Phrollux

Scratch this, I'm going to have to do a full read up. I have tried logging in with different accounts from different machines (Known working(XP Client) + ZA Client(Also XP)) Only some accounts create profiles which does suggest incorrect paths, but no errors are reported. All clients are members of the same GG which in turn is a member of a DLG as per the AGLP mantra. Profiles from the ZA Client are created without adding the administrator permissions (despite my GP settings) and are also created without SYSTEM permissions. I now believe there may be differences in local machine group policies and so I'm thinking I'd be better of if I start anew and also re-install windows fresh on the clients. (Just not today )

I'm not clear on this, but seeing as no-one else has commented yet,... I'm guessing the standard user accounts dont have sufficient rights to modify the registry. I have an onboard ati rage (or similar) on my laptop and ctrl-alt-delete reveals a couple of ati processes, one running with SYSTEM and one with USER. If the process only shows up one time (as admin) and is not linked to actual drivers you could use group policy > software restriction to prevent the applet from running. However, if it is tied to the drivers you will have to look for the registry key that changes and maybe create a logon script for your users (does that run as SYSTEM?) If you cant find the key by hand, you'll need some 3rd party installation monitor that can take snapshots of the registry. Create a new (temp) admin account, snapshot on first boot with helper enabled and then again after disabling. Hope that kicks of some ideas on this thread.

Chortle Great, I can stop wearing my silver foil helmet How do you find them?

Hey all, I have Win2k3 server running AD DNS DHCP & Fileserver. I'm running a couple of XP Pro clients and a Win2k client. Clients that have Zone Alarm do not create a profile on the server whereas one machine (without ZA) is just fine. I have configured zone alarm to trust the server and set trusted zone to off (this at least allows me to authenticate) but still no folders created in my profiles$ share. All accounts share the same group policy and reside within my "trusties" OU. Is this a zone alarm issue and can it be fixed? tia. Edit: What might I look for in event viewer ?

Hey thanks catwalker63, what a cool friendly forum this is I have sybex's mastering windows 2003 server - it's a brick! but it sure is detailed and worth the effort. I also have a whole bunch of other stuff that probably covers a textbook situation, but how many are? I'm currently wrestling with roaming profiles from clients running zone alarm,... but thats another thread So, as an IT Pro, what certs do you have, how long have you been working & what's the biggest pain with M$ server environments? (If there is just one) Cheers

Hi, here's two things you can try; 1/ nmap http://www.insecure.org/nmap/ A tool that will attempt to guess an O.S. by the slight differences in TCP responses 2/ telnet (run from cmd) or netcat (google it) telnet to a port that a service is running on - eg www = port 80 hit return a couple of times and read the banner message telnet <target> <port number> HTTP/1.1 400 Bad Request Server: Microsoft-IIS/4.0 Date: Mon, 05 Jul 2004 14:19:27 GMT Oh btw - this *may* not be legal

Thanks ip22382. As you might have guessed from the delayed reply - I'm quite busy tinkering with my new server I dont want to install much right now, but I've looked at the site and added it to my bookmarks.

Thanks for the tip - I'll give it a go later Edit: Yep works a treat - Thanks again. Right, I'm off for a lurk 'round to see what else I can expect/impliment

Hi all, Since this is my first post, 1st up; a BIG THANKS for the guide! I'm going to be starting MSCE in september so I want some hands on with Active Directory and all, but can't be bothered with dual booting just because I want to play a game/watch an xvid/etc. So,... Q. I've been realy happy with bsplay as my alternative media player under XP and I use a recent ffdshow for decoding. Only under 2003, bsplay just gives me a grey window with either of the overlay options. Does anyone know of a good second alternative (That works with ffdshow)? (Media plays fine in M$ media player - image qual is not so great) Specs 1800+ @ 10x200 on ABiT NF7S W2K3 Enterprise with selected guide mods (inc DX9 & Sound & GFX Accel) Active Directory / DNS / DHCP BSPlayer 100.809 ffdshow 20040607