pharaoh fortune slot
Welcome, Guest. Please login or register.
October 20, 2018, 01:20:58 PM

Login with username, password and session length
* Home Help Search Login Register
  Show Posts
Pages: [1] 2
1  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-227 / ISA Server network access on: November 21, 2003, 05:54:05 AM
Configuration 2 domains

internal domain with internal ips
external domain with public ips

Domains in same forest, external domain as root of forest

After installing, configuring, updating ISA Server on a w2003 server and hardening the server using dedicated role I'm having trouble accessing the network. :

1.I can only access the DC in windows explorer
2. Computers in wxternal domain generate network path not found
3. computers in internal domain : account is not authorized to log in fro this workstation

This is true for access by IP, FQDN or netbios name.

Although net view list correctly all the computers in both domain.

I have no trouble with acces on workstations, just the server.

Any ideas?
2  Microsoft (MCSE, MCSD, MOUS, MCAD) / Server 2003 / sql 2000 on 2003domain controller on: October 09, 2003, 06:57:39 AM
I know it's not recommended installing SQL on a DC. But that's not the problem. :-)

When I'm trying to connect remotely in enterprise manager(with client tools installed on a workstation)I get a cannot generate SSPI security context.

This means I understand, that it cannot be authenticated by the DC. But that's not the problem, because I tested.

Are there some crazy security enforcements that need special configuration. In what way is 2003 server locked out that it doesn't accept sql connection, even as a domain admin.
3  General discussions / General Discussion / Freudian Challenge on: October 06, 2003, 06:14:03 AM
4  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / administrators membership startup script on: October 02, 2003, 03:25:30 AM
There are scripts that can modify the local admins group membership remotely, that might be the way to go. Or put the script in the local group policy if you want to keep allowing users to log local.

I guess it's better this way. If some user keeps deleting the admin group from local administrators, I will then run this script as needed.

I wanted this automatically, but I guess there's no way.

I need to keep local logon and domain user with admin rights because I have to deal with developers testing various implementations. It's a very hard to deal environment, as admin. They often request things that haven't even been implemented yet :-)

Thanks for the sugestions
5  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / administrators membership startup script on: October 01, 2003, 11:53:27 AM
Yes but I have some users who still use local account. In the 1st phase I don't want to disable them, but I really need to add the admin groups to local administrators

This works only at logon, but for some reason not at startup. I used the script as in that link and it just doesn't work.

Any ideas?

Thanks for the help
6  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / administrators membership startup script on: October 01, 2003, 11:36:53 AM
what do you mean?
7  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / administrators membership startup script on: October 01, 2003, 09:49:55 AM
Then they are wrong ?! :

8  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / administrators membership startup script on: September 30, 2003, 11:12:00 AM
I'm trying to make a startup script work.

I need to add some AD groups to local administrators group at startup. I made a vbs which successfully does what I need while looged in the domain, or as a logon script, BUT NOT as a startup script.

I hardcoded the domain name in the script as stipulated, and still doesn't do anything, it just enters a time out error in the app log.

What is missing, can't it read from AD. I understand it runs as SYSTEM account.

I need it to run as a startup script and not logon script because if the users logs in with local account the script is useless.

9  Microsoft (MCSE, MCSD, MOUS, MCAD) / Exchange server 2000 / test domain for exchange on: September 03, 2003, 04:49:06 AM
I'm going to put a new local test domain in my current, actual domain, in order to test the implementation of exchange.

But I can't quite figure out a proper way to configure the network.

What I want is a DC with a local domain, DNS server at the same time. All the work will be done from terminal. The problem is how do I set up the network card, if I need conectivity with some computers in the actual network?

Do I need different IP's on the same card?
Shoul I configure the router to route between an adress like and the other network segments?
10  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / QOD 8/31 - RAS Policy on: September 03, 2003, 04:02:08 AM
allow dialin on thei accounts, I would check.
11  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / DNS domain pointing to specific record on: September 01, 2003, 10:21:51 AM
Is there any way to make a domain name, eg :, to point to a specific record like [].

That is if I enter http]:// the result I need is []

The website is hosted on a separate server then the name server.

Suppose NS is and www is

By default [http]://domain.comsends me to
12  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-218 / browsing problems on: June 12, 2003, 09:18:42 AM
Thanks for trying to help, but I already found the problem. I had two master browser on my subnet, one was registering wtih an incorrect WINS IP, and the other was suffering from an incomplete shutdown.

Therefore the other computers could not retrieve the browsing domain list becaus it was servered by dumb master browsers. Smiley
13  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-218 / browsing problems on: June 12, 2003, 05:25:45 AM
My network was recently configured for a wins server. We have about 7 segments/subnets and only one of them doesn't work. When I try net view I only get the local computer name. The domain browsing takes a lot and only returns the local PC.

The configuration is identical in all subnets. All computers have the ip of wins introduced in Wins tab.

All computers in that subnet register corectly in WINS, with all the required entries and nbtstat returns what it should, including the domain name registration <1E>.

What could be wrong?
14  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-218 / adding group to local administrators group on: June 02, 2003, 06:39:40 AM
My head hurts because of so much trouble finding a way to add a user or a group to local administrators group through group policy for a whole OU. Or is it not possible?
15  Microsoft (MCSE, MCSD, MOUS, MCAD) / 70-216 / Another one down on: April 30, 2003, 03:02:16 AM
I just took a pass on 216 on 25th April! Smiley
And to respect the tradition here, I'm proud to say, I slained the Beast!!!

I was very tough although not as though as I was expecting, at the limit.

I got some 12 RRAS, 10 DNS, 3 NAT, a few routing, 10 security, very easy subnetting, and some tough DHCP and WINS.

I studied most of the time the resource kit, I mean internetworking, distributed security and tcp/ip, almost 3 times each, and then a few tests, some guides, as many white papers  as I could find, and lot's of deployment scenarios, which gave me a lot of headaches when it came to putting them into practice Wink

My lab was put up by virtual PCs, annoying with routing problems, but rewarding and useful nonetheless(after many near despair attempts and hours of work).

I agree that understanding a scenario and testing everything in a lab, especially, DNS, VPN and routing, along with all means of security deployment, is more than half on this exam, hard study is the rest.

I've done it in 4 months, and now I need to scream in public places. Cheesy

Anyway good luck to you all on your study and certifications and happy exam experiences.

Pages: [1] 2
Powered by MySQL Powered by PHP Powered by SMF 1.1.13 | SMF © 2006-2011, Simple Machines LLC Valid XHTML 1.0! Valid CSS!