I've noticed that all of the address with the exception of the street address is copied when copying an Active Directory user account. Is there a way to change this? We're currently running a 2003 AD on 2008 DCs and will eventually upgrade the domain level when we activate our new exchange server.
Is it possible to delegate the right to log other users off? I'd like to give users the ability to log another user off of a computer, but I'm not willing to make everyone administrators to do so. We are currently on an 03 domain but are in the process of upgrading to 08. I know I can create a scheduled task to log the user off after a certain idle time, but don't really like that solution either.
I'm not talking about servers. I'm talking about standard client PCs (XP and 7) out in the house and I want average users to be able to log other average users off.
I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under:
Computer/Policies/Windows Settings/Security Settings/File System configured for the %AllUsersProfile% folder, which works great on XP. However it doesn't work on 7 since that points to C:\ProgramData.
Is there any other way to go about this to make it work with XP and 7?
User A is in group 1. Group 1 has Full Control over a network shared folder that contains an executable (Office installation). User A gets the error: "... The specified path does not exist. Check the path, and then try again." on Windows XP. Windows 7 works fine. Add user to Domain Admins group, XP works fine.
If I add Group 1 to the Administrators group on the network share PC, it works. Why would it be checking against the local admins group of that PC when its being executed via the network?
Basically, what group does User A need to be in to execute remote executables from a network share on XP?
Possible Duplicate:
Can you help me with my software licensing question?
When installing 2008 CALs on a 2008 licensing server for a 2003 Terminal Server should I install them as 08s or 03s? Also is there anything else I need to do besides changing the group policy setting to point to the new licensing server? Does the licensing server have to be a domain controller?
Is it possible to configure RD Gateway to, depending on a users group, point them to one term server or another? Just trying to make it work on the domain right now.
I have a Folder Redirection policy and I changed the path on our 2003 domain. However even after gpupdate /force the client (Win 7) still tries to access the old path and give me the "Windows cannot access ..." and the old share. Nothing has changed and the group policy is being applied , it simply isn't updating?
I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is when the local administrator account is not named "Administrator" and is instead whatever the person installing the operating system before it was joined to the domain typed into the user box like "Bob" or "User". The new administrator account gets added, but the old one doesn't get replaced.
Unfortunately we still have some users that require local admin priviledges, or I would just wipe that group rename the admin and be done. Is there any way to remove all other locally created admin accounts and leave the domain accounts in the local admin group via GP?
If I'm being convoluted the Local Administrators group contains these accounts: renamedAdmin, Bob, DOMAIN\someUser. I want it to only contain renameAdmin and DOMAIN\someUser. Any solution to this? Thanks.
What are you all using for your server backups? We have 95% Windows servers and are looking for new backup software without breaking the bank, if possible. I've been looking at ShadowProtect and greatly enjoy how easy it is to use, but I'm still open to other alternatives and want to investigate as many opportunities as possible. It'd have to back up a variety of servers including SQL/Exchange/File Servers, etc. Not looking for anything cloud based or to backup workstations either, we'll keep the backups on local storage or network storage and eventually in safes. Performance is a factor, I don't want to be slowing down the servers anymore than necessary but our current backups take hours so anything comparable or less than that for a full backup of a server would suffice. Easy management is also important, once its set up it shouldn't need to be looked at more often than to verify backups are working and can restore correctly. Thanks.
For an organization still using XP, and that plans to continue using XP for at least another year, do you think it would be better to switch to Firefox 4 or continue to use IE8? Is Firefox configurable via GP? Patchable via WSUS or Local Update Publisher? What do you think?