GNUix's questions

When we migrate our production DCs to Server 2008 I would also like to move away from FSR to DFS-R for SYSVOL replication. My problem is that I setup a quick lab to test it out but it's not going as planned. I'm sure I'm just overlooking something obvious but I can't seem to figure out what :)

Here's what I'm doing 1. Installed two server 2008 machines (R2) and promoted them to domain controllers - with Server 2008 (Not R2) being the forest and domain functional levels.

2. Verify that standard replication is working by placing some stuff in SYSVOL and make sure it ends up on the second domain controller.

3. I then attempt to start the DFS-R migration process but dfsrmig.exe /setglobalstate 0 or dfsrmig.exe /setglobalstate 1 both report that I'm already at stage 3 ('Eliminated')..

So what am I missing?

I know how to find what Domain Controller's have roles using the GUI tools in windows, now I'm trying to make sure I can do it from the command line. Below is what I'm trying but its not working -- I believe I'm missing a port number.. but what is the default port number?

PS C:\Users\Administrator> ntdsutil
C:\Windows\system32\ntdsutil.exe: roles
fsmo maintenance: connections
server connections: mydc.fqdn.dom
Error parsing Input - Invalid Syntax.
server connections:

I'm pretty sure the syntax is supposed to be

PS C:\Users\Administrator> ntdsutil
C:\Windows\system32\ntdsutil.exe: roles
fsmo maintenance: connections
server connections: mydc.fqdn.dom:port

I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file.

furthermore, why does MS still distribute some of its software (WMI Tools) as .exe

I have a set of users that I want to be able to install ActiveX controls from websites. I have deployed a GPO that allows them to do this, however I still fail when it comes to UAC. The ActiveX controls install, but then require administrative priv to run. Is there a way around this? currently I have those users in the local administrator group because its the only way I can see around it.