|
I'm not 100% sure, but I think you may need a second DC off that host. If the host goes down, it will not be able to authenticate to the DC because the DC went down with it. With a second DC off the host the host will be able to authenticate to the backup, which will be a copy of the primary DC.
edit: After looking around a bit I found this http://technet.microsoft.com/en-us/library/dd239199(WS.10).aspx[^]. It shows the best practices of 2008 but the principles filter down to 2003.
AD Best Practices wrote: 2003 Do not join the instance of Windows Server 2008 that is running on the parent partition to the Windows SBS 2008 domain.
If you install the primary and second servers on virtual machines on a single physical computer, and you join the instance of Windows Server 2008 that is running on the parent partition to the Windows SBS 2008 domain, a cyclic dependency is created between the parent and child partitions. If this occurs, the domain controller on the virtual machine is unavailable, and it can become more difficult to manage the parent operating system. However, you can mitigate this issue if you have an additional Active Directory domain controller on a different physical computer in the domain. In this case, you can join the parent partition to the domain.
/edit
Zach
modified on Monday, November 9, 2009 10:00 AM
|
|
|
|
|
hi i just formated my pc and installed WinXP sp3. now when i lock my comp. (Windows + L) or (ctrl + alt + del) it loses connection (LAN). is there any registry hack or something else because it didn't do this before formating?
|
|
|
|
|
I have a client server applicaion. on the server side it uses ISAPI.dll and ilaServer.exe on windows 2000 server with IIS 5.0
build in C++
for some reasons the IIS hangs. and the IIS need to be restarted to set back to work.
I want to know the root cause for this hangs, and analyse the problem and reslove it.
source was in VS 2005. I tried using Dr. Watson Dumps
And tried to analise it in VS 2005, but it is not compatable (VS says it is old version of dump file )
Can you pls help & advice
|
|
|
|
|
Hi, how could we disable other created admin user account to reset the password of built-in admin user account in windows xp?
Thank in advance!!!
|
|
|
|
|
What do you mean? Disabling other admin accounts won't affect the built-in administrator.
|
|
|
|
|
I mean when I create the other admin account for the other user, they usually reset my built-in admin account. What I prefer is not allow them to reset my admin account while they still have the other right to perform my system.
Please let me know if you still unlear about this point.
|
|
|
|
|
Oh you mean a human is changing the password...
Do the other users need administrative privileges? Can't they operate as standard users?
(Just to check the obvious solution)
Strictly speaking, there is really no certain way of preventing people from resetting the password if they have physical access to the machine. Utilities like this[^] make it quite simple.
-- edit --
I dug around the security policies, but there seems to be no way of doing what you want. Anyway, even if you did restrict it by a security policy, anyone in the administrators group can remove the policy.
One idea is to rename the administrator account, to make it hard to identify.
Go to Administrative Tools -> Local Security Policy
Inside Local Policies -> Security Options, there is an option to rename the administrator account. Set it to something like Jack, or whatever will pass as a regular user there.
Of course, this will only make it a little difficult, anyone can check the same setting.
The best way is not to add anyone to the administrators group, and fix whatever doesn't run as a regular user. Or tell them not to touch the admin account...
|
|
|
|
|
Indivara wrote: Oh you mean a human is changing the password...
Do the other users need administrative privileges? Can't they operate as standard users?
Yes, the human change the password. He was grant the administrator privileges because of the management team decide so based on his task. So it is ok if he just his task. But that is not enough. He change my built-in administrator password which it mean like steal my identiy to do something. I still be able to reset it back because I'm the enterprise admin but this problem cause me a lot of time to monitor it. That is why I just want to give him an admin privileges but not allow him to reset my admin password.
Indivara wrote: One idea is to rename the administrator account, to make it hard to identify.
Go to Administrative Tools -> Local Security Policy
Inside Local Policies -> Security Options, there is an option to rename the administrator account. Set it to something like Jack, or whatever will pass as a regular user there.
Well this is not solve my problem. Since he as an admin priviledge, it is very easy for him to view admin account name and especially reset an admin account password.
Now I might set the auditing on account management policy to determine when he reset the user account of my built-in admin account.
Thank for your idea!!!
|
|
|
|
|
You are welcome!
As I said earlier, it is probably better to ask the person concerned not to reset the password. Using auditing to monitor him is a good idea...
|
|
|
|
|
Hi All,
I'm new to the Exchange Server and at the moment I'm researching options for transitioning Exchange server 2000, so at this point I'm looking at 2003 or 2007 (we aren't wanting to consider 2010 even though it could be released by the time we are ready to carry the transition out, due to the bugs new software usually come with).
Please could you give me some pointers on what I should be looking for? What should I be comparing e.g. number of storage groups/databases?
It seems to me that 2007 is the obvious choice but why 2007 over 2003?
Are there guidelines I should follow, information on the existing system I need to gather?
Any help/advice on this would be really appreciated.
Thanks,
MWRivera
|
|
|
|
|
That's a slightly large subject to reply on.
I usually find that Slipstick[^] has the info or articles I need on the subject though.
|
|
|
|
|
I need a script to upload a file to an FTP server on a daily basis. The code can be in VB Script or Active-X or DOS commands in batch file. I can use window's scheduler to run that script daily. The FTP Server will have user name, pw to upload files.
Please help me in above regard.
Thanks in advance
Srinivas Mateti
|
|
|
|
|
Ok, ftp scripts are really simple. You can read on the details here
http://support.microsoft.com/?kbid=96269[^]
To schedule the script, create a task to call the ftp executable (in system32), with the script file path as the parameter.
|
|
|
|
|
how to create banking system in java language
|
|
|
|
|
By gathering very detailed requirements for the system, lots of discussions with the customer on functionality, data storage, reporting specifications, and writing code to meet those requirements.
|
|
|
|
|
Dave Kreskowiak wrote: writing code
Excellent! Please send.
BDF
People don't mind being mean; but they never want to be ridiculous.
-- Moliere
|
|
|
|
|
|
We have migrated our web site to new web site (don't ask why?)
In order to help us with the transition, we created 301 redirect, from the old web site to the new web site, in IIS. The redirect looks like
http:
This handles all the sub directory as well as query string nicely. we tested the redirect and works great, except for https requests.
Both the new and old web sites have mixed protocol (some pages are http while other https). The redirect for https takes to http not https.
We checked IIS setting, googled, and pulled our hair with no result.
So, Is it possible to redirect http -> http and https -> https on the same web site?
N.P. If we change the redirect to
https:
then all the request gets redirected to SSL, which is not what we want.
|
|
|
|
|
Hi All,
I've carried out research on this but just wanted other professionals’ feedback on this.
Our existing mail server has Windows server 2000 with Exchange server 2000 on it and we now have a new server with Windows Server 2008 (not R2).
What version of Exchange server would you purchase in order to migrate the existing Exchange server 2000 over? Exchange Server 2007 or would you wait for Exchange Server 2010, which I read is going/gone to RTM any day now?
Thanks in advance
MWRivera
|
|
|
|
|
I just found the article below, which makes me think that Exchange Server 2007 is the way to go being that we would be migrating from Exchange Server 2000. According to the article it says that there is no direct route to migrate directly from 2000 to 2010.
Not to mention 2010 is just being released and who knows what problems it will pose. What do you think?
http://blogs.dirteam.com/blogs/davestork/archive/2009/08/23/the-road-to-exchange-2010-migration-paths.aspx
If wanting to migrate to 2010 would that mean buying license for the intermediate version of exchange (2003 or 2007) and then for 2010?
Thanks,
MWRivera
|
|
|
|
|
2000 to 2007 should be relatively straight forward as they can co-exist in the same Exchange organisation. We did a staged upgrade to 2007 from 5.5 via 2003 due to there being no straight migration path for that upgrade.
I don't recall mention of migration from 2000 to 2010 in the presentation on 2010 I saw at Tech Ed. presumably since MS believe we all upgrade as soon as there is a new RTM product!
There are some reasonably significant architecture changes from 2007 to 2010 but not nearly as big as the change from 2000 to 2007 will be for you. 2007 is possibly a better bet at the moment simply because it has had some time to bed in. MS have said their new policy is to put the product out once it works and add polish afterwards. This means GUI control of some features comes later although most functionality will be accessible from the CLI in the initial release. This was certainly the case with Exchange 2007.
|
|
|
|
|
Dear friends
I want to run rsh command from windows command prompt just to launch a command or an executable on a separate machine
this is what I do
rsh 192.168.4.223 -l comp1 dir
and this returns me
> 192.168.4.223:Connection refused
rsh: can't establish connection
can somebody explain this...
what should I do to run a command on a remote machine
thanx
ranojay
|
|
|
|
|
Ranojay wrote: > 192.168.4.223:Connection refused
rsh: can't establish connection
The machine at IP addresss 192.168.4.223 does not allow an rsh connection. Check that system to see why it is refusing the connection, possibly a firewall issue.
|
|
|
|
|
I couldn't find, where should I write this topic.
I want multi mouse pointer in operating systems 
I want to fly but I don't have wings
|
|
|
|
|
Windows only supports one mouse cursor at a time.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
