I used them as i worked on different enviroments and problems.
Account Lockout
Account Lockout Best Practices White Paper
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx
Tracking the Inside Intruder Using Net Logon Debug Logging in Microsoft Windows Server Operating Systems
http://www.microsoft.com/windowsserver2003/community/articles/art_tracknetlogdebug.mspx
Users and Groups sample scripts on Technet
http://www.microsoft.com/technet/community/scriptcenter/user/default.mspx
Account lockout policy overview
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/password_lockout_concept.asp
KB articles
817701 Service Packs and Hotfixes That Are Available to Resolve Account Lockout
http://support.microsoft.com/?id=817701
822703 How to Determine Whether Users Changed Their Passwords Before an Account
http://support.microsoft.com/?id=822703
250873 Programmatically Changing the Lockout Flag in Windows 2000
http://support.microsoft.com/?id=250873
279723 How to Grant Help Desk Personnel the Specific Right to Unlock Locked
http://support.microsoft.com/?id=279723
262177 HOW TO: Enable Kerberos Event Logging
http://support.microsoft.com/?id=262177
109626 Enabling Debug Logging for the Net Logon Service
http://support.microsoft.com/?id=109626
328867 XADM: Exchange Instant Messenger May Cause Domain Account Lockout After
http://support.microsoft.com/?id=328867
323466 Availability of the Active Directory client extension update for Windows 98
http://support.microsoft.com/?id=323466
824209 How to Use the EventcombMT Utility to Search Event Logs for Account
http://support.microsoft.com/?id=824209
305144 How to Use the UserAccountControl Flags to Manipulate User Account
http://support.microsoft.com/?id=305144
276541 Unexpected Account Lockouts Caused When Logging On to Outlook from an
http://support.microsoft.com/?id=276541
Webcasts
Support WebCast: Microsoft Windows 2000 Server and Windows Server 2003: Password and Account Lockout Features
http://support.microsoft.com/default.aspx?kbid=813500
TechNet Webcast: Passwords Demystified - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032255239&Culture=en-US
Newsgroups
Windows Server Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.active_directory
Windows 2000 Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.active_directory
Downloads
Account Lockout and Management Tools
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e
PsTools
http://www.sysinternals.com/ntw2k/freeware/pstools.shtml
Active Directory
Technology Center - www.microsoft.com/ad
Active Directory Operations Overview
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/default.mspx
Active Directory Troubleshooting Overview
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd07.mspx
High-level Methodology for Troubleshooting Active Directory Problems
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd08.mspx
Understanding the Active Directory Physical Structure
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/under.mspx
Directory Operations
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/adop7.mspx
Designing the Windows 2000 Domain Structure
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/designin.mspx
Active Directory LDAP Compliance
http://www.microsoft.com/windowsserver2003/techinfo/overview/ldapcomp.mspx
Active Directory in the Outward-facing Role
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=E95B2D36-D746-4F57-AE79-E2ADBA31EC95
Windows Server 2003 Deployment Kit: Designing and Deploying Directory and Security Services
http://www.microsoft.com/downloads/details.aspx?familyid=6cde6ee7-5df1-4394-92ed-2147c3a9ebbe&displaylang=en
Windows 2000 Startup and Logon Traffic Analysis
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/w2kstart.mspx
Active Directory Diagnostics, Troubleshooting, and Recovery
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsbi/dsbi_add_qouy.asp
KB articles
839880 How to troubleshoot RPC Endpoint Mapper errors in Windows Server 2003
http://support.microsoft.com/?id=839880
832161 A long delay occurs when you logon to domain from Windows XP (17)
http://support.microsoft.com/?id=832161
832017 Port Requirements for the Microsoft Windows Server System
http://support.microsoft.com/?id=832017
827531 Random 1168 Event Messages Are Logged After You Install Windows 2000 Service Pack 4 (135)
http://support.microsoft.com/?id=827531
826902 You Cannot Browse the Drives of or Map a Drive to a Domain Controller
http://support.microsoft.com/?id=826902
821425 Users Receive a Password Complexity Requirements Message That Does Not Specify Character Group Requirements for a Password (55)
http://support.microsoft.com/?id=821425
816106 How to Verify an Active Directory Installation in Windows Server 2003
http://support.microsoft.com/?id=816106
816103 HOW TO: Use Portqry to Troubleshoot Active Directory Connectivity Issues
http://support.microsoft.com/?id=816103
813878 How to Block Specific Network Protocols and Ports by Using IPSec
http://support.microsoft.com/?id=813878
323542 You Cannot Start the Active Directory Users and Computers Tool Because
http://support.microsoft.com/?id=323542
315619 HOW TO: Enumerate GUIDs of All Computers in a Domain with Windows 2000
http://support.microsoft.com/?id=315619
314825 How to Troubleshoot Black Hole Router Issues
http://support.microsoft.com/?id=314825
310456 How to Use Portqry to Troubleshoot Active Directory Connectivity Issues
http://support.microsoft.com/?id=310456
305027 Summary of "Piling On" Scenarios in Active Directory Domains
http://support.microsoft.com/?id=305027
300598 How to Verify the Domain Records in Windows 2000 Windows Internet Name
http://support.microsoft.com/?id=300598
299451 HOW TO: Remove and Reinstall TCP/IP on a Windows 2000 Domain Controller
http://support.microsoft.com/?id=299451
298713 How to prevent overloading on the first domain controller during domain
http://support.microsoft.com/?id=298713
298143 How to Verify an Active Directory Installation
http://support.microsoft.com/?id=298143
281146 How to Use Dsacls.exe in Windows 2000
http://support.microsoft.com/?id=281146
272294 Active Directory Communication Fails on Multihomed Domain Controllers
http://support.microsoft.com/?id=272294
251343 Manually Initializing the SD Propagator Thread to Evaluate Inherited
http://support.microsoft.com/?id=251343
237677 Using LDIFDE to Import and Export Directory Objects to Active Directory
http://support.microsoft.com/?id=237677
232241 Group Management with ADSI in Windows 2000
http://support.microsoft.com/?id=232241
230750 Basic User Account Creation with ADSI Scripting
http://support.microsoft.com/?id=230750
224544 Determining the Server GUID of a Domain Controller
http://support.microsoft.com/?id=224544
224543 Using Ldp.exe to Find Data in the Active Directory
http://support.microsoft.com/?id=224543
224370 Troubleshooting "RPC Server is Unavailable" in Windows
http://support.microsoft.com/?id=224370
179442 How to Configure a Firewall for Domains and Trusts
http://support.microsoft.com/?id=179442
159211 Diagnoses and Treatment of Black Hole Routers
http://support.microsoft.com/?id=159211
154596 How To Configure RPC Dynamic Port Allocation to Work with Firewall
http://support.microsoft.com/?id=154596
148942 How to Capture Network Traffic with Network Monitor
http://support.microsoft.com/?id=148942
Webcasts
TechNet Webcast: Active Directory Basics - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032244714&Culture=en-US
TechNet Webcast: Active Directory Basics
http://www.microsoft.com/usa/webcasts/ondemand/2090.asp
TechNet Webcast: Active Directory Fundamentals - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254336&Culture=en-US
TechNet Webcast: Introduction to Microsoft Windows Server 2003—Level 200
http://www.microsoft.com/usa/webcasts/ondemand/2347.asp
TechNet Webcast: Introduction to Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032248495&Culture=en-US
TechNet Webcast: Introduction to Windows Server 2003
http://www.microsoft.com/usa/webcasts/ondemand/2147.asp
TechNet Webcast: Microsoft Windows NT 4.0 and Microsoft Windows Server 2003 Active Directory Interoperability Level 200
http://www.microsoft.com/usa/webcasts/ondemand/2231.asp
TechNet Webcast: NT 4.0 Domain and Active Directory Interoperability
http://www.microsoft.com/usa/webcasts/ondemand/1463.asp
TechNet Webcast: New Features of Windows Server 2003 Active Directory - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032246109&Culture=en-US
TechNet Webcast: Windows Server 2003 Active Directory: New Features - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254129&Culture=en-US
TechNet Webcast: Windows Server 2003 Delta: What's New and What's Changed?
http://www.microsoft.com/usa/webcasts/ondemand/1930.asp
Web Event: Active Directory in Windows 2000 (Level 100)
http://www.microsoft.com/usa/webcasts/ondemand/1593.asp
324968 Support WebCast: Using the Ntdsutil.exe Utility
http://support.microsoft.com/?id=324968
872831 TechNet Support WebCast: Enterprise computing and Microsoft Windows XP
http://support.microsoft.com/?id=872831
325426 Support WebCast: Windows 2000: Directory Services, Part One
http://support.microsoft.com/?id=325426
325418 Support WebCast: Directory Services Part II
http://support.microsoft.com/?id=325418
325287 Support WebCast: Microsoft Windows 2000 Active Directory Tools
http://support.microsoft.com/?id=325287
Newsgroups
Windows Server Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.active_directory
Windows 2000 Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.active_directory
Downloads
Windows 2000 Resource Kit Tools
http://www.microsoft.com/windows2000/techinfo/reskit/tools/default.asp
Windows 2000 Support Tools
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/supporttools.asp
Windows Server 2003 Admin Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3&DisplayLang=en
Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en
ADTest
http://www.microsoft.com/downloads/details.aspx?FamilyID=4814fe3f-92ce-4871-b8a4-99f98b3f4338&DisplayLang=en
AD Administration
ADSI Open Interfaces for Managing and Using Directory Services
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/w2kadsi.mspx
Core Active Directory Service Administration
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/06w2kada.mspx
Step-by-Step Guide to Managing the Active Directory
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/howto/managad.mspx
Active Directory Users, Computers, and Groups
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/adusers.mspx
Managing Day-to-Day Operations
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/admincmp/mngddop.mspx
Creating User and Group Accounts in Windows 2000
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/crusegrp.mspx
Distributing Registry Changes
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/distreg.mspx
WMIC - Take Command-line Control over WMI
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/wmic.mspx
File-Server Migration: Scopy Becomes Xcopy
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/stoxcopy.mspx
Overview of Microsoft Windows 2000 System Administration
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/c01w2kad.mspx
Overview of Active Directory Operations
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd01.mspx
Step-by-Step Guide to Managing Active Directory
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/manadsteps.asp
KB Articles
329721 Description of Netdom.exe Syntax and Versions
http://support.microsoft.com/?id=329721
327709 Windows 2000 Account Operators Can Manage Their Own Accounts
http://support.microsoft.com/?id=327709
325465 Windows 2000 Domain Controllers Require SP3 or Later When Using Windows Server 2003 Administration Tools (3230)
http://support.microsoft.com/?id=325465
324745 HOW TO: Install the Windows Server 2003 Administration Tools Pack on Windows XP (5190)
http://support.microsoft.com/?id=324745
314978 How to use Adminpak.msi to install a specific server administration tool
http://support.microsoft.com/?id=314978
305144 How to Use the UserAccountControl Flags to Manipulate User Account
http://support.microsoft.com/?id=305144
304718 How to remotely administer Windows Server-based computers by using
http://support.microsoft.com/?id=304718
298882 The new command-line tools for Active Directory in Windows Server 2003 (2870)
http://support.microsoft.com/?id=298882
275523 Setting Primary Group Excludes the User from the Group Membership in
http://support.microsoft.com/?id=275523
274305 Free Windows 2000 Resource Kit Tools for Administrative Tasks (3240)
http://support.microsoft.com/?id=274305
272530 How to Use the Cusrmgr.exe Tool to Change Administrator Account Password on Multiple Computers (3790)
http://support.microsoft.com/?id=272530
260575 HOW TO: Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller (43)
http://support.microsoft.com/?id=260575
243330 Well Known Security Identifiers in Windows Server Operating Systems
http://support.microsoft.com/?id=243330
237548 HOW TO: Display and Administer All Users in Active Directory
http://support.microsoft.com/?id=237548
234955 Limited to 10,000 Results in "Find Users, Contacts, and Groups"
http://support.microsoft.com/?id=234955
232241 Group Management with ADSI in Windows 2000
http://support.microsoft.com/?id=232241
232199 Description and Update of the Active Directory AdminSDHolder Object
http://support.microsoft.com/?id=232199
216393 Resetting computer accounts in Windows 2000 and Windows XP (15)
http://support.microsoft.com/?id=216393
Webcasts
TechNetWebcast: Automating Active Directory Adds, Changes, and Deletes - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032253969&Culture=en-US
TechNet Webcast: Automating Administration of Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254200&Culture=en-US
Newsgroups
Windows Server Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.active_directory
Windows 2000 Active Directory newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.active_directory
Downloads
Windows 2000 Resource Kit Tools
http://www.microsoft.com/windows2000/techinfo/reskit/tools/default.asp
Windows 2000 Support Tools
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/supporttools.asp
Windows Server 2003 Admin Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3&DisplayLang=en
Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en
Server Status Monitor
http://www.microsoft.com/mom/downloads/reskit/default.asp
AD Replication
Technology Center - www.microsoft.com/ad
Active Directory Replication – Chapter 6, Distributed Systems Guide
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsbh/dsbh_rep_jfbg.asp
Troubleshooting Active Directory Replication Problems
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd12.mspx
Understanding Active Directory Replication
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/understa.mspx
Designing a Site Topology for Active Directory Replication
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/repl_design_sitetopology_active_directory_repl.asp
Active Directory Replication Traffic
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/ntopt11.mspx
Active Directory Replication over Firewalls
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx
Active Directory Replication
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/distrib/dsbh_rep_MQEG.asp
Active Directory Branch Office Planning Guide
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/branchoffice/default.asp
Windows Server 2003 Active Directory Branch Office Guide
http://www.microsoft.com/downloads/details.aspx?FamilyId=9353A4F6-A8A8-40BB-9FA7-3A95C9540112&displaylang=en
Active Directory Replication Model
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsbh/dsbh_rep_mqeg.asp
Managing Sites
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd06.mspx
Managing directory replication
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/ctasks015.asp
Active Directory Replication Topology Technical Reference
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_repto_intro.asp
Active Directory Replication Tools and Settings
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/w2k3tr_repup_tools.asp
Active Directory Replication Model Technical Reference
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_repup_intro.asp
Step-by-Step Guide to Active Directory Sites and Services
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adsites.asp
Step-by-Step Guide to Setting up ISM-SMTP Replication
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/ismsmtp.asp
Active Directory in Networks Segmented by Firewalls
http://www.microsoft.com/downloads/details.aspx?FamilyID=c2ef3846-43f0-4caf-9767-a9166368434e&DisplayLang=en
KB articles
819249 You Receive an "Event ID 1311" Message Every 15 Minutes in the Directory Services Event Log (38)
http://support.microsoft.com/?id=819249
249256 HOW TO: Troubleshoot Intra-Site Replication Failures (10)
http://support.microsoft.com/?id=249256
839880 How to troubleshoot RPC Endpoint Mapper errors in Windows Server 2003
http://support.microsoft.com/?id=839880
321046 How To Use DNSLint to Troubleshoot Active Directory Replication Issues
http://support.microsoft.com/?id=321046
319202 Active Directory Does Not Replicate When DNS Lookup is Not Successful
http://support.microsoft.com/?id=319202
288167 Error Message "Target Principal Name is Incorrect" When Manually
http://support.microsoft.com/?id=288167
272294 Active Directory Communication Fails on Multihomed Domain Controllers
http://support.microsoft.com/?id=272294
229896 Using Repadmin.exe to Troubleshoot Active Directory Replication
http://support.microsoft.com/?id=229896
833372 Troubleshooting Active Directory replication failures during dcpromo
http://support.microsoft.com/?id=833372
832017 Port Requirements for the Microsoft Windows Server System
http://support.microsoft.com/?id=832017
327781 How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server
http://support.microsoft.com/?id=327781
321253 HOW TO: Configure Site Link Replication in Windows 2000
http://support.microsoft.com/?id=321253
318480 HOW TO: Create and Configure an Active Directory Site in Windows 2000
http://support.microsoft.com/?id=318480
318340 HOW TO: Verify That Active Directory Partitions Are Replicated Properly
http://support.microsoft.com/?id=318340
316812 HOW TO: Create and Configure a Site Link in Active Directory in Windows
http://support.microsoft.com/?id=316812
315150 Logon Authentication, Active Directory Replication, and Domain Joins Do
http://support.microsoft.com/?id=315150
308111 A Missing Service Principal Name May Prevent Domain Controllers from
http://support.microsoft.com/?id=308111
245610 HOW TO: Disable the Knowledge Consistency Checker Inter-Site Topology
http://support.microsoft.com/?id=245610
244368 How to Optimize Active Directory Replication in a Large Network
http://support.microsoft.com/?id=244368
242780 How to Disable the Knowledge Consistency Checker From Automatically
http://support.microsoft.com/?id=242780
232690 Urgent Replication Triggers in Windows 2000
http://support.microsoft.com/?id=232690
224815 The Role of the Inter-Site Topology Generator in Active Directory
http://support.microsoft.com/?id=224815
224599 Determining the Inter-Site Topology Generator (ISTG) of a Site in the
http://support.microsoft.com/?id=224599
224544 Determining the Server GUID of a Domain Controller
http://support.microsoft.com/?id=224544
224196 Restricting Active Directory Replication Traffic to a Specific Port
http://support.microsoft.com/?id=224196
199174 Directory Replication Basics for Windows 2000
http://support.microsoft.com/?id=199174
Webcasts
823063 Support WebCast: Designing and Configuring Site Topology
http://support.microsoft.com/?id=823063
325542 Support WebCast: Active Directory Replication in Windows 2000, Part 1.
http://support.microsoft.com/?id=325542
325542 Support WebCast: Active Directory Replication in Windows 2000, Part 1.
http://support.microsoft.com/?id=325542
325531 Support WebCast: Active Directory Replication in Windows 2000, Part 2.
http://support.microsoft.com/?id=325531
325534 Support WebCast: Active Directory Replication in Windows 2000, Part 3
http://support.microsoft.com/?id=325534
325513 Support WebCast: Active Directory Replication in Windows 2000, Part 4
http://support.microsoft.com/?id=325513
ADAM
Technology Center - www.microsoft.com/adam
Introduction to Windows Server 2003 Active Directory Application Mode
http://www.microsoft.com/windowsserver2003/techinfo/overview/adam.mspx
Active Directory Application Mode Reviewers Guide
http://www.microsoft.com/downloads/details.aspx?FamilyId=16F7CF1F-4728-4B34-944C-A7EDA2E510F4&displaylang=en
ADAM Overview Presentation
http://www.microsoft.com/downloads/details.aspx?familyid=b7e505c0-d4b9-46fb-ae71-e3b48e7938c0&displaylang=en
Active Directory Application Mode Frequently Asked Questions
http://www.microsoft.com/windowsserver2003/adam/ADAMfaq.mspx
Active Directory® Application Mode (ADAM) Technical Reference
http://www.microsoft.com/downloads/details.aspx?familyid=96c660f7-d932-4f59-852c-2844b343f3e0&displaylang=en
How to Bundle Active Directory Application Mode with Your Directory-enabled Application
http://www.microsoft.com/downloads/details.aspx?familyid=79f0b88c-61c0-4969-a449-71df7b97505f&displaylang=en
KB articles
825032 Programs that use ADSI take a long time to perform certain tasks in
http://support.microsoft.com/?id=825032
817583 Active Directory Services Does Not Request Secure Authorization Over
http://support.microsoft.com/?id=817583
Webcasts
MSDN Webcast: Implementing Authentication and Authorization with AD/AM and AzMan – Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032245781&Culture=en-US
MSDN Webcast: Developing with Active Directory Application Mode (ADAM) – Level 300
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032251655&Culture=en-US
Downloads
ADAM download
http://www.microsoft.com/downloads/details.aspx?FamilyId=9688F8B9-1034-4EF6-A3E5-2A2A57B5C8E4&displaylang=en
Active Directory to ADAM Synchronizer Beta
http://www.microsoft.com/downloads/details.aspx?familyid=88E72E3F-1DD9-4CCC-A9AA-CAC04E0628C7&displaylang=en
ADMT/Migration/USMT
Planning Migration from Windows NT to Windows 2000
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/migntw2k.mspx
Active Directory Migration Tool Overview
http://www.microsoft.com/technet/prodtechnol/windows2000serv/downloads/admtool.mspx
Active Directory Migration Tool v.2.0 download
http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-9817-8c9773c25c6c&DisplayLang=en
Active Directory Migration Tool 2.0 Interactive Simulation
http://www.microsoft.com/windowsserver2003/techinfo/training/admt.mspx
User State Migration in Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/usermigr.mspx
Windows 2000 Server Domain Migration Cookbook
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/cookbook/default.mspx
Restructuring Windows NT 4.0 Domains to an Active Directory Forest
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dssbg_rent_overview.asp
Restructuring Active Directory Domains Between Forests
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dssbi_reer_overview.asp
Restructuring Active Directory Domains Within a Forest
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dssbh_rera_overview.asp
Migrating Accounts From Windows NT 4.0 Domains to Windows 2000
http://www.microsoft.com/technet/community/columns/profwin/pw0402.mspx
Step-by-Step Guide to Bulk Import and Export to Active Directory
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulksteps.asp
Domain Migration Cookbook
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/cookbook/cookchp9.mspx
KB articles
326480 How to Use Active Directory Migration Tool Version 2 to Migrate from Windows 2000 to Windows Server 2003 (25)
http://support.microsoft.com/?id=326480
325851 How To Set Up ADMT for a Windows NT 4.0-to-Windows Server 2003 Migration (23)
http://support.microsoft.com/?id=325851
260871 HOW TO: Set Up ADMT for Windows NT 4.0 to Windows 2000 Migration (14)
http://support.microsoft.com/?id=260871
832221 How to configure the Active Directory Migration Tool to migrate user passwords from a Windows NT 4.0 domain to a Windows Server 2003 domain (2670)
http://support.microsoft.com/?id=832221
237677 Using LDIFDE to Import and Export Directory Objects to Active Directory
http://support.microsoft.com/?id=237677
238394 How to Use the MoveTree Utility to Move Objects Between Domains in a
http://support.microsoft.com/?id=238394
295758 HOWTO: Use Visual Basic Script to Clear SidHistory
http://support.microsoft.com/?id=295758
317846 ADMT: "Could Not Verify Auditing and TcpipClientSupport on Domains"
http://support.microsoft.com/?id=317846
322981 How to Troubleshoot Inter-Forest Password Migration with ADMTv2
http://support.microsoft.com/?id=322981
322970 How to Troubleshoot Inter-Forest sIDHistory Migration with ADMTv2
http://support.microsoft.com/?id=322970
TechNet Webcast: Migrating from Windows NT Server 4.0 to Windows Server 2003
http://www.microsoft.com/usa/webcasts/ondemand/2061.asp
TechNet Webcast: TechNet Subscription Series – Migrating from Windows NT 4 to Windows Server 2003
http://www.microsoft.com/usa/webcasts/ondemand/1843.asp
TechNet Webcast: Migrating from Windows NT Server 4.0 to Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254088&Culture=en-US
TechNet Webcast: Advanced Active Directory Migration
http://www.microsoft.com/usa/webcasts/ondemand/2146.asp
329471 Support WebCast: Windows Server 2003: Upgrading, Migrating, and
http://support.microsoft.com/?id=329471
Windows Server Migration newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.migration
Downloads
ADMT 2.0
http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-9817-8c9773c25c6c&DisplayLang=en
USMT
http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/usmt-o.asp
Auditing
Audit Account Logon Events
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logevnts.mspx
Tracking Logon and Logoff Activity in Windows 2000
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logonoff.mspx
Auditing security events
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/AuditTN.asp
Audit Categories and Events
http://www.microsoft.com/technet/Security/topics/issues/w2kccscg/w2kscgcb.mspx
Detect: Monitoring Violations of Policy or Unexpected Behavior
http://www.microsoft.com/technet/security/tips/detect.mspx
Fast Path to Intrusion Detection and Event Logging
http://www.microsoft.com/technet/security/tips/deteclog.mspx
Windows Server 2003 Security Events
http://www.microsoft.com/technet/security/guidance/secmod128.mspx
KB articles
840956 Failure Audit event entries are unexpectedly logged to the security
http://support.microsoft.com/?id=840956
824905 Event ID 677 and event ID 673 audit failure messages are repeatedly (36)
http://support.microsoft.com/?id=824905
822774 System Performance Decreases, and Many Event ID 576 Entries Are Logged to the Security Event Log (24)
http://support.microsoft.com/?id=822774
828020 User Logoff Event ID 538 Is Not Logged to the Security Event Log (18)
http://support.microsoft.com/?id=828020
238185 Unnecessary Security Failure Audit (Event 577) (11)
http://support.microsoft.com/?id=238185
300549 HOW TO: Enable and Apply Security Auditing in Windows 2000 (3210)
http://support.microsoft.com/?id=300549
173939 How to Identify the User Who Changed the Administrator Password (2910)
http://support.microsoft.com/?id=173939
814595 HOW TO: Audit Active Directory Objects in Windows Server 2003
http://support.microsoft.com/?id=814595
810088 CPU Usage May Be High After You Turn On Auditing for
http://support.microsoft.com/?id=810088
325898 HOW TO: Set Up and Manage Operation-Based Auditing for Windows Server
http://support.microsoft.com/?id=325898
324739 HOW TO: Use Group Policy to Audit Registry Keys in Windows Server 2003
http://support.microsoft.com/?id=324739
310399 HOW TO: Audit User Access of Files, Folders, and Printers in Windows XP
http://support.microsoft.com/?id=310399
300958 HOW TO: Monitor for Unauthorized User Access in Windows 2000
http://support.microsoft.com/?id=300958
300549 HOW TO: Enable and Apply Security Auditing in Windows 2000
http://support.microsoft.com/?id=300549
Newsgroups
Security General
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.security&lang=en&cr=US
Windows 2000 Security newsgroup
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.security&lang=en&cr=US
Windows XP Security and Administration newsgroup
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windowsxp.security_admin&lang=en&cr=US
Authentication/Authorization
Technology Center - www.microsoft.com/security
Best Practice Guide for Securing Windows Server Active Directory Installations
http://www.microsoft.com/windowsserver2003/techinfo/overview/adsecurity.mspx
Securing Active Directory
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/securead.mspx
Best Practice Guide for Securing Active Directory Installations and Day-to-Day Operations
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/bpguide/default.mspx
Security Guidance Center for Small Businesses
http://www.microsoft.com/smallbusiness/gtm/securityguidance/hub.mspx
Microsoft Windows 2000 Security Hardening Guide
http://www.microsoft.com/technet/security/prodtech/win2000/win2khg/default.mspx
Windows Server 2003 Security Guide
http://www.microsoft.com/technet/security/prodtech/win2003/w2003hg/sgch00.mspx
Threats and Countermeasures Guide
http://www.microsoft.com/technet/security/topics/hardsys/tcg/tcgch00.mspx
Default Access Control Settings in Windows 2000
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/secdefs.mspx
The Security Support Provider Interface
http://www.microsoft.com/windows2000/techinfo/howitworks/security/sspi2000.asp
Authentication and Resource Protection in Windows 2000
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/authenti.mspx
Technical Overview of Windows Server 2003 Security Services
http://www.microsoft.com/windowsserver2003/techinfo/overview/security.mspx
Using Security Identifier (SID) Filtering to Prevent Elevation of Privilege Attacks
http://www.microsoft.com/windows2000/techinfo/administration/security/sidfilter.asp
The Essentials of Replacing MSGINA.DLL
http://www.microsoft.com/windows2000/techinfo/administration/security/msgina.asp
Microsoft Solution for Securing Windows 2000 Server
http://www.microsoft.com/technet/security/prodtech/win2000/secwin2k/default.mspx
Security Settings
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/gp/615.asp
Security Policy Settings
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_sepol_set.asp
Security Configuration Manager
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/SEconcepts_SCM.asp
User Rights and Privileges
http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/appxb.mspx
Step-by-Step Guide to Using Secondary Logon in Windows 2000
http://www.microsoft.com/windows2000/techinfo/planning/management/seclogon.asp
Windows Server 2003 Security Center
http://www.microsoft.com/technet/security/prodtech/win2003/default.mspx
841188 "The local policy of this system does not permit you to logon interactively" error message when you try to log on to a computer that is running Windows Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/?id=841188
838777 New network shared folders automatically assign Read permissions to the Everyone group in Windows Server 2003
http://support.microsoft.com/?id=838777
834721 Permissions on
http://support.microsoft.com/?id=834721
831375 The CHKDSK utility incorrectly identifies and deletes in-use security descriptors in Windows 2000
http://support.microsoft.com/?id=831375
826903 "The local policy of this system does not permit you to logon interactively" error message when you log on to your Windows 2000-based computer
http://support.microsoft.com/?id=826903
825751 How to use Xcacls.vbs to modify NTFS permissions
http://support.microsoft.com/?id=825751
824302 The System Cannot Log You On Now Because the Domain Is Not Available
http://support.microsoft.com/?id=824302
823659 Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
http://support.microsoft.com/?id=823659
822900 Access restrictions occur after the installation of Windows Server 2003
http://support.microsoft.com/?id=822900
822790 Child Objects in a Folder Do Not Inherit Permissions As Expected When You Use Xcacls.exe with the /E Switch
http://support.microsoft.com/?id=822790
821546 Overview of the "Impersonate a Client After Authentication" and the "Create Global Objects" Security Settings (821546.KB.EN-US.2.2)
http://support.microsoft.com/?id=821546
811497 Error Message When Windows 95 or Windows NT 4.0 Client Logs On to Windows Server 2003 Domain
http://support.microsoft.com/?id=811497
329316 Error Message: User Interface Failure: The Logon User Interface DLL Msgina.dll Failed to Load
http://support.microsoft.com/?id=329316
327522 MS02-064: Windows 2000 Default Permissions May Permit Trojan Horse Attack
http://support.microsoft.com/?id=327522
326690 Anonymous LDAP operations to Active Directory are disabled on Windows Server 2003 domain controllers
http://support.microsoft.com/?id=326690
320211 You Cannot Programmatically Perform a Security Authorization Check on a User
http://support.microsoft.com/?id=320211
303079 How to Locate and Correct Disk Space Problems on NTFS Volumes
http://support.microsoft.com/?id=303079
299656 How to prevent Windows from storing a LAN manager hash of your password in Active Directory and local SAM databases
http://support.microsoft.com/?id=299656
289655 HOW TO: Enable Null Session Shares on a Windows 2000-Based Computer
http://support.microsoft.com/?id=289655
285793 Error Message: The Local Policy of This System Does Not Permit You to Logon Interactively
http://support.microsoft.com/?id=285793
276304 Error Message: Your Password Must Be at Least 18770 Characters and Cannot Repeat Any of Your Previous 30689 Passwords
http://support.microsoft.com/?id=276304
273004 "The Password Cannot Be Changed at This Time" Error Message When You Try to Change a User's Password
http://support.microsoft.com/?id=273004
272594 Problems logging on to a Windows 2000-based server or a Windows 2003-based server
http://support.microsoft.com/?id=272594
271604 Password Recovery Policy
http://support.microsoft.com/?id=271604
266118 How to restore the default NTFS permissions for Windows 2000
http://support.microsoft.com/?id=266118
265382 Error Message: Your Interactive Logon Privilege Has Been Disabled. Please Contact Your System Administrator
http://support.microsoft.com/?id=265382
263208 Connecting with Incorrect Computer Name Results in 3034 Warning
http://support.microsoft.com/?id=263208
263142 Determining the Cause of an "MRxSmb 3034" Warning
http://support.microsoft.com/?id=263142
258289 Windows 2000 Logon Passwords
http://support.microsoft.com/?id=258289
257346 "Access This Computer from the Network" User Right Causes Tools Not to Work
http://support.microsoft.com/?id=257346
249321 Unable to Log on if the Boot Partition Drive Letter Has Changed
http://support.microsoft.com/?id=249321
247989 Domain Controllers Require the "Log on Locally" Group Policy Object for Terminal Services Client Connections
http://support.microsoft.com/?id=247989
246261 How to Use the RestrictAnonymous Registry Value in Windows 2000
http://support.microsoft.com/?id=246261
245031 How to: Use a Script to Change Registry Permissions from the Command Line
http://support.microsoft.com/?id=245031
242917 Administrator Unable to Unlock a "Locked" Computer
http://support.microsoft.com/?id=242917
240268 COPY, XCOPY, and MOVE Overwrite Functionality Changes in Windows
http://support.microsoft.com/?id=240268
239869 How to enable NTLM 2 authentication
http://support.microsoft.com/?id=239869
237607 How to Use Regini.exe to Set Permissions on Registry Keys
http://support.microsoft.com/?id=237607
234237 Assign "Log On locally" Rights to Windows Domain Controller
http://support.microsoft.com/?id=234237
223497 Err Msg: Logon Failure: User Not Granted the Requested Logon Type
http://support.microsoft.com/?id=223497
189126 Microsoft's Policy Regarding Missing or Invalid Passwords
http://support.microsoft.com/?id=189126
186529 Local Policy Does Not Permit You to Log On Interactively
http://support.microsoft.com/?id=186529
153183 How to Restrict Access to the Registry from a Remote Computer
http://support.microsoft.com/?id=153183
152478 Err Msg: The Local Policy of This System Does Not Permit You to Logon Interactively
http://support.microsoft.com/?id=152478
149861 How Authentication Works for Net Use Command
http://support.microsoft.com/?id=149861
139410 Err Msg: There are Currently No Logon Servers Available...
http://support.microsoft.com/?id=139410
106211 Err Msg: The Credentials Supplied Conflict with an Existing...
http://support.microsoft.com/?id=106211
Webcasts
TechNet Webcast: How to Get Your Network Hacked in 10 Easy Steps—Level 300
http://www.microsoft.com/usa/webcasts/ondemand/2349.asp
Small Business Webcast: Security: Small Business Best Practices for Securing the Desktop
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254509&Culture=en-US
TechNet Webcast: 10 Things Hackers Don’t Want You To Know - Level 300
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032241555&Culture=en-US
TechNet Webcast: Implementing Server Security on Windows 2000 and Windows 2003
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254388&Culture=en-US
TechNet Webcast: Implementing Client Security on Windows 2000 and Windows XP
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254391&Culture=en-US
MSDN Webcast: Windows 2000 Advanced Server and Security
http://www.microsoft.com/usa/webcasts/ondemand/750.asp
TechNet Webcast: Securing Microsoft Windows XP Professional in Small and Medium Businesses—Level 300
http://www.microsoft.com/usa/webcasts/ondemand/2376.asp
TechNet Webcast: Getting the Most Out of Windows Server 2003 Authentication and Authorization - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032253548&Culture=en-US
Newsgroups
Security General newsgroup
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.security&lang=en&cr=US
Windows 2000 Security newsgroup
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.security&lang=en&cr=US
Windows XP Security and Administration newsgroup
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windowsxp.security_admin&lang=en&cr=US
Downloads
Accessenum
http://www.sysinternals.com/ntw2k/source/accessenum.shtml
Shareenum
http://www.sysinternals.com/ntw2k/source/shareenum.shtml
Certificate Services
Technology Center - www.microsoft.com/pki
Public Key Infrastructure Overview
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_SEconceptsPKI.asp
Designing a Public Key Infrastructure
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dssch_pki_overview.asp
Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Windows Server 2003 PKI Operations Guide
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx
Public Key Interoperability
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/pkintop.mspx
Smart Cards
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/smtcard.mspx
An Introduction to the Windows 2000 Public Key Infrastructure
http://www.microsoft.com/windows2000/techinfo/howitworks/security/pkiintro.asp
Certificate Autoenrollment in Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/certenrl.mspx
Certificate Autoenrollment in Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Cryptography and PKI Basics
http://www.microsoft.com/windows2000/techinfo/howitworks/security/cryptpki.asp
Microsoft Windows 2000 Public Key Infrastructure
http://www.microsoft.com/windows2000/techinfo/planning/security/pki.asp
PKI Enhancements in Windows XP Professional and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx
Smart Card Logon
http://www.microsoft.com/windows2000/techinfo/howitworks/security/sclogonwp.asp
Troubleshooting Windows 2000 PKI Deployment and Smart Card Logon
http://www.microsoft.com/windows2000/techinfo/administration/security/smrtcrdtr.asp
Step-by-Step Guide to Certificate Services
http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp
Step-by-Step Guide to Setting up a Certification Authority
http://www.microsoft.com/windows2000/techinfo/planning/security/casetupsteps.asp
Step-by-Step Guide to Setting Up Certification Authority Trust for a Domain
http://www.microsoft.com/windows2000/techinfo/planning/security/catruststeps.asp
Step-by-Step Guide to Advanced Certificate Management
http://www.microsoft.com/windows2000/techinfo/planning/security/advcertsteps.asp
Step-by-Step Guide to End User Certificate Management
http://www.microsoft.com/windows2000/techinfo/planning/security/eucertsteps.asp
Step-by-Step Guide to Automatic Certificate Request for Computers
http://www.microsoft.com/windows2000/techinfo/planning/security/autocertsteps.asp
Step-by-Step Guide to Mapping Certificates to User Accounts
http://www.microsoft.com/windows2000/techinfo/planning/security/mappingcerts.asp
Step-by-Step Guide to Installing and Using a Smart Card Reader
http://www.microsoft.com/windows2000/techinfo/planning/security/smartcard.asp
Step-by-Step Guide to Public Key-Based Client Authentication in Internet Explorer
http://www.microsoft.com/windows2000/techinfo/planning/security/pubkeyie.asp
Windows 2000 Certificate Services and PKI Design
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/depopt/2000cert.mspx
KB articles
836427 How to use the Windows Server 2003 version of the Certutil.exe program
http://support.microsoft.com/?id=836427
323342 HOW TO: Install a Certificate for Use with IP Security in Windows Server
http://support.microsoft.com/?id=323342
321051 How to enable LDAP over SSL with a third-party Certification Authority
http://support.microsoft.com/?id=321051
320878 HOW TO: Manage Certificates in Windows 2000
http://support.microsoft.com/?id=320878
320828 Default Permission Settings for an Enterprise Certificate Authority
http://support.microsoft.com/?id=320828
319970 How to Use the Address Book to Test SSL Connectivity
http://support.microsoft.com/?id=319970
313557 HOW TO: Install a Smart Card Reader in Windows 2000
http://support.microsoft.com/?id=313557
313281 HOW TO: Publish a Certificate Revocation List in Windows 2000
http://support.microsoft.com/?id=313281
313274 HOW TO: Configure a Certification Authority to Issue Smart Card
http://support.microsoft.com/?id=313274
313272 How to back up and restore a Certificate Authority in Windows 2000
http://support.microsoft.com/?id=313272
310389 HOW TO: Request a Certificate by Using the Certificates Snap-In in
http://support.microsoft.com/?id=310389
310178 HOW TO: Install Imported Certificates on a Web Server in Windows 2000
http://support.microsoft.com/?id=310178
310114 HOW TO: Export Certificates in Windows 2000
http://support.microsoft.com/?id=310114
305018 How to Change the Event Logging Level for Certificate Services
http://support.microsoft.com/?id=305018
300867 Error Message: The Certification Authority Service Has Not Been Started
http://support.microsoft.com/?id=300867
299621 How to Enable Debug Logging of Certificate Services on Windows Server
http://support.microsoft.com/?id=299621
298138 How to move a certification authority to another server
http://support.microsoft.com/?id=298138
295663 How to import third-party certification authority (CA) certificates into
http://support.microsoft.com/?id=29566
283193 HOW TO: Move the Certificate Server Database and Log Files
http://support.microsoft.com/?id=283193
272175 HOW TO: Configure Active Directory Certificate Mapping
http://support.microsoft.com/?id=272175
271386 HOW TO: Install a Windows 2000 Certificate Services Offline Root
http://support.microsoft.com/?id=271386
261196 Event ID 36872 on Windows 2000 Domain Controller
http://support.microsoft.com/?id=261196
254632 HOW TO: Change the Expiration Date of Certificates That Are Issued by a
http://support.microsoft.com/?id=254632
253498 HOW TO: Install a Certificate for Use with IP Security
http://support.microsoft.com/?id=253498
247078 HOW TO: Enable Secure Socket Layer (SSL) Communication over LDAP for
http://support.microsoft.com/?id=247078
246572 HOW TO: How to Publish Certificates to the Active Directory from a
http://support.microsoft.com/?id=246572
239706 Default Permission Settings for an Enterprise Certificate Authority
http://support.microsoft.com/?id=239706
231881 HOW TO: How to Install/Uninstall a Public Key Certificate Authority for Windows 2000
http://support.microsoft.com/?id=231881
223338 Using a Certificate Authority for the Encrypting File Service
http://support.microsoft.com/?id=223338
218445 How to configure Certificate Server for use with SSL on IIS
http://support.microsoft.com/?id=218445
Webcasts
TechNet Webcast: How to Configure the Windows 2000 Environment for Smart Cards
http://www.microsoft.com/usa/webcasts/ondemand/1897.asp
325544 Support WebCast: Windows 2000 Public Key Infrastructure and Certificate
http://support.microsoft.com/?id=325544
324697 Support WebCast: How to Use Certificate Authority for Authentication
http://support.microsoft.com/?id=324697
Newsgroups
Windows SDK: Security API newsgroup
http://communities2.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.platformsdk.security&cat=en-us-security&lang=en&cr=US
Downloads
Capimon
http://www.microsoft.com/downloads/details.aspx?FamilyId=0BFE87A8-4E79-4441-9D4C-0CAB35D49A01&displaylang=en
DCPROMO/Domain Upgrade
Migration Domain Controllers to Windows 2000
http://msdn.microsoft.com/library/en-us/dnntmag00/html/migrating0299.asp
Active Directory Installation and Removal Issues
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsbi_add_fvhd.asp
Active Directory Installation, Upgrade, and Migration Technologies
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_ad_ium_over.asp
Troubleshooting Active Directory Installation Wizard Problems
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd13.mspx
Migrating Windows NT Server 4.0 Domains to Windows Server 2003 Active Directory
http://www.microsoft.com/windowsserver2003/evaluation/whyupgrade/nt4/nt4domtoad.mspx
Step-by-Step Guide to Setting up Additional Domain Controllers
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/domaincntrl.asp
KB articles
331161 Hotfixes to install on Windows 2000 domain controllers before running Adprep /Forestprep
http://support.microsoft.com/?id=331161
326209 HOW TO: Upgrade a Windows NT 4.0-Based PDC to a Windows Server 2003-Based Domain Controller
http://support.microsoft.com/?id=326209
325379 How to upgrade Windows 2000 domain controllers to Windows Server 2003
http://support.microsoft.com/?id=325379
324753 HOW TO: Create an Active Directory Server in Windows Server 2003
http://support.microsoft.com/?id=324753
314649 Windows Server 2003 adprep /forestprep Command Causes Mangled Attributes in Windows 2000 Forests That Contain Exchange 2000 Servers
http://support.microsoft.com/?id=314649
307304 HOW TO: Remove Active Directory with the Dcpromo Tool in Windows 2000
http://support.microsoft.com/?id=307304
300921 HOW TO: Create an Active Directory Server in Windows 2000
http://support.microsoft.com/?id=300921
298713 How to Prevent Overloading on the First Domain Controller During Domain Upgrade
http://support.microsoft.com/?id=298713
296480 HOW TO: Upgrade a Windows NT 4.0-Based PDC to a Windows 2000-Based Domain Controller
http://support.microsoft.com/?id=296480
278875 Cannot Promote a Windows Server 2003 Domain Controller into a Windows 2000 Forest
http://support.microsoft.com/?id=278875
263624 Cannot Remove Active Directory from a Replica Domain Controller
http://support.microsoft.com/?id=263624
260371 Troubleshooting Common Active Directory Setup Issues in Windows 2000
http://support.microsoft.com/?id=260371
238369 HOW TO: Promote and Demote Domain Controllers in Windows 2000
http://support.microsoft.com/?id=238369
232070 When you run Dcpromo.exe to create a replica domain controller, you receive the "Failed to modify the necessary properties for the machine account. Access is denied." error message
http://support.microsoft.com/?id=232070
216899 Best Practice Methods for Windows 2000 Domain Controller Setup
http://support.microsoft.com/?id=216899
216364 Domain Controller Server Object Not Removed After Demotion
http://support.microsoft.com/?id=216364
167248 How to Demote to BDC When Two PDCs Present
http://support.microsoft.com/?id=167248
Webcasts
812954 Support WebCast: Microsoft Windows Server 2003: Upgrading Windows 2000
http://support.microsoft.com/?id=812954
324601 Support WebCast: Domain Controller Promotion: The Process and How to
http://support.microsoft.com/?id=324601
Delegation
Design Considerations for Delegation of Administration in Active Directory
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/addeladm.mspx
Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp
Delegation of Administrative Authority to Security Groups
http://www.microsoft.com/WINDOWS2000/techinfo/reskit/deploymentscenarios/scenarios/ou_delegate_admin_authority_secgroups.asp
Best Practices for Delegating Active Directory Administration
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/actdid1.mspx
KB articles
817433 Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?id=817433
325894 HOW TO: Configure Computer Accounts and User Accounts So That They Are
http://support.microsoft.com/?id=325894
320054 HOW TO: Manage Groups in Active Directory in Windows 2000
http://support.microsoft.com/?id=320054
315676 HOW TO: Delegate Administrative Authority in Windows 2000
http://support.microsoft.com/?id=315676
312012 HOW TO: Grant a User the Right to Unlock a Locked Account
http://support.microsoft.com/?id=312012
311465 You Cannot Delegate Trusted Domain Object Creation
http://support.microsoft.com/?id=311465
308404 How To Customize the Task List in the Delegation Wizard
http://support.microsoft.com/?id=308404
300843 How to delegate Group Policy Creation to a user
http://support.microsoft.com/?id=300843
296999 Minimum Permissions Are Needed for a Delegated Administrator to Force
http://support.microsoft.com/?id=296999
294952 How To Delegate the Unlock Account Right
http://support.microsoft.com/?id=294952
294777 How to Delegate Group Policy Control to users in Trusted Domain
http://support.microsoft.com/?id=294777
279723 How to Grant Help Desk Personnel the Specific Right to Unlock Locked
http://support.microsoft.com/?id=279723
275715 HOW TO: Delegate Administration of Group Policies
http://support.microsoft.com/?id=275715
258992 How to Configure Delegate Administration Permissions For DFS in Windows
http://support.microsoft.com/?id=258992
242795 Granting Change Password Permissions to the Everyone Group
http://support.microsoft.com/?id=242795
235531 Default Security Concerns in Active Directory Delegation
http://support.microsoft.com/?id=235531
233548 Organizational Unit Controller Cannot Edit Group Policy Objects
http://support.microsoft.com/?id=233548
229873 Delegate Control Wizard Cannot Be Used to Remove Groups or Users
http://support.microsoft.com/?id=229873
228776 Setting User Rights for Designating FSMO Roles in an Enterprise
http://support.microsoft.com/?id=228776
221577 HOW TO: Delegate Authority for Editing a Group Policy Object (GPO)
http://support.microsoft.com/?id=221577
Webcasts
325415 Support WebCast: Microsoft Windows 2000 Manageability
http://support.microsoft.com/?id=325415
DFS
Technology Center - www.microsoft.com/dfs
DFS Technical Reference
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_dfs_intro.asp
Designing and Deploying File Servers
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/sdccc_fsv_overview.asp
Understanding Distributed File System (DFS) in Windows 2000
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part3/dsgch17.mspx
Distributed File System: A Logical View of Physical Storage
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/dfsnt95.mspx
Simplifying Infrastructure Complexity with Windows Distributed File System
http://www.microsoft.com/windowsserver2003/techinfo/overview/dfs.mspx
Distributed File System
http://www.microsoft.com/windows2000/techinfo/howitworks/fileandprint/dfsnew.asp
Distributed File System (DFS): Best Practices and Troubleshooting Guide
http://www.microsoft.com/windows2000/techinfo/administration/fileandprint/dfsbp.asp
Step-by-Step Guide to Distributed File System (Dfs)
http://www.microsoft.com/windows2000/techinfo/planning/fileandprint/dfssteps.asp
Distributed File System: Frequently Asked Questions
http://www.microsoft.com/windowsserver2003/techinfo/overview/dfsfaq.mspx
Technical Overview of Windows Server 2003 File Services
http://www.microsoft.com/windowsserver2003/techinfo/overview/file.mspx
KB articles
842218 How to manually decommission a root server that hosts a domain-based DFS
http://support.microsoft.com/?id=842218
840416 You are connected to a random DFS root server instead of to a specific
http://support.microsoft.com/?id=840416
839231 File copy operations to a DFS share perform slowly in Windows Server
http://support.microsoft.com/?id=839231
835261 Long delay before you can connect to a domain-based DFS namespace
http://support.microsoft.com/?id=835261
834649 Client computers record Event ID 1030 and Event ID 1058 when DFS is not
http://support.microsoft.com/?id=834649
829885 Distributed File System update to support consolidation roots in Windows Server 2003
http://support.microsoft.com/?id=829885
827345 DFS Shares Are Populated Slowly in Windows Explorer
http://support.microsoft.com/?id=827345
823362 Sites without domain controllers cause DFS referral to remote site for
http://support.microsoft.com/?id=823362
819106 DFS shares appear to be empty when they are accessed by client computers
http://support.microsoft.com/?id=819106
814660 Nested DFS links not allowed
http://support.microsoft.com/?id=814660
812487 Overview of DFS in Windows 2000
http://support.microsoft.com/?id=812487
323702 DFS Client Connects to Share on a Different Site Even Though a DFS Share
http://support.microsoft.com/?id=323702
304719 DFS Client Does Not Select the Share on a DFS Server in the Same Site
http://support.microsoft.com/?id=304719
282071 Users Are Accessing a DFS Root Replica in a Remote Site
http://support.microsoft.com/?id=282071
272279 How to Troubleshoot the File Replication Service and the Distributed
http://support.microsoft.com/?id=272279
269372 HOW TO: Back Up and Restore the DFS Structure in Windows 2000
http://support.microsoft.com/?id=269372
262845 Support for DFS-Based Shares for Offline Files
http://support.microsoft.com/?id=262845
258992 How to Configure Delegate Administration Permissions For DFS in Windows
http://support.microsoft.com/?id=258992
244380 How to configure DFS to use fully qualified domain names in referrals
http://support.microsoft.com/?id=244380
229928 Design Decisions, Defaults and Behavior for FRS File and Folder Filters
http://support.microsoft.com/?id=229928
227772 Cannot Create a Dfs Link Under a Current Dfs Link
http://support.microsoft.com/?id=227772
225228 Domain DFS Does Not Support Alternate Site Coverage
http://support.microsoft.com/?id=225228
224384 HOW TO: Force Deletion of DFS Configuration Information
http://support.microsoft.com/?id=224384
Newsgroups
Windows Server DFS FRS newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.dfs_frs
Disaster Recovery
Active Directory Backup and Restore
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd03.mspx
Data Backup and Recovery
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/14w2kada.mspx
Managing Windows 2000 Disks, Backup and Restore
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/disbare.mspx
Disaster Recovery and Preparation
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/14w2kadd.mspx
Disaster Recovery for Branch Office Environments
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/branchoffice/dply10.asp
Active Directory Disaster Recovery
http://www.microsoft.com/windows2000/docs/disaster.doc
Best Practices: Active Directory Forest Recovery
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3EDA5A79-C99B-4DF9-823C-933FEBA08CFE
Active Directory Disaster Recovery
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/support/adrecov.mspx
KB articles
840001 How to restore deleted user accounts and their group memberships in Active Directory
http://support.microsoft.com/?id=840001
830574 You receive a "lsass.exe-system error: Security Accounts Manager initialization failed" error message and event ID 1168 is logged when you restart a Windows Server 2003 domain controller
http://support.microsoft.com/?id=830574
332199 Using the DCPROMO /FORCEREMOVAL Command to Force the Demotion of Active Directory Domain Controllers
http://support.microsoft.com/?id=332199
316790 The Sysvol and Netlogon Shares Are Missing After You Restore a Domain
http://support.microsoft.com/?id=316790
315136 How to complete a semantic database analysis for the Active Directory
http://support.microsoft.com/?id=315136
300425 HOWTO: How to troubleshoot LSASS.EXE errors on Domain Controller Boot
http://support.microsoft.com/?id=300425
295932 Windows 2000 Domain Controllers Restored with System State Backups Made Prior to SP2 May Not Boot
http://support.microsoft.com/?id=295932
287061 Windows NT 4.0 and Windows 2000 disaster recovery and backup and restore procedures
http://support.microsoft.com/?id=287061
280364 How to Recover from Event ID 1168 and Event ID 1003
http://support.microsoft.com/?id=280364
265089 Event 1168: Windows 2000 DCs Unable to Boot into Active Directory
http://support.microsoft.com/?id=265089
258062 "Directory Services cannot start" error message when you start your Windows-based or SBS-based domain controller
http://support.microsoft.com/?id=258062
258007 Error Message: Lsass.exe - System Error : Security Accounts Manager
http://support.microsoft.com/?id=258007
257288 How to Recover from a Deleted Domain Controller Machine Account in Windows 2000
http://support.microsoft.com/?id=257288
255504 Using Ntdsutil.exe to seize or transfer FSMO roles to a domain controller
http://support.microsoft.com/?id=255504
249321 Unable to Log on if the Boot Partition Drive Letter Has Changed
http://support.microsoft.com/?id=249321
241594 HOW TO: Perform an Authoritative Restore to a Domain Controller in Windows 2000
http://support.microsoft.com/?id=241594
230306 How To Remove Orphaned Domains from Active Directory
http://support.microsoft.com/?id=230306
216498 HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion
http://support.microsoft.com/?id=216498
216243 Authoritative Restore of Active Directory and Impact on Trusts and Computer Accounts
http://support.microsoft.com/?id=216243
Webcasts
325560 Support WebCast: Microsoft Active Directory Disaster Recovery
http://support.microsoft.com/?id=325560
324876 Support WebCast: Maintaining Active Directory: Reducing the Directory
http://support.microsoft.com/?id=324876
TechNet Webcast: Windows Server 2003 Active Directory Diagnostics, Troubleshooting and Recovery
http://www.microsoft.com/usa/webcasts/ondemand/2149.asp
TechNet Webcast: Microsoft Windows Server 2003 Active Directory Diagnostics, Troubleshooting, and Recovery—Level 200
http://www.microsoft.com/usa/webcasts/ondemand/2234.asp
Downloads
ADRestore
http://www.sysinternals.com/ntw2k/source/misc.shtml#adrestore
DNS
Technology Center - www.microsoft.com/dns
DNS Support for Active Directory Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_addns_intro.asp
Troubleshooting Active Directory-Related DNS Problems
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd10.mspx
Windows 2000 Active Directory Architecture
http://www.microsoft.com/windows2000/techinfo/howitworks/activedirectory/w2kadarch.asp
Integrating Your Active Directory Namespace Into an Existing DNS Infrastructure With Name Overlap
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/dns04_integ_adnspace_with_nameoverlap.asp
Changes to DNS in Windows Server 2003
http://www.microsoft.com/windows2000/technologies/communications/dns/dns2003.asp
Optimizing DNS
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/c19w2kad.mspx
Managing DNS Records
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/19w2kadb.mspx
Managing DNS Server Configuration and Security
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/19w2kadc.mspx
Windows 2000 DNS White Paper
http://www.microsoft.com/windows2000/techinfo/howitworks/communications/nameadrmgmt/w2kdns.asp
Name Resolution in Active Directory
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part1/dsgch03.mspx
KB articles
834655 Problems with DNS name resolution and replication after you upgrade to Windows Server 2003
http://support.microsoft.com/?id=834655
826743 Clients cannot dynamically register DNS records in a single-label forward lookup zone
http://support.microsoft.com/?id=826743
825036 Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003
http://support.microsoft.com/?id=825036
816584 HOW TO: Set Up the Domain Name System for Active Directory in Windows Server 2003
http://support.microsoft.com/?id=816584
814591 HOW TO: Install and Configure DNS Server in Windows Server 2003
http://support.microsoft.com/?id=814591
330511 Training: Understanding and Troubleshooting DNS in Windows 2000
http://support.microsoft.com/?id=330511
323380 HOW TO: Configure DNS for Internet Access in Windows Server 2003
http://support.microsoft.com/?id=323380
321045 Description of the DNSLint Utility
http://support.microsoft.com/?id=321045
319202 Active Directory Does Not Replicate When DNS Lookup is Not Successful
http://support.microsoft.com/?id=319202
310568 Domain Subfolders Missing from Forward Lookup Zone
http://support.microsoft.com/?id=310568
301190 HOW TO: Integrate Windows 2000 DNS with an Existing DNS Infrastructure in Windows 2000
http://support.microsoft.com/?id=301190
300684 Information about configuring Windows for domains with single-label DNS names
http://support.microsoft.com/?id=300684
300202 HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?id=300202
298448 Windows 2000 DNS and Active Directory information and technical resources
http://support.microsoft.com/?id=298448
292822 Name resolution and connectivity issues on a Routing and Remote Access Server that also runs DNS or WINS
http://support.microsoft.com/?id=292822
291382 Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?id=291382
275278 DNS Server Becomes an Island When a Domain Controller Points to Itself for the _Msdcs.ForestDnsName Domain
http://support.microsoft.com/?id=275278
267855 Problems with Many Domain Controllers with Active Directory Integrated DNS Zones
http://support.microsoft.com/?id=267855
261007 Event ID 1000 Is Logged in the Application Event Log
http://support.microsoft.com/?id=261007
259277 Troubleshooting Netlogon Event 5774, 5775, and 5781
http://support.microsoft.com/?id=259277
257623 Domain Controller's Domain Name System Suffix Does Not Match Domain Name
http://support.microsoft.com/?id=257623
255248 How To Create a Child Domain in Active Directory and Delegate the DNS Namespace to the Child Domain
http://support.microsoft.com/?id=255248
254680 DNS Namespace Planning
http://support.microsoft.com/?id=254680
247811 How Domain Controllers Are Located in Windows
http://support.microsoft.com/?id=247811
246804 How to enable or disable dynamic DNS registrations in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/?id=246804
241505 SRV Records Missing After Implementing Active Directory and Domain Name System
http://support.microsoft.com/?id=241505
237675 Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?id=237675
198437 How to Convert DNS Primary Server to Active Directory Integrated
http://support.microsoft.com/?id=198437
172953 How to Install and Configure Microsoft DNS Server
http://support.microsoft.com/?id=172953
Webcasts
811118 Support WebCast: Microsoft Windows Server 2003 DNS: Stub Zones and
http://support.microsoft.com/?id=811118
329982 Support WebCast: Microsoft Windows: Using the DNSLint Utility
http://support.microsoft.com/?id=329982
325509 Support WebCast: Windows 2000 Client-side Name Resolution
http://support.microsoft.com/?id=325509
325284 Support WebCast: DNS in the Active Directory Tree
http://support.microsoft.com/?id=325284
325222 Support WebCast: Administration and Implementation of Group Policy in
http://support.microsoft.com/?id=325222
325115 Support WebCast: How Microsoft Windows 2000 Dynamic DNS Updates Work
http://support.microsoft.com/?id=325115
325110 Support WebCast: Windows 2000: Installing and Configuring the DNS
http://support.microsoft.com/?id=325110
324858 Support WebCast: Microsoft Windows 2000 DNS and UNIX BIND DNS
http://support.microsoft.com/?id=324858
324759 Support WebCast: Microsoft Exchange 2000 Server: DNS Troubleshooting in
http://support.microsoft.com/?id=324759
Newsgroups
Windows Server DNS newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.dns
Windows 2000 DNS newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.dns
Downloads
DNSLint
http://support.microsoft.com/?id=321045
Domain Join
Managing Computer Accounts
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/06w2kadb.mspx
KB articles
830880 Cannot Join Windows Server 2003 Active Directory Domain When You Run
http://support.microsoft.com/?id=830880
827181 Domain Join of a Windows 2000 Client to a Windows Server 2003 Domain
http://support.microsoft.com/?id=827181
827179 You Cannot Join a Windows XP Computer to a Windows Server 2003 Domain
http://support.microsoft.com/?id=827179
823659 Client, service, and program incompatibilities that may occur when you
http://support.microsoft.com/?id=823659
329195 Error message "Insufficient Privileges" When You Try to Join the Domain
http://support.microsoft.com/?id=329195
315150 Logon Authentication, Active Directory Replication, and Domain Joins Do
http://support.microsoft.com/?id=315150
314462 "You Have Exceeded the Maximum Number of Computer Accounts" Error
http://support.microsoft.com/?id=314462
314366 Cannot join Windows XP-Professional-based computer to a Windows NT
http://support.microsoft.com/?id=314366
297874 Error Message When You Try to Add a Workstation to a Domain
http://support.microsoft.com/?id=297874
293403 Error Message "Network Name Is No Longer Available" Joining Windows XP
http://support.microsoft.com/?id=293403
289153 Multihomed Computer with Onboard Network Adapter Cannot Rejoin Domain
http://support.microsoft.com/?id=289153
285800 "Specified Domain Either Does Not Exist or Could Not Be Contacted" Error
http://support.microsoft.com/?id=285800
266324 Windows 2000 Host Cannot Join the Domain
http://support.microsoft.com/?id=266324
265706 DCDiag and NetDiag in Windows 2000 Facilitate Domain Join and DC Creation
http://support.microsoft.com/?id=265706
260231 Windows 2000 Professional Cannot Join Windows NT 4.0 Domain with
http://support.microsoft.com/?id=260231
258832 Cannot Join Windows 2000 Client to a Windows NT Domain
http://support.microsoft.com/?id=258832
256083 Error Message: The Specified Domain Either Does Not Exist or Could Not
http://support.microsoft.com/?id=256083
251335 Domain Users Cannot Join Workstation or Server to a Domain
http://support.microsoft.com/?id=251335
243327 Default Limit to Number of Workstations a User Can Join to the Domain
http://support.microsoft.com/?id=243327
238793 Enhanced Security Joining or Resetting Machine Account in Windows 2000
http://support.microsoft.com/?id=238793
150493 How To Join a Domain From the Command Line
http://support.microsoft.com/?id=150493
Domain Rename
Understanding How Domain Rename Works
http://download.microsoft.com/download/9/6/5/965e6899-e086-4b3e-8ed6-516ea07ea225/Domain-Rename-Intro.doc
Step-by-Step Guide to Implementing Domain Rename
http://download.microsoft.com/download/c/f/c/cfcbff04-97ca-4fca-9e8c-3a9c90a2a2e2/Domain-Rename-Procedure.doc
Group Policy Considerations for Renaming a Domain
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dmebb_gpu_nnvg.asp
Renaming domains
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/domainrename.asp
KB articles
814589 HOW TO: Rename a Windows 2003 Domain Controller
http://support.microsoft.com/?id=814589
296592 How to Rename a Windows 2000 Domain Controller
http://support.microsoft.com/?id=296592
292541 How to Rename the DNS Name of a Windows 2000 Domain
http://support.microsoft.com/?id=292541
279067 How to Rename the NetBIOS Computer Name of Controllers That Are
http://support.microsoft.com/?id=279067
178009 Renaming a Domain: Process and Side Effects
http://support.microsoft.com/?id=178009
175023 Renaming a Windows NT Domain Member
http://support.microsoft.com/?id=175023
150298 Renaming a Windows NT PDC or BDC
http://support.microsoft.com/?id=150298
Webcasts
838623 TechNet Support WebCast: Renaming domains when Microsoft Exchange Server
http://support.microsoft.com/?id=838623
819145 Microsoft Windows Server 2003: Implementing an Active Directory Domain Rename Operation
http://support.microsoft.com/?id=819145
Downloads
Domain Rename Tools
http://www.microsoft.com/windowsserver2003/downloads/domainrename.mspx
DS Client
323466 Availability of the Active Directory client extension update for Windows
http://support.microsoft.com/?id=323466
316238 INFO: Files Installed by Directory Services Client Extension for Windows
http://support.microsoft.com/?id=316238
296995 Find Printer Search Does Not Work on a Windows NT 4.0 Client Using
http://support.microsoft.com/?id=296995
295168 INFO: Files Installed by Directory Services Client Extension for Windows
http://support.microsoft.com/?id=295168
295166 INFO: Advanced Installation of Directory Services Client for Windows NT
http://support.microsoft.com/?id=295166
293793 Exception 0E in Vredir Error Messages When You Open Network Files
http://support.microsoft.com/?id=293793
289105 INFO: Support for ADSI on Windows NT 4.0
http://support.microsoft.com/?id=289105
288359 INFO: WinLogon Change Password Behavior in Windows NT DSClient
http://support.microsoft.com/?id=288359
288358 HOW TO: Install the Active Directory Client Extension
http://support.microsoft.com/?id=288358
281235 The DSCLIENT.EXE /Q Command Does Not Run in Quiet Mode on Computers
http://support.microsoft.com/?id=281235
276472 Directory Services Client Is Not Included with Windows Me
http://support.microsoft.com/?id=276472
249841 How Windows 98 Active Directory Client Extension uses Active Directory site information
http://support.microsoft.com/?id=249841
EFS
Frequently Asked Questions: New Security Tool for EFS
http://www.microsoft.com/technet/security/tools/cipherfaq.mspx
Add EFS Options to the Shortcut Menu
http://www.microsoft.com/windowsxp/using/security/learnmore/tips/keam.mspx
Encrypting File System
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_qutx.asp
Encrypting File System
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsck_efs_xhkd.asp
Encrypting File System (EFS) in Windows 2000
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part2/dsgch15.mspx
Encrypting File System in Windows XP and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
Step-by-Step Guide to Encrypting File System (EFS)
http://www.microsoft.com/windows2000/techinfo/planning/security/efssteps.asp
Encrypting File System
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_SEprocsOndisk.asp
The Windows Server 2003 Family Encrypting File System
http://www.msdn.microsoft.com/library/en-us/dnsecure/html/WinNETSrvr-EncryptedFileSystem.asp
KB articles
841715 You cannot decrypt data on Windows XP SP1 or later versions
http://support.microsoft.com/?id=841715
828216 Unexpected behavior in Windows 2000 when you encrypt every file in a
http://support.microsoft.com/?id=828216
827014 New Functionality Is Available for Cipher.exe in Windows 2000 and
http://support.microsoft.com/?id=827014
818200 An Attacker with Physical Access to Your Computer May Be Able to Acc
http://support.microsoft.com/?id=818200
814599 HOW TO: Use Cipher.exe to Overwrite Deleted Data in Windows Server 2
http://support.microsoft.com/?id=814599
329741 EFS Files Appear Corrupted When You Open Them
http://support.microsoft.com/?id=329741
324897 HOW TO: Manage the Encrypting File System in Windows Server 2003
http://support.microsoft.com/?id=324897
322346 You Cannot Access Protected Data After You Change Your Password
http://support.microsoft.com/?id=322346
320050 HOW TO: Use the File Attribute Management Script (Fileattributes.pl)
http://support.microsoft.com/?id=320050
316994 Denied Access to Encrypted Files After You Change Your Password
http://support.microsoft.com/?id=316994
313365 HOW TO: Configure a Domain EFS Recovery Policy in Windows 2000
http://support.microsoft.com/?id=313365
313277 HOW TO: Use Ntbackup to Recover an Encrypted File or Folder in Windo
http://support.microsoft.com/?id=313277
311513 Users with Roaming Profiles Cannot Use EFS On Domain Controllers
http://support.microsoft.com/?id=311513
308993 HOW TO: Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993
302093 HOW TO: Prevent Files from Being Encrypted When Copied to a Server
http://support.microsoft.com/?id=302093
288579 Need to Turn Off EFS on a Windows 2000-Based Computer in Windows NT
http://support.microsoft.com/?id=288579
283223 Recovery of Encrypted Files on a Server
http://support.microsoft.com/?id=283223
276239 Unable to Recover Encrypted Files After the Domain Controller Is Dem
http://support.microsoft.com/?id=276239
273856 Third-Party Certification Authority Support for Encrypting File Syst
http://support.microsoft.com/?id=273856
269397 Logon Process Hangs After Encrypting Files on Windows 2000
http://support.microsoft.com/?id=269397
264064 "Access is Denied" Error Message When Encrypting or Decrypting Files
http://support.microsoft.com/?id=264064
259732 EFS Recovery Agent Cannot Export Private Keys
http://support.microsoft.com/?id=259732
255742 Methods for Recovering Encrypted Data Files
http://support.microsoft.com/?id=255742
255026 The Local Administrator Is Not Always the Default Encrypting File Sy
http://support.microsoft.com/?id=255026
250494 "Access Is Denied" Error Message Appears When Permissions Are Correc
http://support.microsoft.com/?id=250494
243850 Cannot Gain Access to Microsoft Encrypted File Systems
http://support.microsoft.com/?id=243850
243035 HOW TO: Disable/Enable EFS on a Stand-Alone Windows 2000-Based Compu
http://support.microsoft.com/?id=243035
242296 HOW TO: Restore an Encrypting File System Private Key for Encrypted Data Recovery in Windows 2000
http://support.microsoft.com/?id=242296
242296 HOW TO: Restore an Encrypting File System Private Key for Encrypted
http://support.microsoft.com/?id=242296
241201 HOW TO: Back Up the Recovery Agent Encrypting File System Private Ke
http://support.microsoft.com/?id=241201
241121 How to enable the encryption command on the Shortcut menu
http://support.microsoft.com/?id=241121
223316 Best practices for the Encrypting File System
http://support.microsoft.com/?id=223316
222022 HOW TO: Disable EFS for All Computers in a Windows 2000-Based Domain
http://support.microsoft.com/?id=222022
Webcasts
TechNet Webcast: Encrypting File System (EFS): deployment, best practices and techniques to avoid attacks - Level 300
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032248127&Culture=en-US
FRS
Technology Center - www.microsoft.com/frs
File Replication Service
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsdh_frs_tkae.asp
FRS Technical Reference
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_frs_intro.asp
Monitoring and Troubleshooting the File Replication Service
http://www.microsoft.com/windowsserver2003/technologies/fileandprint/file/dfs/tshootfrs.mspx
Ultrasound Help File (contains FRS Troubleshooter)
http://download.microsoft.com/download/3/2/e/32e40b0d-fbba-44ea-8d06-326732b04f0c/Ultrasound.chm
Distributed File System and File Replication Services Technology Center
http://www.microsoft.com/frs
Troubleshooting File Replication Overview
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd11.mspx
Keeping an Eye on Your NTFS Drives: the Windows 2000 Change Journal Explained
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/msjntfs5.mspx
KB articles
840675 Configuration and operational recommendations for the File Replication
http://support.microsoft.com/?id=840675
823230 Issues that are resolved in the pre-Service Pack 1 release of Ntfrs.exe
http://support.microsoft.com/?id=823230
822158 Virus scanning recommendations on a Windows 2000 or on a Windows Server
http://support.microsoft.com/?id=822158
819268 Event ID 13552 and 13559 on DFS Replica Members or Domain Controllers That Are Hosting a SYSVOL Replica Set
http://support.microsoft.com/?id=819268
816493 How to Configure the File Replication Service to Allow Fewer Sharing
http://support.microsoft.com/?id=816493
815263 Antivirus, backup, and disk optimization programs that are compatible
http://support.microsoft.com/?id=815263
811370 Issues that are fixed in the post-Service Pack 3 release of Ntfrs.exe
http://support.microsoft.com/?id=811370
328492 Folder Name Is Changed to ("FolderName_NTFRS_
http://support.microsoft.com/?id=328492
327781 How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server 2003 Domain Controllers
http://support.microsoft.com/?id=327781
324175 Best Practices for Sysvol Maintenance
http://support.microsoft.com/?id=324175
323247 Overview of Basic File Replication Service Concepts and Terminology
http://support.microsoft.com/?id=323247
319553 How to Restrict FRS Replication Traffic to a Specific Static Port
http://support.microsoft.com/?id=319553
316790 The Sysvol and Netlogon Shares Are Missing After You Restore a Domain Controller from Backup
http://support.microsoft.com/?id=316790
315457 How to Rebuild SYSVOL and Its Content in a Domain
http://support.microsoft.com/?id=315457
312862 Recovering Missing FRS Objects and FRS Attributes in Active Directory
http://support.microsoft.com/?id=312862
292438 Troubleshooting journal_wrap errors on Sysvol and DFS replica sets
http://support.microsoft.com/?id=292438
290762 FRS: Using the BurFlags Registry Key to Reinitialize File Replication
http://support.microsoft.com/?id=290762
284947 Antivirus programs may modify security descriptors and cause excessive
http://support.microsoft.com/?id=284947
282791 FRS: Disk Defragmentation Causes Excessive FRS Replication Traffic
http://support.microsoft.com/?id=282791
279156 The Effects of Setting the File System Policy on a Disk Drive or Folder
http://support.microsoft.com/?id=279156
272279 How to Troubleshoot the File Replication Service and the Distributed File System
http://support.microsoft.com/?id=272279
257338 Troubleshooting Missing SYSVOL and NETLOGON Shares on Windows 2000 Domain Controllers
http://support.microsoft.com/?id=257338
205524 How to create and manipulate NTFS junction points
http://support.microsoft.com/?id=205524
Webcasts
TechNet Webcast: Monitoring and Troubleshooting the Windows File Replication Service
http://www.microsoft.com/usa/webcasts/ondemand/2148.asp
325027 Support WebCast: Introduction to and Administration of the File Replication Service
http://support.microsoft.com/?id=325027
Newsgroups
Windows Server DFS FRS newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.dfs_frs
Downloads
FRSDiag
http://www.microsoft.com/downloads/details.aspx?FamilyId=43CB658E-8553-4DE7-811A-562563EB5EBF&displaylang=en
Ultrasound SP1
http://www.microsoft.com/downloads/details.aspx?FamilyID=61acb9b9-c354-4f98-a823-24cc0da73b50&DisplayLang=en
MSDE 2000 Release A
http://www.microsoft.com/downloads/details.aspx?FamilyID=413744D1-A0BC-479F-BAFA-E4B278EB9147&displaylang=en
FSMO
FSMO placement and optimization on Windows 2000 domain controllers
https://www.microsoft.com/serviceproviders/support/fsmo_place_P118866.asp
Planning operations master locations
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_ADplanningFSMOlocations.htm
Managing Flexible Single-Master Operations
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/WINDOWS2000/techinfo/reskit/en-us/distrib/dsbl_fsm_XWWB.asp
Managing Flexible Single-Master Operations
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsbl_fsm_cfyf.asp
Operations master roles
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Sag_ADFSMOs.asp
Responding to operations master failures
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_ADrespondFSMOfailures.asp
Transferring operations master roles
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_ADtransferFSMOroles.asp
TechNet Script: Identify FSMO Roles
http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm24.mspx
KB articles
839879 Event ID 16650: The account-identifier allocator failed to initialize in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/?id=839879
324801 HOW TO: View and Transfer FSMO Roles in Windows Server 2003
http://support.microsoft.com/?id=324801
321469 Scripting Operations Master Role Transfers
http://support.microsoft.com/?id=321469
316201 RID Pool Allocation and Sizing Changes in Windows 2000 SP4
http://support.microsoft.com/?id=316201
307725 Backup and Restore of RID Flexible Single-Master Operations Domain
http://support.microsoft.com/?id=307725
305476 Initial synchronization requirements for Windows 2000 Server and Windows Server 2003 operations master role holders
http://support.microsoft.com/?id=305476
297230 HOW TO: Use the Replication Monitor to Determine the Operations Master
http://support.microsoft.com/?id=297230
283595 HOW TO: Change the Role Owner of the Operations Master After a
http://support.microsoft.com/?id=283595
255690 HOW TO: View and Transfer FSMO Roles in the Graphical User Interface
http://support.microsoft.com/?id=255690
255504 Using Ntdsutil.exe to seize or transfer FSMO roles to a domain controller
http://support.microsoft.com/?id=255504
248410 Error Message: The Account-Identifier Allocator Failed to Initialize
http://support.microsoft.com/?id=248410
248047 Phantoms, Tombstones and the Infrastructure Master
http://support.microsoft.com/?id=248047
235617 How to Find the FSMO Role Owners Using ADSI and WSH
http://support.microsoft.com/?id=235617
234790 How To Find Servers That Hold Flexible Single Master Operations Roles
http://support.microsoft.com/?id=234790
228776 Setting User Rights for Designating FSMO Roles in an Enterprise
http://support.microsoft.com/?id=228776
223787 Flexible Single Master Operation Transfer and Seizure Process
http://support.microsoft.com/?id=223787
223346 FSMO placement and optimization on Windows 2000 domain controllers
http://support.microsoft.com/?id=223346
216899 Best Practice Methods for Windows 2000 Domain Controller Setup
http://support.microsoft.com/?id=216899
197132 Windows 2000 Active Directory FSMO Roles
http://support.microsoft.com/?id=197132
Global Catalog
Understanding the global catalog
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/n_gc.asp
Cache universal group memberships
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/gc_togc.asp
Global Catalog Servers
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsbb_act_qhlb.asp
Sizing Guidelines for Windows 2000 Domain Controller and Global Catalog Server
http://www.microsoft.com/windows2000/techinfo/planning/management/dcsize.asp
TechNet Script: Identify a Global Catalog Server
http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm20.mspx
TechNet Script: Disable a Global Catalog Server
http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm09.mspx
TechNet Script: Enable a Global Catalog Server
http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm10.mspx
TechNet Script: Determining if an Attribute is in the Global Catalog
http://www.microsoft.com/technet/community/scriptcenter/other/scroth11.mspx
TechNet Script: Determining Whether Attributes are Indexed and/or in the Global Catalog
http://www.microsoft.com/technet/community/scriptcenter/other/scroth17.mspx
TechNet Script: Identifying Attributes that are Both Indexed and in the Global Catalog
http://www.microsoft.com/technet/community/scriptcenter/other/scroth18.mspx
KB articles
824139 Domain Controller Loses Its Role as a Global Catalog Server
http://support.microsoft.com/?id=824139
816105 HOW TO: Create or Move a Global Catalog in Windows Server 2003
http://support.microsoft.com/?id=816105
810089 Cannot Promote New Global Catalog When Conflict Naming Contexts Exist
http://support.microsoft.com/?id=810089
315850 Dcpromo.exe Does Not Work if the Domain Naming Master Is Not a Global
http://support.microsoft.com/?id=315850
314282 Lingering objects may remain after you bring an out-of-date global
http://support.microsoft.com/?id=314282
313994 HOW TO: Create or Move a Global Catalog in Windows 2000
http://support.microsoft.com/?id=313994
313992 HOW TO: Add an Attribute to the Global Catalog in Windows 2000
http://support.microsoft.com/?id=313992
306602 How to Optimize the Location of a Domain Controller or Global Catalog
http://support.microsoft.com/?id=306602
296882 How to promote a domain controller to a global catalog server
http://support.microsoft.com/?id=296882
293421 Domain Controllers Continue to Use Global Catalog Server After It Has
http://support.microsoft.com/?id=293421
257203 Common Default Attributes Set for Active Directory and Global Catalog
http://support.microsoft.com/?id=257203
256938 Default Global Catalog Attributes in Windows 2000 Active Directory Schema
http://support.microsoft.com/?id=256938
256287 Unable to Change Password with User Principal Name When a Global Catalog
http://support.microsoft.com/?id=256287
253644 Inbound Replication to Global Catalog Servers Does Not Work Because of a
http://support.microsoft.com/?id=253644
248717 How to Modify Attributes That Replicate to the Global Catalog
http://support.microsoft.com/?id=248717
241789 How to Disable the Requirement that a Global Catalog Server Be Available
http://support.microsoft.com/?id=241789
230663 HOW TO: Enumerate Attributes Replicated to the Global Catalog
http://support.microsoft.com/?id=230663
230662 Enumerating Indexed Attributes in Windows 2000 Active Directory
http://support.microsoft.com/?id=230662
229662 How to Control What Data Is Stored in the Global Catalog
http://support.microsoft.com/?id=229662
216970 Global Catalog Server Requirement for User and Computer Logon
http://support.microsoft.com/?id=216970
Group Policy - Application Management
Best practices for Group Policy Software Installation
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_sp_bestprac_softinst.asp
Group Policy Software Installation Extension Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpswi_intro.asp
Understanding Software Installation (Windows 2000)
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_ADEconcepts_01.htm
Understanding Software Installation (Windows XP)
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_adeconcepts_01.mspx
Software Installation and Maintenance
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part4/dsgch23.mspx
Managing Users' Configurations by Policy
http://www.microsoft.com/office/ork/2003/five/ch18/mnta04.htm
Windows Installer: Benefits and Implementation for System Administrators
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/winmsi.mspx
Software Installation and Maintenance
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/inmnwp.mspx
Step-by-Step Guide to Software Installation and Maintenance
http://www.microsoft.com/windows2000/techinfo/planning/management/swinstall.asp
KB articles
835427 Roaming profile users can still install an advertised program after you
http://support.microsoft.com/?id=835427
828452 An Assigned Package Is Reinstalled Every Time Clients Log on to the
http://support.microsoft.com/?id=828452
821870 A Previous Installation of a Program is Automatically Removed When You
http://support.microsoft.com/?id=821870
816519 HOW TO: Use Group Policy to Deploy Windows XP in a Windows Server
http://support.microsoft.com/?id=816519
816102 HOW TO: Use Group Policy to Remotely Install Software in Windows Server
http://support.microsoft.com/?id=816102
815438 Successive Attempts to Complete a Group Policy Installation of a Service
http://support.microsoft.com/?id=815438
811996 A Windows Installer Package That Is Installed with Group Policy Does Not
http://support.microsoft.com/?id=811996
326424 Cannot Install Program over an Existing Installation by Using an .msi
http://support.microsoft.com/?id=326424
324750 HOW TO: Assign Software to a Specific Group By Using a Group Policy in
http://support.microsoft.com/?id=324750
324209 Microsoft installer packages may be reinstalled when you start a
http://support.microsoft.com/?id=324209
321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based on
http://support.microsoft.com/?id=321713
314953 HOW TO: Use Group Policy to Deploy Windows XP in a Windows 2000-Based Network
http://support.microsoft.com/?id=314953
314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000
http://support.microsoft.com/?id=314934
312972 HOW TO: Use IntelliMirror in Windows 2000 to Deploy Office XP Programs
http://support.microsoft.com/?id=312972
302430 How to assign software to a specific group by using a Group Policy
http://support.microsoft.com/?id=302430
285827 DFS and Software Distribution Interaction
http://support.microsoft.com/?id=285827
281614 Program Deployment Is Not Successful Due to Lack of Space in SYSVOL
http://support.microsoft.com/?id=281614
278503 Best Practices for Using Update.msi to deploy Service Packs
http://support.microsoft.com/?id=278503
278472 Packages Assigned to Computers with Group Policy Are Not Installed
http://support.microsoft.com/?id=278472
253285 Windows 2000 Hotfixes Are Not Distributed in MSI Format
http://support.microsoft.com/?id=253285
249621 Enabling Windows 2000 Application Deployment Debug Logging
http://support.microsoft.com/?id=249621
246509 Troubleshooting Program Deployment By Using Verbose Logging
http://support.microsoft.com/?id=246509
236943 Working with Transforms for Assigned or Published Programs in Active
http://support.microsoft.com/?id=236943
224330 Assigning a Windows Installer Package with Minimal Interaction
http://support.microsoft.com/?id=224330
223300 How to Enable Windows Installer Logging
http://support.microsoft.com/?id=223300
Group Policy - Folder Redirection
Implementing Folder Redirection
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dmebc_dsm_cvng.asp
Folder Redirection Extension Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpfdr_intro.asp
Folder Redirection
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/Folder.htm
Managing Documents with Folder Redirection
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prde_ffs_axgn.asp
KB articles
834792 A folder that is named %homedrive% appears on your Windows 2000 desktop
http://support.microsoft.com/?id=834792
827079 Folder Redirection Operation Is Unsuccessful When You Rename the User
http://support.microsoft.com/?id=827079
827059 Folder Redirection Operation Is Unsuccessful When You Rename the User
http://support.microsoft.com/?id=827059
321805 Folder Redirection Does Not Succeed When You Specify Mapped Network
http://support.microsoft.com/?id=321805
310746 Configuration of the My Documents Folder
http://support.microsoft.com/?id=310746
295349 Folder Redirection with Mandatory Profiles
http://support.microsoft.com/?id=295349
288991 Enabling the Administrator to Have Access to Redirected Folders
http://support.microsoft.com/?id=288991
278994 Group Policy does not return folder redirection to the default location
http://support.microsoft.com/?id=278994
274789 The Folder Redirection Feature Does Not Function
http://support.microsoft.com/?id=274789
274443 How to dynamically create secure redirected folders by using Folder Redirection in Windows 2000
http://support.microsoft.com/?id=274443
272723 Administrator Cannot Access Another User's Redirected My Documents Folder
http://support.microsoft.com/?id=272723
271735 Start Menu Does Not Respond When You Log On to a Domain
http://support.microsoft.com/?id=271735
242557 Registry Settings for Folder Redirection in Windows
http://support.microsoft.com/?id=242557
232692 Folder Redirection Feature in Windows
http://support.microsoft.com/?id=232692
221837 Configuration of the My Documents Folder
http://support.microsoft.com/?id=221837
216463 Redirecting the My Documents Folder for All Users in Windows 2000
http://support.microsoft.com/?id=216463
Group Policy - How To
Automating Administrative Tasks, Policies, and Procedures
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/c04w2kad.mspx
KB articles
816100 HOW TO: Prevent Domain Group Policies from Applying to Administrator
http://support.microsoft.com/?id=816100
325852 HOW TO: Hide Control Panel Tools in Windows Server 2003
http://support.microsoft.com/?id=325852
323639 HOW TO: Create Custom Administrative Templates in Windows 2000
http://support.microsoft.com/?id=323639
323525 HOW TO: Restrict Users from Running Specific Windows Programs in Windows 2000
http://support.microsoft.com/?id=323525
323276 HOW TO: Install and Use RSoP in Windows Server 2003
http://support.microsoft.com/?id=323276
321709 HOW TO: Use the Group Policy Results Tool in Windows 2000
http://support.microsoft.com/?id=321709
318753 HOW TO: Create a System Policy Setting in Windows 2000
http://support.microsoft.com/?id=318753
315418 HOW TO: Optimize Group Policy for Logon Performance in Windows 2000
http://support.microsoft.com/?id=315418
307900 Upgrading Windows 2000 Group Policy for Windows XP
http://support.microsoft.com/?id=307900
300843 How to delegate Group Policy Creation to a user
http://support.microsoft.com/?id=300843
293655 How to apply local policies to all users except administrators in a workgroup setting in Windows 2000
http://support.microsoft.com/?id=293655
278295 How to Lock Down a Windows 2000 Terminal Server Session
http://support.microsoft.com/?id=278295
275715 HOW TO: Delegate Administration of Group Policies
http://support.microsoft.com/?id=275715
274478 Group Policies for Windows 2000 Professional Clients in Windows NT 4.0
http://support.microsoft.com/?id=274478
260370 How to Apply Group Policy Objects to Terminal Services Servers
http://support.microsoft.com/?id=260370
248392 Scripting the Addition of Group Policy Links
http://support.microsoft.com/?id=248392
245422 How to Enable Logging for Security Configuration Client Processing in
http://support.microsoft.com/?id=245422
234270 Using Group Policies to Control Printers in Active Directory
http://support.microsoft.com/?id=234270
231289 Using Group Policy Objects to hide specified drives in My Computer for Windows 2000
http://support.microsoft.com/?id=231289
227448 Using Secedit.exe to Force Group Policy to Be Applied Again
http://support.microsoft.com/?id=227448
221833 How to enable user environment debug logging in retail builds of Windows
http://support.microsoft.com/?id=221833
203607 HOW TO: How to Modify the Default Group Policy Refresh Interval
http://support.microsoft.com/?id=203607
192794 How to apply System Policy settings to Terminal Server
http://support.microsoft.com/?id=192794
Group Policy - IE Maintenance
Internet Explorer Maintenance Extension Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpiem_intro.asp
Use of Group Policy Objects to Administer Internet Explorer
http://www.microsoft.com/technet/community/chats/trans/ie/ie0416.mspx
KB articles
833633 How to strengthen the security settings for the Local Machine zone in
http://support.microsoft.com/?id=833633
825685 Internet Explorer Maintenance policies are not applied in preference mode
http://support.microsoft.com/?id=825685
821871 The "Disable the Privacy page" Policy is Missing From Group Policy
http://support.microsoft.com/?id=821871
316116 You cannot manage Internet Explorer 6 Group Policy settings on a Windows 2000-based computer
http://support.microsoft.com/?id=316116
306915 Internet Explorer Maintenance Group Policies Do Not Apply During
http://support.microsoft.com/?id=306915
293766 Trusted Sites Settings of Internet Explorer Security Zones and Content
http://support.microsoft.com/?id=293766
291852 Connection Settings Are Unexpectedly Lost with Internet Explorer
http://support.microsoft.com/?id=291852
286251 Cannot Set Proxy Policy Settings to "Not Configured" After They Have
http://support.microsoft.com/?id=286251
283185 How to Manage Cookies in Internet Explorer 6
http://support.microsoft.com/?id=283185
277558 Importing Internet Explorer Settings May Affect Other Policies
http://support.microsoft.com/?id=277558
274846 HOW TO: Set Advanced Settings In Internet Explorer by Using Group Policy Objects
http://support.microsoft.com/?id=274846
240797 How to Stop an ActiveX Control from Running in Internet Explorer
http://support.microsoft.com/?id=240797
Group Policy - Informational
Technology Center - www.microsoft.com/gp
Introduction to Group Policy in Windows Server 2003
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx
Technical Overview of Windows Server 2003 Management Services
http://www.microsoft.com/windowsserver2003/techinfo/overview/mgmtsrvcs.mspx
Migrating GPOs Across Domains with GPMC
http://www.microsoft.com/windowsserver2003/gpmc/migrgpo.mspx
Administering Group Policy with the GPMC
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx
Working with Group Policies
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/04w2kadb.mspx
Designing Organization-wide Policies
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/gpo.mspx
Implementing Registry-Based Group Policy
http://www.microsoft.com/windows2000/techinfo/howitworks/management/rbppaper.asp
Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyID=d26e88bc-d445-4e8f-aa4e-b9c27061f7ca&DisplayLang=en
Group Policy Settings Reference for Windows XP Professional Service Pack 2 Release Candidate 2
http://www.microsoft.com/downloads/details.aspx?FamilyId=EF3A35C0-19B9-4ACC-B5BE-9B7DAB13108E&displaylang=en
Group Policy ADM Files
http://www.microsoft.com/downloads/details.aspx?FamilyId=92759D4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en
Group Policy Registry Table
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/gpref.asp
Outline for Group Policy Design Readiness
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/gpdesout.mspx
Step-by-Step Guide to Understanding the Group Policy Feature Set
http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
Group Policy in Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/gp/default.mspx
Group Policy Settings Reference for Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=7821C32F-DA15-438D-8E48-45915CD2BC14&displaylang=en
KB articles
833783 The Dcgpofix tool does not restore security settings in the Default
http://support.microsoft.com/?id=833783
831787 "Prevent Access to Registry Editing Tools" policy changes in Windows XP
http://support.microsoft.com/?id=831787
816662 Recommendations for managing Group Policy administrative template (.adm)
http://support.microsoft.com/?id=816662
323276 HOW TO: Install and Use RSoP in Windows Server 2003
http://support.microsoft.com/?id=323276
309172 Group Policy Should Not Be Filtered By Domain Local Groups
http://support.microsoft.com/?id=309172
305293 Description of the Windows XP Professional Fast Logon Optimization
http://support.microsoft.com/?id=305293
298444 A Description of the Group Policy Update Utility
http://support.microsoft.com/?id=298444
294751 Terminal Services Group Policy Objects
http://support.microsoft.com/?id=294751
274478 Group Policies for Windows 2000 Professional Clients in Windows NT 4.0
http://support.microsoft.com/?id=274478
259576 Group Policy Application Rules for Domain Controllers
http://support.microsoft.com/?id=259576
248392 Scripting the Addition of Group Policy Links
http://support.microsoft.com/?id=248392
231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287
227369 Default Behavior for Group Policy Extensions with Slow Link
http://support.microsoft.com/?id=227369
227260 How a Slow Link Is Detected for Processing User Profiles and Group Policy
http://support.microsoft.com/?id=227260
220822 Group Policy Objects Applied to Organizational Units Containing Only
http://support.microsoft.com/?id=220822
218601 Local Group Policy Objects Cannot Be Set on a Per-User Basis
http://support.microsoft.com/?id=218601
201453 Group Policy History Stored in Registry
http://support.microsoft.com/?id=201453
156699 Limitations of "Run Only Allowed Windows Application"
http://support.microsoft.com/?id=156699
Webcasts
TechNet Webcast: Group Policy Power Hour: Old School vs. New School - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254360&Culture=en-US
TechNet Webcast: Group Policy Power Hour: All About RSOP - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254363&Culture=en-US
TechNet Webcast: Windows Server 2003 Group Policy Essentials - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254176&Culture=en-US
TechNet Webcast: Understanding Group Policy on Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254095&Culture=en-US
Understanding, Implementing & Administering Group Policy in Windows 2000 (Level 100)
http://www.microsoft.com/usa/webcasts/ondemand/1594.asp'
TechNet Webcast: Microsoft® Windows® Server 2003 Group Policy Management Console
http://www.microsoft.com/usa/webcasts/ondemand/1541.asp
TechNet Webcast: Managing Group Policy
http://www.microsoft.com/usa/webcasts/ondemand/2047.asp
TechNet Webcast: Windows 2000/2003 Group Policy Essentials
http://www.microsoft.com/usa/webcasts/ondemand/2028.asp
TechNet Webcast: Understanding and Creating Effective Group Policy’s
http://www.microsoft.com/usa/webcasts/ondemand/2032.asp
TechNet Webcast: Scripting Group Policy Operations
http://www.microsoft.com/usa/webcasts/ondemand/2151.asp
TechNet Webcast: Understanding Group Policy on Windows Server 2003
http://www.microsoft.com/usa/webcasts/ondemand/2155.asp
TechNet Webcast: Understanding Group Policy on Microsoft Windows Server 2003—Level 200
http://www.microsoft.com/usa/webcasts/ondemand/2235.asp
TechNet Webcast: Understanding Group Policy on Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032242136&Culture=en-US
TechNet Webcast: Best Practices when Deploying and Managing Group Policy - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032253797&Culture=en-US
811782 Support WebCast: Microsoft Windows XP: An Overview of Policies and
http://support.microsoft.com/?id=811782
325388 Support WebCast: Windows 2000: Group Policy
http://support.microsoft.com/?id=325388
325285 Support WebCast: Microsoft Windows 2000: Planning and Configuring
http://support.microsoft.com/?id=325285
325222 Support WebCast: Administration and Implementation of Group Policy in Microsoft Windows 2000
http://support.microsoft.com/?id=325222
Newsgroups
Windows XP: Configuration and Management newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windowsxp.configuration_manage
Windows: Group Policy newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.group_policy
Windows 2000: Group Policy newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.group_policy
Downloads
GPMC SP1
http://www.microsoft.com/downloads/details.aspx?FamilyId=C355B04F-50CE-42C7-A401-30BE1EF647EA&displaylang=en
Group Policy ADM Files
http://www.microsoft.com/downloads/details.aspx?FamilyId=92759D4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en
Recreatedefpol
http://www.microsoft.com/downloads/details.aspx?FamilyId=B5B685AE-B7DD-4BB5-AB2A-976D6873129D&displaylang=en
Group Policy Inventory (GPInventory.exe)
http://www.microsoft.com/downloads/details.aspx?familyid=1d24563d-cac9-4017-af14-8dd686a96540&displaylang=en
Group Policy - Scripts
Windows 2000 Script Policies
http://www.microsoft.com/technet/archive/community/columns/tips/2kscript.mspx
Assigning logon scripts to user or group accounts
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_lsconcepts_1.htm
Order of events when starting up and logging on
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/orderofevents.asp
Logon Scripts
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_LStopnode.asp
Scripts Extension Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpscr_intro.asp
Windows 2000 Computer Startup Scripts
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/startw2k.mspx
KB articles
837687 The logon script is not applied when users log on to a Windows
http://support.microsoft.com/?id=837687
814608 Group Policy Scripts Extension Truncates Script File Name If Path and
http://support.microsoft.com/?id=814608
812542 Script You Add to a Windows Server 2003 Policy Does Not Run
http://support.microsoft.com/?id=812542
328991 Script Policy Is Not Run When a Slow Link Is Detected
http://support.microsoft.com/?id=328991
325347 HOW TO: Run a Logon Script One Time When a New User Logs On in Windows
http://support.microsoft.com/?id=325347
324803 HOW TO: Assign a Logon Script to a Profile for a Local User in Windows Server 2003
http://support.microsoft.com/?id=324803
322241 How to assign scripts in Windows 2000
http://support.microsoft.com/?id=322241
321707 HOW TO: Automatically Run Programs When Users Log On to Windows 2000
http://support.microsoft.com/?id=321707
310930 Logon Script Does Not Run If a User Belongs to a Large Number of Groups
http://support.microsoft.com/?id=310930
304970 Scripts May Not Run Before Windows Explorer Starts Even Though the "Run
http://support.microsoft.com/?id=304970
302104 The Logon Script Does Not Run During the Initial Logon Process
http://support.microsoft.com/?id=302104
284193 How to run a logon script one time when a new user logs on
http://support.microsoft.com/?id=284193
275506 Access to the Desktop Is Granted Before Logon Scripts Complete
http://support.microsoft.com/?id=275506
265016 How to Run a Domain Logon Script in the Foreground with the Start.exe
http://support.microsoft.com/?id=265016
262625 How to Set the NUM LOCK State at Logon Using a Logon Script
http://support.microsoft.com/?id=262625
198642 Overview of Logon, Logoff, Startup, and Shutdown Scripts in Windows 2000
http://support.microsoft.com/?id=198642
190899 How to determine the OS type in a logon script
http://support.microsoft.com/?id=190899
176197 How to Hide the Logon Script Dialog Box on a Windows Client
http://support.microsoft.com/?id=176197
Group Policy - Security Policy
Security Settings Extension Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpssp_intro.asp
Software Restriction Policies Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_gpsrp_intro.asp
Using Software Restriction Policies to Protect Against Unauthorized Software
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
Step-by-Step Guide to Configuring Enterprise Security Policies
http://www.microsoft.com/windows2000/techinfo/planning/security/entsecsteps.asp
Software restriction policies
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Safer_topnode.asp
Deploying Security Policy
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dmebg_dsp_overview.asp
Windows 2000 Default Security Policy Settings
http://www.microsoft.com/technet/security/prodtech/win2000/win2khg/appxa.mspx
Windows 2000 Default User Rights and Privileges
http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/appxb.mspx
Using Security Policy
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prdd_sec_divp.asp
KB articles
837330 The size of the registry increases and your computer may not start after
http://support.microsoft.com/?id=837330
834519 Network users may experience extended logon times in Windows 2000
http://support.microsoft.com/?id=834519
833783 The Dcgpofix tool does not restore security settings in the Default
http://support.microsoft.com/?id=833783
829755 The Active Directory DIT file grows too fast
http://support.microsoft.com/?id=829755
827684 Scepol.log File Size Increases Beyond 1 MB Limit
http://support.microsoft.com/?id=827684
827664 Local Security Policy Values May Revert to the Values That Are Stored in
http://support.microsoft.com/?id=827664
824526 Microsoft Windows Server 2003 Software Restriction Policies
http://support.microsoft.com/?id=824526
823659 Client, service, and program incompatibilities that may occur when you
http://support.microsoft.com/?id=823659
816585 HOW TO: Apply Predefined Security Templates in Windows Server 2003
http://support.microsoft.com/?id=816585
816580 HOW TO: Analyze System Security in Windows Server 2003
http://support.microsoft.com/?id=816580
810076 Updates to Restricted Groups ("Member of") Behavior of User-Defined
http://support.microsoft.com/?id=810076
324800 HOW TO: Reset User Rights in the Default Domain Group Policy in Windows
http://support.microsoft.com/?id=324800
324383 Troubleshooting SCECLI 1202 Events
http://support.microsoft.com/?id=324383
324036 HOW TO: Use Software Restriction Policies in Windows Server 2003
http://support.microsoft.com/?id=324036
313222 HOW TO: Reset Security Settings Back to the Defaults
http://support.microsoft.com/?id=313222
306100 Inconsistent Group Membership State after a Restricted Group Policy Is
http://support.microsoft.com/?id=306100
301195 HOW TO: Configure Security for Files and Folders on a Network (Domain) in Windows 2000
http://support.microsoft.com/?id=301195
283904 How to Add Third-Party Services to the System Services in Group Policy
http://support.microsoft.com/?id=283904
269236 Changes Are Not Applied When You Change the Password Policy
http://support.microsoft.com/?id=269236
267553 How to Reset User Rights in the Default Domain Controllers Group Policy Object
http://support.microsoft.com/?id=267553
256345 HOW TO: Configure Group Policies to Set Security for System Services
http://support.microsoft.com/?id=256345
234926 Windows 2000 Security Templates Are Incremental
http://support.microsoft.com/?id=234926
228496 HOW TO: Use Restricted Groups in Windows 2000
http://support.microsoft.com/?id=228496
226243 How to reset security settings in the default Domain GPO in Windows 2000
http://support.microsoft.com/?id=226243
221930 Domain Security Policy in Windows 2000
http://support.microsoft.com/?id=221930
214752 How to Add Custom Registry Settings to Security Configuration Editor
http://support.microsoft.com/?id=214752
Group Policy - Troubleshooting
Troubleshooting Group Policy Issues in Windows 2000
http://www.microsoft.com/technet/community/columns/profwin/pw0502.mspx
Troubleshooting Group Policy in Windows 2000
http://www.microsoft.com/windows2000/techinfo/howitworks/management/gptshoot.asp
Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en
Troubleshooting Change and Configuration Management
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part4/dsgch25.mspx
KB articles
842804 Group Policy processing does not work and events 1030 and 1058 are logged in the application log of a domain controller
http://support.microsoft.com/?id=842804
834649 Client computers record Event ID 1030 and Event ID 1058 when DFS is not
http://support.microsoft.com/?id=834649
834519 Network users may experience extended logon times in Windows 2000
http://support.microsoft.com/?id=834519
832215 You receive event ID 1097 and event ID 1030 error events when you restart a Windows Server 2003-based domain controller
http://support.microsoft.com/?id=832215
830676 Group Policy processing fails with Events 1058 and 1030 in Windows Server 2003
http://support.microsoft.com/?id=830676
828760 "The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with
http://support.microsoft.com/?id=828760
823608 Event ID 1091 and Event ID 1085 Appear in the Application Event Log
http://support.microsoft.com/?id=823608
816045 A Fast Link May Be Detected as a Slow Link Because of Network ICMP
http://support.microsoft.com/?id=816045
814751 You receive no warning that the Registry.pol file is corrupted
http://support.microsoft.com/?id=814751
812541 A Malicious User May Circumvent User Policy
http://support.microsoft.com/?id=812541
315418 HOW TO: Optimize Group Policy for Logon Performance in Windows 2000
http://support.microsoft.com/?id=315418
294257 "Failed to Open the Group Policy Object" Error Message Occurs When You
http://support.microsoft.com/?id=294257
284461 Event ID 1000 and Event ID 1202 Messages Are Reported When You Set Security on the File Replication Service by Using Group Policy
http://support.microsoft.com/?id=284461
279432 Event ID 1000 and 1202 Messages May Occur Every Five Minutes on the Domain Controller
http://support.microsoft.com/?id=279432
271213 Event ID 1000 and 1001 Repeat Every 5 Minutes in the Event Log
http://support.microsoft.com/?id=271213
263693 Group Policy may not be applied to users belonging to many groups
http://support.microsoft.com/?id=263693
260715 Event ID 1000 and 1202 After Configuring Policies
http://support.microsoft.com/?id=260715
259398 SceCli Event ID 1001 and UserEnv Event ID 1000 When Dfs Client Is Disabled
http://support.microsoft.com/?id=259398
258296 Cannot Access Group Policy Objects--Event ID 1000 and Event ID 1001 Logged
http://support.microsoft.com/?id=258296
257568 Error Message: Failed to Open the Group Policy Object. Details: The
http://support.microsoft.com/?id=257568
253268 Group Policy Error Message When Appropriate Sysvol Contents Are Missing
http://support.microsoft.com/?id=253268
250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842
247482 Error Message: Security Policies Are Propagated with Warning. 0x534
http://support.microsoft.com/?id=247482
245422 How to Enable Logging for Security Configuration Client Processing in
http://support.microsoft.com/?id=245422
221833 How to enable user environment debug logging in retail builds of Windows
http://support.microsoft.com/?id=221833
216358 Troubleshooting Group Policy Client-Side Extension Behavior
http://support.microsoft.com/?id=216358
185198 Error 1000 and User Profiles
http://support.microsoft.com/?id=185198
Webcasts
835302 TechNet Support WebCast: Troubleshooting Group Policy and profile issues
http://support.microsoft.com/?id=835302
Group Policy - GPMC
Migrating GPOs Across Domains with GPMC
http://www.microsoft.com/windowsserver2003/gpmc/migrgpo.mspx
Administering Group Policy with the GPMC
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx
Frequently Asked Questions About the Group Policy Management Console
http://www.microsoft.com/windowsserver2003/gpmc/gpmcfaq.mspx
KB articles
867462 "Invalid pointer" error message when you try to back up a Group Policy
http://support.microsoft.com/?id=867462
833319 "Access Denied" error message after you restore GPOs from a CD-R backup
http://support.microsoft.com/?id=833319
832214 "You may not have appropriate rights" error message when you try to open
http://support.microsoft.com/?id=832214
828760 "The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with
http://support.microsoft.com/?id=828760
828538 More Than One Local Policy Is in Effect After You Edit Several Local
http://support.microsoft.com/?id=828538
827012 "Windows Cannot Read Template Information" Error Message When You Try to
http://support.microsoft.com/?id=827012
819760 Windows turns off the power after it shuts down the computer if a
http://support.microsoft.com/?id=819760
814615 Deleted Administrative Templates Are Not Restored When You Edit the
http://support.microsoft.com/?id=814615
814609 Group Policy Object Is Not Applied After You Edit the VersionNumber
http://support.microsoft.com/?id=814609
326469 You Must Install a Hotfix to Install GPMC on Windows XP Professional
http://support.microsoft.com/?id=326469
Download
GPMC SP1
http://www.microsoft.com/downloads/details.aspx?FamilyId=C355B04F-50CE-42C7-A401-30BE1EF647EA&displaylang=en
Kerberos
Technology Center - www.microsoft.com/kerberos
Kerberos Protocol Transition and Constrained Delegation
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/constdel.mspx
Troubleshooting Kerberos Delegation
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerbdel.mspx
Troubleshooting Kerberos Errors
http://www.microsoft.com/downloads/details.aspx?FamilyID=7dfeb015-6043-47db-8238-dc7af89c93f1&displaylang=en
Step-by-Step Guide to Kerberos 5 (krb5 1.0) Interoperability
http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp
How To Implement Kerberos Delegation for Windows 2000
http://msdn.microsoft.com/library/en-us/secmod/html/secmod19.asp
Kerberos Explained
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/kerberos.mspx
Windows 2000 Kerberos Interoperability
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/kerbinop.mspx
Windows 2000 Kerberos Authentication
http://www.microsoft.com/windows2000/techinfo/howitworks/security/kerberos.asp
KB articles
841395 The Domain Controller does not register _GC, _KERBEROS, and _KPASSWD DNS entries when a Windows 2000 server starts
http://support.microsoft.com/?id=841395
830069 You receive the "The target principal name is incorrect" error message
http://support.microsoft.com/?id=830069
829074 Users Cannot Connect to a Windows Server 2003 Domain by Using a VPN Connection
http://support.microsoft.com/?id=829074
826902 You Cannot Browse the Drives of or Map a Drive to a Domain Controller
http://support.microsoft.com/?id=826902
824217 LSASRV Event IDs 40960 and 40961 When You Promote a Server to a Domain
http://support.microsoft.com/?id=824217
823712 Event IDs 40960 and 40961 in the System Event Log When You Restart Windows Server 2003 After You Run Dcpromo.exe
http://support.microsoft.com/?id=823712
817384 HOWTO: Use Kerberos Authentication for Microsoft SQL Server 2000
http://support.microsoft.com/?id=817384
328948 LsaSrv Event ID 5000 Error Message: The Security Package Negotiate Generated an Exception
http://support.microsoft.com/?id=328948
327825 New Resolution for Problems That Occur When Users Belong to Many Groups
http://support.microsoft.com/?id=327825
326985 HOW TO: Troubleshoot Kerberos-Related Issues in IIS
http://support.microsoft.com/?id=326985
322979 Kerberos Is Not Used When You Connect to SMB Shares by IP Address
http://support.microsoft.com/?id=322979
321044 Event ID 11 in the system log of domain controllers
http://support.microsoft.com/?id=321044
315150 Logon Authentication, Active Directory Replication, and Domain Joins Do
http://support.microsoft.com/?id=315150
308111 A Missing Service Principal Name May Prevent Domain Controllers from
http://support.microsoft.com/?id=308111
298718 How to Retrieve SPNs from the Directory
http://support.microsoft.com/?id=298718
297234 Time Difference Exists Between the Client and the Server
http://support.microsoft.com/?id=297234
296993 "Logon Failure: The Target Account Name Is Incorrect" Error When Promoting Domain Controllers or Creating Replicas
http://support.microsoft.com/?id=296993
289668 Advancing Time on Production Computers and the Effect on Active
http://support.microsoft.com/?id=289668
288167 Error Message "Target Principal Name is Incorrect" When Manually Replicating Data Between Domain Controllers
http://support.microsoft.com/?id=288167
280830 Kerberos authentication may not work if user is a member of many groups
http://support.microsoft.com/?id=280830
270152 The DC Promo Program Does Not Work When Using Network Address Translation
http://support.microsoft.com/?id=270152
266080 Answers to frequently asked Kerberos questions
http://support.microsoft.com/?id=266080
263693 Group Policy may not be applied to users belonging to many groups
http://support.microsoft.com/?id=263693
263293 Windows 2000 NAT Does Not Translate Netlogon Traffic
http://support.microsoft.com/?id=263293
262177 HOW TO: Enable Kerberos Event Logging
http://support.microsoft.com/?id=262177
260575 How To Use Netdom.exe to Reset Machine Account Passwords of a Windows
http://support.microsoft.com/?id=260575
257187 RPC Error Messages Returned for Active Directory Replication When Time Is Out of Synchronization
http://support.microsoft.com/?id=257187
244474 How to force Kerberos to use TCP instead of UDP
http://support.microsoft.com/?id=244474
235529 Kerberos support on Windows 2000-based server clusters
http://support.microsoft.com/?id=235529
217098 Basic Overview of Kerberos User Authentication Protocol in Windows 2000
http://support.microsoft.com/?id=217098
Webcasts
842861 TechNet Support WebCast: Troubleshooting Kerberos authentication with
http://support.microsoft.com/?id=842861
822248 Support WebCast: Introduction to Kerberos
http://support.microsoft.com/?id=822248
Downloads
Tokensz
http://www.microsoft.com/downloads/details.aspx?FamilyID=4a303fa5-cf20-43fb-9483-0f0b0dae265c&DisplayLang=en
Setspn
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/setspn-o.asp
Kerbtray
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/kerbtray-o.asp
Klist
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/klist-o.asp
Whoami
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/whoami-o.asp
Licensing
Windows Server 2003 Licensing
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_LICEtopnode.asp
Windows 2000 Licensing
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_liceconcepts_201.htm
KB articles
824196 Description of the License Logging Service in Windows Server Operating Systems
http://support.microsoft.com/?id=824196
321447 Event ID 201: No License Was Available for User Using Product SMB Server
http://support.microsoft.com/?id=321447
318116 Issues with Jet Databases on Compressed Drives
http://support.microsoft.com/?id=318116
316631 How to Turn Off the License Logging Service
http://support.microsoft.com/?id=316631
308597 How to change from Per Server licensing to Per Seat licensing
http://support.microsoft.com/?id=308597
296737 License Logging Service Does Unnecessary ADSI LDAP Searches on Windows
http://support.microsoft.com/?id=296737
296681 Event ID 213 is Generated After You Demote the Domain Controller
http://support.microsoft.com/?id=296681
257617 Terminal Server Service May Stop Responding if the License Logging
http://support.microsoft.com/?id=257617
198132 Replication of License Manager Information Unsuccessful
http://support.microsoft.com/?id=198132
153140 How to reset License Manager information
http://support.microsoft.com/?id=153140
LSASS
Latest LSASS bundle is the MS04-011 security bulletin
Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
Troubleshooting High CPU Usage on a Domain Controller
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd09.mspx
Monitoring Performance in Active Directory
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part1/dsgch08.mspx
KB articles
835561 An access violation occurs in Lsass.exe in Windows 2000 Server
http://support.microsoft.com/?id=835561
829993 Memory Leak Occurs in the Lsass.exe Process on a Windows Server 2003-Based Domain Controller
http://support.microsoft.com/?id=829993
828297 Memory leak in Lsass.exe
http://support.microsoft.com/?id=828297
826819 The Server Stops Responding and an Access Violation Occurs in Lsass.exe When the Server Reloads Certain Policy Parameters
http://support.microsoft.com/?id=826819
824226 LSASS may cause an access violation during an LDAP search
http://support.microsoft.com/?id=824226
822554 Performance decreases, response times for SPN queries are longer than expected, and Lsass.exe CPU use peaks at 100 percent on a domain controller that is running Windows 2000
http://support.microsoft.com/?id=822554
822360 Dr. Watson Error in Lsass.exe with Event ID 4097 When You Log On to an Active Directory Domain Environment
http://support.microsoft.com/?id=822360
818080 An access violation occurs in Lsass.exe and event IDs 1015 and 1000 are logged in the application log on a Windows Server 2003 domain controller
http://support.microsoft.com/?id=818080
319709 An Access Violation Occurs in Lsass Because of a Stack Overflow
http://support.microsoft.com/?id=319709
308356 Memory Usage by the Lsass.exe Process on Windows 2000 Server-Based Domain Controllers
http://support.microsoft.com/?id=308356
306497 Lsass.exe System Process Unexpectedly Quits with a -1073741819 Status Code
http://support.microsoft.com/?id=306497
301684 Lsass.exe Error Occurs After You Install the Windows 2000 High Encryption Pack
http://support.microsoft.com/?id=301684
300621 Lsass.exe Stops Working Intermittently on a Domain Controller or Global Catalog
http://support.microsoft.com/?id=300621
300038 Lsass.exe Quits Unexpectedly with Status Code -1073741819
http://support.microsoft.com/?id=300038
273875 Error Message "lsass.exe-System Error" After Running the Dcpromo.exe Program
http://support.microsoft.com/?id=273875
272190 Access Violation in Lsass.exe Program When You Enable Netlogon Logging
http://support.microsoft.com/?id=272190
269135 Lsass.exe Causes an Access Violation
http://support.microsoft.com/?id=269135
267578 Access Violation in Lsass.exe in Windows NT version 4.0 in a Windows 2000 Domain
http://support.microsoft.com/?id=267578
262539 Memory Leak in Lsass.exe with Large Built-in Groups
http://support.microsoft.com/?id=262539
258817 Memory Leak in Lsass.exe in Windows 2000
http://support.microsoft.com/?id=258817
255897 Lsass.exe May Quit on Windows 2000 Domain Controller with Reverse Order Search
http://support.microsoft.com/?id=255897
220946 Symptoms That You May Experience If the Lsass.exe Process Stops
http://support.microsoft.com/?id=220946
MMC
Technology Center - www.microsoft.com/mmc
Management Console Support Center
http://support.microsoft.com/default.aspx?PR=MMC
Microsoft Management Console (MMC)
http://msdn.microsoft.com/library/en-us/dnanchor/html/mmc.asp
Microsoft Management Console: Overview
http://www.microsoft.com/windows2000/techinfo/howitworks/management/mmcover.asp
Step-by-Step Guide to the Microsoft Management Console
http://www.microsoft.com/windows2000/techinfo/planning/management/mmcsteps.asp
Webcasts
325143 Support WebCast: Windows 2000: An Overview of Microsoft Management
http://support.microsoft.com/?id=325143
Newsgroups
Windows 2000 MMC newsgroup
http://www.microsoft.com/windows2000/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.managment.mmc
Windows Server 2003 MMC newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.managment.mmc
MSDSS
Services for NetWare 5.03 White Paper
http://www.microsoft.com/windowsserver2003/techinfo/overview/sfn503wp.mspx
NetWare to Windows Server 2003 Migration Planning Guide
http://www.microsoft.com/windowsserver2003/techinfo/overview/sfnmig.mspx
Microsoft Windows Services for NetWare 5.03
http://www.microsoft.com/downloads/details.aspx?FamilyID=6c7f7c56-9298-4732-bf8a-7b771d27910a&displaylang=en
Microsoft Windows Services for NetWare Component Summary
http://www.microsoft.com/windowsserver2003/techinfo/overview/sfncompsum.mspx
Microsoft Windows Services for NetWare 5.03
http://www.microsoft.com/windowsserver2003/sfn/default.mspx
Microsoft Windows Services for NetWare 5.03 Overview
http://www.microsoft.com/windowsserver2003/techinfo/overview/sfncd.mspx
KB articles
838174 The FPNW icon no longer appears in Control Panel on a Windows Server
http://support.microsoft.com/?id=838174
828257 File and Print Services for Netware does not work as you expect after
http://support.microsoft.com/?id=828257
316226 HOW TO: Configure Two-Way Account Synchronization with Microsoft
http://support.microsoft.com/?id=316226
316219 How to Install MSDSS in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/?id=316219
316096 HOW TO: Install Microsoft File and Print Services for NetWare on a
http://support.microsoft.com/?id=316096
316094 List of Problems That Are Fixed in Services for NetWare 5.0 Service Packs
http://support.microsoft.com/?id=316094
310671 How to Obtain the Latest Services for NetWare 5.0 Service Pack
http://support.microsoft.com/?id=310671
303954 MSDSS Cannot Authenticate with Novell Directory Services
http://support.microsoft.com/?id=303954
301542 How To Migrate Users from NetWare to Windows 2000 with the MSDSS Tool
http://support.microsoft.com/?id=301542
274279 How to Migrate or Deploy a Novell NetWare Environment to Windows
http://support.microsoft.com/?id=274279
269536 HOW TO: Enable Debug Logging in the Microsoft Directory Synchronization
http://support.microsoft.com/?id=269536
Downloads
Services for Netware 5.03
http://www.microsoft.com/downloads/details.aspx?FamilyID=6c7f7c56-9298-4732-bf8a-7b771d27910a&displaylang=en
Netlogon
Restrict the DNS resource records updated by the Net Logon service
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_DNS_pro_No_RR_in_AD.asp
Analyzing Account Synchronization Traffic
http://www.microsoft.com/technet/prodtechnol/winntas/plan/capacityplanning/a02_sync.mspx
Technical Guide to Secure Channels and the NT Client Authentication Process
http://www.microsoft.com/technet/prodtechnol/winntas/deploy/ntlogon.mspx
KB articles
839505 An error with event ID 5774 is reported in the system log on a Windows
http://support.microsoft.com/?id=839505
821240 Netlogon Event ID 5722 on a Trusted Primary Domain Controller
http://support.microsoft.com/?id=821240
819411 Event IDs 5788 and 5789 are logged when you join a Windows 2000-based
http://support.microsoft.com/?id=819411
816587 How to verify that SRV DNS records have been created for a domain
http://support.microsoft.com/?id=816587
303330 Netlogon and Kerberos Key Distribution Center Generate Events 5737 and 7023 and Do Not Start
http://support.microsoft.com/?id=303330
284963 Domain Controller Generates a Netlogon Error Event ID 5774
http://support.microsoft.com/?id=284963
284850 Netlogon Service Does Not Start, Event Viewer Records Events 2114 and
http://support.microsoft.com/?id=284850
280439 Net Logon Dynamic DNS Registration Functionality Changes After
http://support.microsoft.com/?id=280439
269375 Netlogon Service Does Not Start, Event Viewer Records Event IDs 2114 and 7024
http://support.microsoft.com/?id=269375
266729 Netlogon Behavior in Windows NT 4.0
http://support.microsoft.com/?id=266729
263293 Windows 2000 NAT Does Not Translate Netlogon Traffic
http://support.microsoft.com/?id=263293
259277 Troubleshooting Netlogon Event 5774, 5775, and 5781
http://support.microsoft.com/?id=259277
258503 DNS Registration Errors 5788 and 5789 When DNS Domain and Active Directory Domain Name Differ
http://support.microsoft.com/?id=258503
257734 Event ID 5788 and Event ID 5789 Appear in the System Event Log
http://support.microsoft.com/?id=257734
247922 Server Logs Netlogon Event 5719 When Starting
http://support.microsoft.com/?id=247922
240142 How to Prevent User Validation on a Specific Domain Controller
http://support.microsoft.com/?id=240142
208237 Troubleshooting a Large Number of Event ID 5711 Entries Recorded on the
http://support.microsoft.com/?id=208237
191828 Account Lockouts and 5711 Events on the PDC
http://support.microsoft.com/?id=191828
189541 Using the Checked Netlogon.dll to Track Account Lockouts
http://support.microsoft.com/?id=189541
180114 Netlogon Event ID 5770 and 5722 on Primary Domain Controller
http://support.microsoft.com/?id=180114
172227 Network Address Translators (NATs) can block Netlogon traffic
http://support.microsoft.com/?id=172227
161569 Event ID 5711 Fills Event Log on Primary Domain Controller
http://support.microsoft.com/?id=161569
150518 NetLogon Service Fails When Secure Channel Not Functioning
http://support.microsoft.com/?id=150518
109626 Enabling Debug Logging for the Net Logon Service
http://support.microsoft.com/?id=109626
Offline Files
Offline Files Save the Day
http://www.microsoft.com/windowsxp/using/mobility/learnmore/crawford_august20.mspx
Windows 2000 Offline Files Overview
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/csc_overview.htm
Windows XP Offline Files Overview
http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/WINDOWSXP/home/using/productdoc/en/csc_overview.asp
Implementing Offline Files and Synchronization
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dmebc_dsm_jdvf.asp
Offline Files
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_offlinefolders_topnode.asp
Windows XP - Using Offline Files
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prde_ffs_qoxy.asp
KB articles
841801 Offline users may not be able to access cached profile resources when
http://support.microsoft.com/?id=841801
841631 "Reached the end of the file" error message or "More Data is available"
http://support.microsoft.com/?id=841631
841171 How to configure client-side caching on a Windows Server 2003 server
http://support.microsoft.com/?id=841171
839530 You receive a "You have a version of this folder available for offline
http://support.microsoft.com/?id=839530
833868 Your offline files disappear on a Windows 2000-based computer
http://support.microsoft.com/?id=833868
811525 Configure Slow Link Speed Group Policy Does Not Force Offline Files to
http://support.microsoft.com/?id=811525
312221 HOW TO: Encrypt Offline Files to Secure Data in Windows XP
http://support.microsoft.com/?id=312221
312171 HOW TO: Configure Offline Files to Synchronize When a Particular Network
http://support.microsoft.com/?id=312171
307853 How to use offline files in Windows XP
http://support.microsoft.com/?id=307853
304624 Caching Redirected Folders Can Use All Available Disk Space
http://support.microsoft.com/?id=304624
292506 Client-Side Caching May Not Resolve Version Conflicts If the Share Is a
http://support.microsoft.com/?id=292506
287566 The Cache Option for Offline Files Must Be Disabled on Roaming User
http://support.microsoft.com/?id=287566
274789 The Folder Redirection Feature Does Not Function
http://support.microsoft.com/?id=274789
262845 Support for DFS-Based Shares for Offline Files
http://support.microsoft.com/?id=262845
256042 The Make Available Offline Command Is Not on the File Menu
http://support.microsoft.com/?id=256042
252509 Error Message: Files of This Type Cannot Be Made Available Offline
http://support.microsoft.com/?id=252509
230738 How to Restart the Offline Files Cache/Database
http://support.microsoft.com/?id=230738
216581 How to Change the Location of Client-Side Cache in Windows 2000
http://support.microsoft.com/?id=216581
Profiles
Managing User Profiles
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/09w2kadb.mspx
Step-by-Step Guide to User Data and User Settings
http://www.microsoft.com/windows2000/techinfo/planning/management/userdata.asp
User Data and Settings Management
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpusrdat.mspx
Implementing Roaming User Profiles
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/dmebc_dsm_yapz.asp
User Profiles
http://msdn.microsoft.com/library/en-us/policy/policy/user_profiles.asp
Frequently Asked Questions for IntelliMirror User Profiles and Folder Redirection
http://www.microsoft.com/technet/community/newsgroups/upfrfaq.mspx
KB articles
837115 Troubleshooting profile unload issues
http://support.microsoft.com/?id=837115
833409 The roaming profile is not loaded after the user uses Terminal Services to log on to Windows Server 2003
http://support.microsoft.com/?id=833409
832088 Windows Server 2003 Terminal Server ignores the idle disconnect settings in a user profile
http://support.microsoft.com/?id=832088
830464 Group Policy does not apply roaming profiles correctly if NTuser.dat and NTuser.pol files are not synchronized
http://support.microsoft.com/?id=830464
829109 Terminal Server Profile Path Is Ignored If the User Who Is Logging On Does Not Have Query Information Permissions on the RDP-TCP Connection
http://support.microsoft.com/?id=829109
828326 It takes longer than you expect to log off from a Terminal Services session in Windows 2000 or Windows Server 2003
http://support.microsoft.com/?id=828326
828153 UsrClasses hive does not unload during logoff because of an intermittent handle leak in Spoolsv.exe
http://support.microsoft.com/?id=828153
827825 "Windows Cannot Unload Your Registry Class File" Error Message When You Log Off Terminal Services
http://support.microsoft.com/?id=827825
824688 You Receive the "The
http://support.microsoft.com/?id=824688
824309 Very Long Logon and Logoff Times When You Try to Connect to Citrix MetaFrame or Citrix 1.8
http://support.microsoft.com/?id=824309
817171 Roaming Profiles Are Not Unloaded on a Computer That Is Running Terminal Services
http://support.microsoft.com/?id=817171
816313 HOW TO: Assign a Home Folder to a User
http://support.microsoft.com/?id=816313
331490 Userinit.exe May Stop Working in Windows 2000
http://support.microsoft.com/?id=331490
327462 Windows XP SP1 and Windows 2000 SP4 checks for existing roaming user profile folders when a roaming user profile is created
http://support.microsoft.com/?id=327462
324749 HOW TO: Create a Roaming User Profile in Windows Server 2003
http://support.microsoft.com/?id=324749
324446 Terminal Server and Connected Terminal Services Clients Pause When a Terminal Services Client Logs On or Logs Off
http://support.microsoft.com/?id=324446
323368 HOW TO: Assign a Mandatory User Profile in Windows 2000
http://support.microsoft.com/?id=323368
322656 Msinfo32.exe causes Userenv Event ID 1000 in Windows 2000
http://support.microsoft.com/?id=322656
320043 HOW TO: Assign a Home Directory to a User
http://support.microsoft.com/?id=320043
314045 HOW TO: Restore a User Profile in Windows 2000
http://support.microsoft.com/?id=314045
305709 HOW TO: Create a Custom Default User Profile
http://support.microsoft.com/?id=305709
302082 HOW TO: Create a Roaming User Profile in Windows 2000
http://support.microsoft.com/?id=302082
294268 Roaming Profiles Are Not Unloaded on a Computer That Is Running Terminal Services When GPOs Are Applied
http://support.microsoft.com/?id=294268
285192 Msinfo32.exe Causes Userenv Event ID 1000 in Windows 2000
http://support.microsoft.com/?id=285192
271518 Error Message Loading Profile If You Log On to Windows 2000 and Windows NT Clients with the Same Roaming Profile
http://support.microsoft.com/?id=271518
269858 Msinfo32.exe Causes Userenv Event ID 1000 on Localized Version of Windows 2000
http://support.microsoft.com/?id=269858
243420 Roaming Profile Creation in Windows Using the "Copy To" Command
http://support.microsoft.com/?id=243420
224012 Using User Profiles with Windows
http://support.microsoft.com/?id=224012
221833 How to enable user environment debug logging in retail builds of Windows
http://support.microsoft.com/?id=221833
189119 UserEnv Returns Corrupted Profile for All Failures Including RSL Exceeded
http://support.microsoft.com/?id=189119
146050 Modifying Ntuser.dat Hive So New Users Get Defined Settings
http://support.microsoft.com/?id=146050
142682 How to Create and Copy Roaming User Profiles in Windows
http://support.microsoft.com/?id=142682
Newsgroups
325538 Support WebCast: User Profiles in Microsoft Windows 2000
http://support.microsoft.com/?id=325538
Downloads
UPHClean 1.5
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&DisplayLang=en
Schema Management
Extending the Active Directory Schema
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnactdir/html/adschemaext.asp
Best practices for Active Directory Schema
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_ADschema_BestPractices.asp
Microsoft Windows 2000 inetOrgPerson Kit
http://msdn.microsoft.com/library/en-us/dnactdir/html/inetopkit.asp
Active Directory Schema Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_schem_intro.asp
Understanding schema
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/sag_UnderstandingSchemaNode.asp
Platform SDK: Active Directory Schema
http://msdn.microsoft.com/library/en-us/adschema/adschema/active_directory_schema.asp
Schema Documentation Program
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/schema.mspx
Step-by-Step Guide to Using Active Directory Schema and Display Specifiers
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/howto/adschema.mspx
KB articles
840691 Windows 2000 SID filtering prevents the replication of schema naming
http://support.microsoft.com/?id=840691
327757 How To Extend the Active Directory Schema for Exchange Without
http://support.microsoft.com/?id=327757
326310 HOW TO: Manage the Active Directory Schema in Windows Server 2003 Enterprise Edition
http://support.microsoft.com/?id=326310
320337 HOW TO: Manage the Active Directory Schema in Windows 2000
http://support.microsoft.com/?id=320337
311555 How to Hide or Display the InetOrgPerson Object Class in Active
http://support.microsoft.com/?id=311555
307998 Changing the Naming Attribute of the InetOrgPerson Class
http://support.microsoft.com/?id=307998
297132 Custom Attributes Are Not Viewable in ADSI Edit Even After Updating the
http://support.microsoft.com/?id=297132
296646 How To Add Custom Attributes to the DSFind Pick List
http://support.microsoft.com/?id=296646
285172 Schema Updates Require Write Access to Schema in Active Directory
http://support.microsoft.com/?id=285172
283791 How to Modify Schema Information Using the Ldifde Utility
http://support.microsoft.com/?id=283791
281146 How to Use Dsacls.exe in Windows 2000
http://support.microsoft.com/?id=281146
279978 Error Message: You Do Not Have Sufficient Access to the Active Directory
http://support.microsoft.com/?id=279978
276382 Access to the Attribute Is not Permitted Because the Attribute Is Owned
http://support.microsoft.com/?id=276382
268655 Active Directory Schema Snap-in Does Not Connect to the Operations Master
http://support.microsoft.com/?id=268655
265825 Incorrect Message Appears Using Active Directory Schema Snap-in to
http://support.microsoft.com/?id=265825
265399 HOW TO: Change Default Permissions for Objects That Are Created in the
http://support.microsoft.com/?id=265399
257218 Default Active Directory Attributes in the Windows 2000 Schema
http://support.microsoft.com/?id=257218
229691 How to Enable Domain Controllers to Modify the Schema
http://support.microsoft.com/?id=229691
216060 Registry Modification Required to Allow Write Operations to Schema
http://support.microsoft.com/?id=216060
Scripting
Technology Center - www.microsoft.com/scripting
Technet Script Center
http://www.microsoft.com/technet/community/scriptcenter/default.mspx
TechNet Script Center Sample Scripts
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=b4cb2678-dafb-4e30-b2da-b8814fe2da5a
WMI Scriptomatic
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9ef05cbd-c1c5-41e7-9da8-212c414a7ab0
ADSI Scriptomatic
http://www.microsoft.com/downloads/details.aspx?familyid=39044e17-2490-487d-9a92-ce5dcd311228&displaylang=en
Microsoft Windows 2000 Scripting Guide
http://www.microsoft.com/resources/documentation/windows/2000/server/scriptguide/en-us/sas_ads_jgtf.mspx
Scripting Windows Management
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/scriptwm.mspx
Managing Windows with WMI
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/mngwmi.mspx
Windows Management Instrumentation Scripting
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/featusability/wmiscrpt.mspx
Webcasts
Scripting Week Webcasts
http://www.microsoft.com/technet/scriptcenter/webcasts/default.mspx
TechNet Webcast: Locking Down Your Scripting Environment - Level 300
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032255610&Culture=en-US
TechNet Webcast: Scripting Files and Folders Makes Me Happy - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254002&Culture=en-US
TechNet Webcast: I/O Scripter, Away! - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254004&Culture=en-US
TechNet Webcast: Top 10 Tools for Administrative Scripting - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032253968&Culture=en-US
TechNet Webcast: Using Scripts to Manage Windows Server 2003 - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254178&Culture=en-US
TechNet Webcast: How To Administer Windows 2000 Using Scripts
http://www.microsoft.com/usa/webcasts/ondemand/1604.asp
TechNet Webcast: What’s New in Scripting for Windows 2003?
http://www.microsoft.com/usa/webcasts/ondemand/1809.asp
TechNet Webcast: Scripting WMI Events - An introduction to the cranks, gears, and levers you can use to proactively monitor Windows
http://www.microsoft.com/usa/webcasts/ondemand/1941.asp
TechNet Webcast: Basic Parts List for Building System Admin Scripts
http://www.microsoft.com/usa/webcasts/ondemand/2054.asp
TechNet Webcast: Put the Scripting Guys Out of Business: Learn to Create Your Own HTAs - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032240018&Culture=en-US
TechNet Webcast: Database Scripting for System Administrators - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032243755&Culture=en-US
TechNet Webcast: Users and Groups and OUs – Oh, My! - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032248670&Culture=en-US
TechNet Webcast: Poking Your Nose into Active Directory - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032252251&Culture=en-US
325946 Support WebCast: Microsoft Windows: System Administration Scripting in
http://support.microsoft.com/?id=325946
325427 Support WebCast: WMIC: A New Approach to Managing Windows Infrastructure
http://support.microsoft.com/?id=325427
Newsgroups
Windows XP: WMI newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windowsxp.wmi
Windows Server Scripting newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.scripting
ADSI newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.adsi.general
Win32 Programmer: WMI newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win32.programmer.wmi
Trusts
Understanding domain trusts
http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_AD_UnTrusts.htm
Trust Technologies
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_sec_trust_over.asp
Windows Server 2003 Trust Enhancements
http://www.microsoft.com/technet/community/columns/profwin/pw0303.mspx
Managing Trusts
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd05.mspx
KB articles
823659 Client, service, and program incompatibilities that may occur when you
http://support.microsoft.com/?id=823659
821240 Netlogon Event ID 5722 on a Trusted Primary Domain Controller
http://support.microsoft.com/?id=821240
817012 Trust Creation Fails When You Create a Trust with a Windows NT 4.0
http://support.microsoft.com/?id=817012
816301 How to create an external trust in Windows Server 2003
http://support.microsoft.com/?id=816301
325874 HOW TO: Establish Trusts with a Windows NT-Based Domain in Windows Server 2003
http://support.microsoft.com/?id=325874
315053 HOW TO: Configure One-Way Non-Transitive Trusts in Windows 2000
http://support.microsoft.com/?id=315053
314108 How to Write an LMHOSTS File for Domain Validation and Other Name
http://support.microsoft.com/?id=314108
312003 Unable to Establish an Explicit Trust Between Windows 2000-Based Domains
http://support.microsoft.com/?id=312003
309682 HOW TO: Set up a One-Way Non-Transitive Trust in Windows 2000
http://support.microsoft.com/?id=309682
308195 HOW TO: Establish Trusts with a Windows NT-Based Domain in Windows 2000
http://support.microsoft.com/?id=308195
306733 HOW TO: Create a Trust Between a Windows 2000 Domain and a Windows NT 4.0 Domain
http://support.microsoft.com/?id=306733
300598 How to Verify the Domain Records in Windows 2000 Windows Internet Name
http://support.microsoft.com/?id=300598
296405 The "RestrictAnonymous" Registry Value May Break the Trust to a Windows
http://support.microsoft.com/?id=296405
296403 The RestrictAnonymous Value Breaks the Trust in a Mixed-Domain
http://support.microsoft.com/?id=296403
295335 You May Be Unable to Establish a Trust Relationship Between Windows 2000
http://support.microsoft.com/?id=295335
291574 MoveTree Functions Only for Intra-Forest Migrations
http://support.microsoft.com/?id=291574
274438 Cannot Use Kerberos Trust Relationships Between Two Forests in Windows
http://support.microsoft.com/?id=274438
263293 Windows 2000 NAT Does Not Translate Netlogon Traffic
http://support.microsoft.com/?id=263293
228477 HOW TO: Determine Trust Relationship Configurations
http://support.microsoft.com/?id=228477
216243 Authoritative Restore of Active Directory and Impact on Trusts and
http://support.microsoft.com/?id=216243
186340 NAT Routers Disallow Setup of One-way Trusts Between Domains
http://support.microsoft.com/?id=186340
180094 How to Write an LMHOSTS File for Domain Validation and Other Name Resolution Issues
http://support.microsoft.com/?id=180094
179442 How to Configure a Firewall for Domains and Trusts
http://support.microsoft.com/?id=179442
178640 Could Not Find Domain Controller When Establishing a Trust
http://support.microsoft.com/?id=178640
175025 How to Build and Reset a Trust Relationship from a Command Line
http://support.microsoft.com/?id=175025
172227 Network Address Translators (NATs) can block Netlogon traffic
http://support.microsoft.com/?id=172227
TSL
Technology Center - www.microsoft.com/ts
Windows Server 2003 Terminal Server Licensing
http://www.microsoft.com/windowsserver2003/techinfo/overview/termservlic.mspx
Technical Overview of Windows Server 2003 Terminal Services
http://www.microsoft.com/windowsserver2003/techinfo/overview/termserv.mspx
Terminal Services Licensing
http://www.microsoft.com/technet/prodtechnol/Windows2000Pro/maintain/w2kmngd/12_2ktrm.mspx
Microsoft Windows 2000 Terminal Services Licensing
http://www.microsoft.com/windows2000/techinfo/howitworks/terminal/tslicensing.asp
Windows 2000 Terminal Services Capacity and Scaling
http://www.microsoft.com/windows2000/techinfo/administration/terminal/tscaling.asp
KB articles
839878 You cannot install the Terminal Services CAL pack on a Windows 2000 server-based computer
http://support.microsoft.com/?id=839878
834651 Terminal Services Licensing mode changes from Per User to Per Device after you add or remove a Windows component
http://support.microsoft.com/?id=834651
831716 You receive a "No Terminal Services License server was found on the network" error message when you run the Manage Your Server Wizard on a Windows Server 2003-based computer
http://support.microsoft.com/?id=831716
827355 Event ID 1004 is logged when a thin client tries to obtain a Terminal Services license
http://support.microsoft.com/?id=827355
825027 Terminal Services Licensing Denies Your Connection to Your Terminal Server from Your WBT Device
http://support.microsoft.com/?id=825027
823313 Windows Server 2003 Terminal Server licensing issues and requirements for deployment
http://support.microsoft.com/?id=823313
822134 The function of Terminal Server CALs in Windows Server 2003
http://support.microsoft.com/?id=822134
813508 Cannot Connect to a Terminal Server from a Windows-Based Terminal
http://support.microsoft.com/?id=813508
884570 Event ID 1004 is logged when a thin client tries to obtain a license from a Windows 2003-based terminal server
http://support.microsoft.com/?id=884570
837321 You cannot connect to a Windows 2000 Terminal server if your Windows Server 2003 Terminal Services license is expired
http://support.microsoft.com/?id=837321
837211 Client computers cannot obtain a permanent Windows 2000 Terminal Services Client Access License (CAL) from a Windows Server 2003 Terminal Services Licensing server
http://support.microsoft.com/?id=837211
329944 Event Message 1004 Terminal Services Licensing When You Use the Citrix ICA Client
http://support.microsoft.com/?id=329944
329896 Because of a security error, the client could not connect to the Terminal Server
http://support.microsoft.com/?id=329896
325869 How to activate a License Server by using Terminal Server Licensing in Windows Server 2003
http://support.microsoft.com/?id=325869
323597 Windows XP Clients Cannot Connect to a Windows 2000 Terminal Services Server
http://support.microsoft.com/?id=323597
323497 "The RDP Protocol Component "DATA ENCRYPTION" Detected an Error..." error message
http://support.microsoft.com/?id=323497
315277 Event ID 1004 error message when you connect to Terminal Server
http://support.microsoft.com/?id=315277
306622 HOW TO: Activate a License Server by Using Terminal Services Licensing in Windows 2000
http://support.microsoft.com/?id=306622
301932 Terminal Services Licensing service discovery
http://support.microsoft.com/?id=301932
294655 Terminal Services Licensing Enhancements Frequently Asked Questions
http://support.microsoft.com/?id=294655
294326 Event ID 1003: Terminal Service Client Has Provided an Invalid License
http://support.microsoft.com/?id=294326
291795 HOW TO: Locate a Phone Number for the Microsoft Clearinghouse
http://support.microsoft.com/?id=291795
287687 Terminal Services Licensing Enhancements
http://support.microsoft.com/?id=287687
279561 How to override the license server discovery process in Windows Server 2003 Terminal Services
http://support.microsoft.com/?id=279561
277917 Terminal Server Licensing Service Failure
http://support.microsoft.com/?id=277917
274805 " Terminal Server Has Ended the Connection" error message
http://support.microsoft.com/?id=274805
273566 How to Reset Windows 2000 Terminal Services Licensing
http://support.microsoft.com/?id=273566
270588 Remote Desktop Protocol Clients Cannot Connect to Terminal Services Server
http://support.microsoft.com/?id=270588
261110 Windows 2000 Terminal Services in Windows NT 4.0 Domain Cannot Find Windows 2000 Terminal Services Licensing Server
http://support.microsoft.com/?id=261110
239107 Establishing Preferred Windows 2000 Terminal Services License Server
http://support.microsoft.com/?id=239107
232520 Description of Terminal Services License Server discovery
http://support.microsoft.com/?id=232520
201371 How to Reset the License Information in Terminal Server License Manager
http://support.microsoft.com/?id=201371
187623 How to Change Terminal Server's Listening Port
http://support.microsoft.com/?id=187623
187614 Removing Terminal Server Licenses from an RDP Client
http://support.microsoft.com/?id=187614
313923 How to install Terminal Services License Server on a Windows 2000 member server in a Windows 2000 domain
CONFIDENTIAL
Webcasts
828229 Support WebCast: Microsoft Windows Server 2003 Terminal Server Licensing
http://support.microsoft.com/?id=828229
810589 Support WebCast: Microsoft Windows Server 2003 Terminal Services: New
http://support.microsoft.com/?id=810589
325155 Support WebCast: Microsoft Windows 2000 Terminal Server Licensing
http://support.microsoft.com/?id=325155
TechNet Webcast: Windows Server 2003 Terminal Services Overview
http://www.microsoft.com/usa/webcasts/ondemand/2022.asp
TechNet Webcast: Windows Server 2003 Terminal Services Overview - Level 200
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032254065&Culture=en-US
TechNet Webcast: Microsoft Windows Server 2003 Terminal Server Licensing—Level 300
http://www.microsoft.com/usa/webcasts/ondemand/2337.asp
Newsgroups
Windows Server: Terminal Services newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.terminal_services
Windows 2000 Terminal Services Clients newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.termserv.clients
Downloads
2003 RDP client
http://www.microsoft.com/downloads/details.aspx?FamilyID=a8255ffc-4b4a-40e7-a706-cde7e9b57e79&DisplayLang=en
W32Time
Windows Time Service Technical Reference
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_times_intro.asp
Troubleshooting Windows Time Service Problems
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd15.mspx
The Windows Time Service
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/wintime.mspx
How Windows Time Service Works
http://www.microsoft.com/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_times_how.asp
Windows Time Service
http://www.microsoft.com/resources/documentation/WindowsServ/2003/enterprise/proddocs/en-us/time_topnode.asp
Windows Time Service
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03mngd/26_s3wts.mspx
Keeping Time with Win2K
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag01/html/TimeWin2K.asp
The Windows Time Service
http://www.microsoft.com/windows2000/techinfo/howitworks/security/wintimeserv.asp
KB articles
836424 Your domain controller does not locate a new time source server in
http://support.microsoft.com/?id=836424
833324 The clock of a client computer may run slowly if Windows 2000 Server
http://support.microsoft.com/?id=833324
832261 Time synchronization does not occur on an NTP provider on a Windows Server 2003-based computer
http://support.microsoft.com/?id=832261
830092 W32Time frequently logs Event ID 50 and poor time synchronization occurs on Windows Server 2003
http://support.microsoft.com/?id=830092
816042 How to configure the Windows Time Service on a Forest Root PDC FSMO
http://support.microsoft.com/?id=816042
328701 Replication Error Message 1326 and Event Message ID 1265 "Unknown User
http://support.microsoft.com/?id=328701
328621 W32Time Logs Event ID 36 Message on Windows Server 2003 RC1-Based Domain Controllers and Designated Time Servers
http://support.microsoft.com/?id=328621
320258 A List of the Simple Network Time Protocol Time Servers That Are
http://support.microsoft.com/?id=320258
314054 How to Configure an Authoritative Time Server in Windows XP
http://support.microsoft.com/?id=314054
312534 Forest Root Domain Controllers May Display System Events 54 and 64
http://support.microsoft.com/?id=312534
307937 Configuring the Time Service to Log When the Time Is Changed
http://support.microsoft.com/?id=307937
307897 HOW TO: Synchronize the Time with the Windows Time Service in Windows XP
http://support.microsoft.com/?id=307897
305135 The Windows 2000 and Windows Server 2003 Time Service Does Not Work
http://support.microsoft.com/?id=305135
285923 Error Messages Every 5 Minutes Report Events 1000, 1001, and 13508,
http://support.microsoft.com/?id=285923
262680 A List of the Simple Network Time Protocol Time Servers That Are Available on the Internet
http://support.microsoft.com/?id=262680
258059 How to Synchronize the Time on a Windows 2000-Based Computer in a Windows NT 4.0 Domain
http://support.microsoft.com/?id=258059
257187 RPC Error Messages Returned for Active Directory Replication When Time
http://support.microsoft.com/?id=257187
243574 "Could Not Locate a Time Server" After Setting SNTP Time Server Using NET TIME Command
http://support.microsoft.com/?id=243574
232255 Using TIMESERV to Set and Synchronize Time
http://support.microsoft.com/?id=232255
232209 Win32 Time Service Informational, Warning, and Error Messages
http://support.microsoft.com/?id=232209
224799 Basic Operation of the Windows Time Service
http://support.microsoft.com/?id=224799
223184 Registry Entries for the W32Time Service
http://support.microsoft.com/?id=223184
216734 How to Configure an Authoritative Time Server in Windows 2000
http://support.microsoft.com/?id=216734
120944 Using NET TIME for all Workstations and Servers
http://support.microsoft.com/?id=120944
.gif)
