hi This is exactly what they are used for. Use one mail-enabled security group for ACL and mail. If you decomm Exchange only those attributes will be moved the group, the ACL will still be applied. Sukh

Hi You can test at any prometric centre. Go to their site and schedule the exam. As for the course code. Check on MSFT learining site and will list this course. Sukh

I'm not by a PC, I'm sure there's a thread here, there are a few. If it's only 2 PC, then it may be worth imaging V troubleshooting, unless you really want to know root cause. Sukh

Hi There's a few threads here which have some troubleshooting steps which you can follow. Search for WSUS. Also, look at the 6th thread in the windows 2000/2003 server forum, may be of help. Sukh

Haven't seen links yet, probably won't until thursday, few others I know are having issues. Will let you know, working on a fix/workaround unless those links have one. Sukh