Vitalix

Is it always the lsass.exe service? I've had a similar problem in the past where the same service kept failing, and the problem was my hard drive. The file was located on a bad block. Have you run chkdisk at boot? Unlikely to be the solution, but worth a shot.

How can I check the TTL on the DNS records? For the DHCP scope, the lease duration is 5 days. Does that mean that DNS will not update until the DHCP lease expires, or is there a separate TTL for DNS records as well?

Quick update, it seems like when I manually removed an IP address that was registered on the 50 domain, about 10 minutes later, it registered correctly in the 60 domain. The existing clients that I did not delete are still showing their old IP addresses.

Hey guys and gals, We just created a new subnet on our network. Originally we were 192.168.50.x, now we created 192.168.60.X, created a DHCP scope for it (same MS 2K3 server), and everything works OK. We plugged in 5 new machines into the new subnet (gigabit for video editing segment) and all the machines picked up and IP address and can browse the server and network without issue. The problem: the machines IP addresses are still in the 192.168.50.X subnet, the same as when they were originally registered! I tried scavenging and reloading the zone, as well as clearing the cache, but no luck. I don't want to manually change the IP addresses, b/c this should be done automatically, no? If our network had 260 PCs, that would be unpleasant to do them one by one in DNS. Am I missing something in my config? In the DHCP applet, all the addresses are visible. How can I get DNS to update/synch with the DHCP server do that the new IP addresses are in DNS? Thanks in advance as always!

Hey guys and gals, I'd like to install three scopes on my DHCP server. The scopes will be: 192.168.50.X (class C) 192.168.51.X (class C) 192.168.52.X (class C) Creating the scopes in DHCP for Server 2003 is pretty cake, but how do we associated the DHCP scopes with specific routers? Obviously don't want to mingle 51 and 52 scopes on the subnet. Each subnet is for a different department. Is this something that's done on the routers, via BOOTP? How can we separate where the DHCP requests are coming and going? Thanks in advance as always!

Hey guys and gals, I am in the process of upgrading our Windows 2000 AD to Windows 2003 AD. right now our Exchange servers are all running on 2003, as well as most other servers. In fact, only 1 of 2 servers we have is running Win2K, and that is our DC. It is also our GC and Schema master. What I would like to do is upgrade our domian. The box that is our DC is a little slow, so I was thinking of: 1. Create a new box with new hardware and Windows 2003 Server 2. Run adprep on the old 2000 domain controller 3. DCPROMO the 2003 box to the domain, so that it acts as a DC 4. Make some tests, and then shut down the 2000 box. We are a small biz with about 14 servers, 30 workstations. All workstations on the same subnet, single domain. Is there anything wrong with I am suggesting? Does the schema and global catalog move when I run DCPROMO, or does the server have to be explicitly told to do that? Any links that may be useful? Thanks in advance as always!

Hey guys and gals, I know this may not be the proper forum for this, but would like to hear some feedback from admins who have used both SAN and NAS, and let me know their opinion. We are a multimedia company, so we have oodles of MPEGs and AVIs that we work on. We presently have a NAS (SNAP box) but are running out of room quick, and as we get more customers, we will be needing multiple terabytes by the end of next year. I don't want to go with the NAS solution, which maxes at about 4TB for most units I've seen. The problem with NAS is that adding more units causes us to map more drives. This can get confusing for our graphic desginers. From I hear of a SAN, one can just keep slapping drives into a SAN and it just keeps on growing, so your drive V: always stays drive V:, it just doubles in size one day. Is this true? What are some advantages and disadvantages of NAS vs. SAN. Anyone have any pricing info as well? Thanks in advance as always!

Ben, when you login, do you login as DOMAIN\User or just the user account? Are you using forms authentication in your HTTP settings in your virtual server or standard authentication?

Chili, which link? I did not see one.

Hi Chili, Exchweb is anonymous (at least in IIS on the FE). Are you referring to FE or BE, in ESM or on the IIS side?

Hello, We have a FE/BE setup with Exchange EE 2K3 SP1 on both machines (Opsys is Win2K3 EE). The FE has SP1 for Windows 2003 server, the backend is just Win2K3 server. We have OWA working fairly well using forms authentication, however periodically, about once every 6-10 logins, the login page will just sit after clicking login. It will timeout in about 5 minutes. However, if during that pausing period, the user hits F5 or refreshes the page, they instantly go to their inbox! We are presently using Vasco tokens to authenticate, but the issue happens even when Vasco is turned off, using just AD logins. Put a sniffer on, everything looks like it's communicating normally. The pause happens with the owaauth.dll file. Happens periodically so tough to nail down. Anyone else have similar issues? Thanks in advance as always!

Hey guys and gals, We are trying to setup a front-end/back-end setup for our Exchange servers for OWA. Do we need to put our front-end on the AD domain, or can we just keep it workgroup? We're trying to avoid having a DMZ server having the capability to see our AD server. Can this setup work with the Exchange front-end not on the domain? We'd like our Exchange server to do the authenticating is possible once the client passes through the front-end. Any links or help from those who have done this in the past would be greatly appreciated! Thanks in advance as always! Vitaly

Ya, exactly the same.

Can that be done with Active Directory running? The fact that I have to keep hitting /renew, is this a DHCP issue? DHCP is not set to expire for 7 days, yet for some reason it seems like it's not the case. The only DNS that works after several hours is the AD DNS, not extraneous DNS domains on the DNS server.

When I ping the IP address, it replies no problems. When I ping by name, "ping request could not find computername." A simple ipconfig /renew makes the workstation see DNS again.

Ya, thaz already checked.

Dam! No dice. Looks like same issue. Tried restarting DNS server and DHCP service. Same issue, Looks like definitely DHCP related, since an ipconfig /renew seems to reset everything. What's really aggravating is that nslookup works just fine, but then I can't ping anything right before or after the nslookup with the /renew! Please help!

That seems to have worked, at least initially. Will try to ping again in a couple hours and see if it sticks! Any idea why DNS/DHCP would do this for no reason out of the blue?

Yes, for all the domains. What's odd is that I can nslookup anyone at any time, but cannot ping them or browse until I do an ipconfig /renew!

Good morning guys and gals, We have a strange issue here. We have a primary domain called abc.inc which is AD integrated, and all DNS requests within the domain are handled normally. We created a new DNS domain (we'll call it new.inc) which has names of kiosks we have out in the field with a different subnet and are not on our AD domain. It seems like a couple weeks ago, out of nowhere, we could not resolve those new.inc names in DNS without hitting ipconfig /renew in DOS! All DNS and DHCP entries look OK. Anyone have any ideas why this can happen. This can happen a couple times a day, where I would have to hit ipconfig /renew just to browse non-domain DNS entries! Please help! Thanks in advance as always! Vitaly

Good morning all, We are having issues where our XP machines get rebooted once a week at 3AM. These machines are used as kiosks. They play background music via a line-in signal when not in use. It seems like when they get a reboot command at 3AM weekly, the line-in gets set to zero! This is really annoying and I can't find a reason why it happens. Would anyone know a way around this with a registry tweak or something to set line-in to 255 when starting the PC? I'm starting to hate Thursday mornings b/c I have to remote into them to change the sound settings. Thanks in advance as always! Vitaly

Hey guys and gals, Having a strange problem here: It looks like when we use Remote Desktop Connection to connect to a remote machine, the Line-In setting on the machine drops to zero. This seems to happen periodically. We actually need the line-in to work b/c the machine actually plays an internal channel on the TV and needs music pass-through. Has anyone encountered a problem where the remote into a machine and it mutes teh line-in element? Really weird. BTW, we have to remote into the player b/c we have set local policies on it to permit virtually no access to the desktop if coming in from the keyboard. Thanks in advance for any input as always! Vitaly

Great, thanks! How does this differ from SC STOP/START <SERVICE> command?

Hey guys and gals, Does anyone know how to start and stop Windows services in DOS? We have a lockdown machine that we can enable administrative rights to by modifying the registry.pol file. In that batch file, we want to enable certain services to run when we click on the batch file. Is there a command in DOS where we can invoke certain services when running it? Thanks in advance!

Hey guys and gals, We have an AD setup running on a Win2K server in mixed mode at present, since we have some old Win98 and a couple NT machines there. We are installing a new CRM software from MS which requires our domain controllers to goto native mode (meaning buh-bye pre-2K machines). That being the case, will the Win98 machines still be able to map a drive to our server, even though they will not be able to use the AD and GPO items? We have one 98 machine that just won't go away b/c of legacy software on it that we need, but I don't want to shoot myself in the foot either, assuming that native mode will permit mapping to a pre-2K machine. Anyone have any experience with this? Thanks in advance as always!