A trouble free way of giving Administrators access to redirected folders on Windows Server 2008 R2 Standard?

A few months ago I set up some redirected folders on a clients Windows Small Busines Server 2008. I recall that setting up the redirected folders was straightforward, but when I edited the permissions to allow administrative access to these server located
folders, all hell broke lose. The permissions change seemed to trash the folders. I think I managed to 'bodge' it for a couple of users and got it working, but it was such a headache I didn't bother doing it for the other users.
Now, I sit in front of a brand-spanking-new Windows Server 2008 R2 Standard box which is going to be installed with a new client within 48 hours. I would like to set up redirected folders and would like to grant admin rights on these folders so I can view
their contents directly from the server.
It seems to me that there is no offical Microsoft documentation which relates specifically to doing this on Windows Server 2008. Given the amount of problems this has caused for many admins, I am astounded.
Somewhere there are articles which describe how to do it on 2003, but this procedure does not work well in 2008.
There is an SBS article that admits permissions can be trashed, but this is no help on Standard edition:
http://blogs.technet.com/b/sbs/archive/2010/10/08/folder-redirection-in-small-business-server-2008.aspx
I have just posted a note on this rather long article:
http://social.technet.microsoft.com/Forums/en-GB/smallbusinessserver/thread/70fa7f0e-7f2c-4f00-8401-42d262d80cd6
So, my question, hopefully to Microsoft employee, please can you document
exactly how to grant admin rights to users redirected folders on Windows Server 2008 R2 Standard, and please could you do it today :-)
In the absence of this help, then I'm afraid this is yet another great but badly implemented feature that we will not be using.
Stuart

Typical Micro$haft answer!
Quote "Hope this helps!"
NO IT DOESN'T!
Did you bother to read the original question?
Quote "So, my question, hopefully to Microsoft employee, please can you document exactly how
to grant admin rights to users redirected folders on Windows Server 2008 R2 Standard"
So, Micro$haft, Why did you give instructions to Server 2003?
... When the requester SPECIFICALLY stated: "Somewhere
there are articles which describe how to do it on 2003, but this procedure does not work well in 2008"

Similar Messages

Can't able to Access the internet in my Windows server 2008

I installed windows server 2008 server in my machine, it has only windows sever 2008 single OS.
Now my problem is, i am not able to Access internet, I tried some intel softwares, to install Ethernet drivers, but no use.
What i have to do now..?
Please help in this issue,
Thanks in advance
surendra mannem

Hi,
Please confirm you have configured the correct TCP IP address, if you have the static IP address please confirm your default gateway and the DNS server address
is correct and work properly.
More third party information:
Windows 7 Static IP
http://blog.mclaughlinsoftware.com/2009/11/26/windows-7-static-ip/
How to Set Static IP Address in Windows 7
http://www.youtube.com/watch?v=wmYBBHvfpTg
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

What is the easiest way to replicate(backup) a VM whose host is Windows Server 2008 R2?

I have a Windows Server 2008 R2 Hyper-V Manager and I have a Domain Controller as VM (which is running Server 2012 R2) and I would like to enable replicationfor this VM(I want to back up the Domain Controlloer).
Could you please tell me the easiest way of doing this?
Thanks,
Radu

Hi, Radu,
From my perspective, in this case the backup/replication solution should:
Perform image-level backup, as it’s always preferable to use such method for backing up/replicating virtual machines.
Guarantee application consistency. That’s being said, not only should it backup VMs running special application in consistent (VSS-aware) mode, but also it should apply
application-specific settings to prepare each application to perform
VSS-aware restore on the next VM startup.
Support 2012 R2 platform.
We’re using Veeam for the same purposes, as it does have abovementioned functionality. Though, you can stick to whatever solution that can boast with the listed options.
Kind regards, Leonardo.

Programmatic webdav/unc access requires user logon to windows server 2008 R2

I have an automated process (a .net windows service) that connects to sharepoint document library via a UNC (\\mysharepointsite\doclib). When the machine is rebooted,
accessing this folder results in a System.IO.IOException: The network name cannot be found exception.
However, if we log into the windows server 2008 r2 machine under the account that the service is running on, it starts working, and continues to work even when we log out. It continues to work until we reboot the computer.
I've already run into and solved other user-centric fixes for 2008. For example, the "Desktop Experience" feature is required to browse the path and all, and unchecking "automatically detect settings" significantly speeds up browsing of these paths.
However, I'm not sure what user logon initializes that would be fixing this problem.

I can further simplify this. The following command will fail initially:
dir \\myspserver\mypath
However, running the same command after browsing to the same path in windows explorer succeeds. At this point I've eliminated the programming as an issue so i will try to post a similar question on technet. However, please let me know if anybody
has any further info.

[SOLVED] VBox: Access shared folders from Windows Server 2008 Guest

Hi,
I have installed virtualbox v4.2.4 on Arch and I launch a WIndows Server 2008 guest. I want to access shared folder from guest. How to do it?
Last edited by toni (2012-11-26 00:31:21)

Hi,
I have done this but it does not work.
My network is configured as a NAT in virutalbox.
Also from WIndows server 2008 guest I do:
net use z:\\vboxsvr\mySharedFolder
Do I have to install additional software in host or do I have to configure something in Windows server 2008 guest?
illusionist wrote:
See Here
Also Here

Access denied when ssh in window server 2008 after set it as radius server

yesterday i succeed to use aaa to login and can see aaa in sh aaa session
https://murison.wordpress.com/2010/11/11/cisco-radius-configuration-with-server-2008-r2/
today i simulate again, it access denied, do not know where is wrong
win 192.168.2.12 --- switch 192.168.2.5 --- 192.168.2.1 R1
R1
conf t
hostname router1
int FastEthernet0/0
ip address 192.168.2.1 255.255.255.0
no shut
end
conf t
ip route 192.168.2.0 255.255.255.0 192.168.2.5
end
enable
configure terminal
enable secret cisco
end
conf t
aaa new-model
username radiusclient privilege 15 password 0 cisco
crypto key generate rsa
ip ssh time-out 60
ip ssh version 2
line vty 0 4
transport input ssh
exit
line vty 5 15
transport input ssh
exit
ip domain-name radius1.local
radius-server host 192.168.2.12
radius-server key cisco
aaa group server radius NPSSERVER
server 192.168.2.12
exit
aaa authentication login default group NPSSERVER local
aaa authorization exec default group NPSSERVER local
exit
R2
conf t
vlan 10
int vlan 10
ip address 192.168.2.5 255.255.255.0
end
conf t
hostname router2
int FastEthernet1/0
switchport
switchport access vlan 10
switchport mode access
shutdown
no shut
end
conf t
hostname router2
int FastEthernet1/1
switchport
switchport access vlan 10
switchport mode access
shutdown
no shut
end
conf t
hostname router2
int FastEthernet1/2
switchport
switchport access vlan 10
switchport mode access
shutdown
no shut
end
R3
conf t
hostname router3
int FastEthernet0/0
ip address 192.168.2.7 255.255.255.0
no shut
end
conf t
ip route 192.168.2.0 255.255.255.0 192.168.2.5
end

Hi,
The configuration looks fine. What do you see in radius server as the reason for authentication failure?
Regards,
Kanwal
Note: Please mark answers if they are helpful.

Installation of Client Access role fails on Windows Server 2008 R2 (Execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP")

Hello
I am trying to install Exchange Server 2010 beta 1 onto a Windows Server 2008 R2 (build 7000) machine which has also been set up as a domain controller.
However when attempting to install the Client Access role, setup fails with the error below.
Does anyone know of a way to get around this please?
I have already searched for this error and not found any similar threads.
Also every time I press the code button on this forum it crashes the browser and I keep losing the message! (IE8 from within Server R2). Also the message box is very small, will not expand and keeps jumping to the top.
Thanks
Robin
[code]
Summary: 4 item(s). 1 succeeded, 1 failed.
Elapsed time: 00:00:01
Preparing Setup
Completed
Elapsed Time: 00:00:00
Client Access Role
Failed
Error:
The execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP" -DomainController $RoleDomainController", generated the following error: "Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.".
Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.
Access is denied.
Elapsed Time: 00:00:01
Mailbox Role
Cancelled
Finalizing Setup
Cancelled
[/code]
Robin Wilson

Hello
Thanks for all the replies.
I have since wiped the system and installed everything again and it all worked this time so not sure what was wrong last time. I did try to uninstall all Exchange components and then uninstall IIS and Application server, reboot and re-install but I received the same error still when it came to installing the client access role.
Walter: I just attempted the standard installation which should have used the default self-signed certificate. Everything was a fresh install done at the same time on a freshly formatted PC.
For info last time when it failed to work:
- Installed Windows Server 2008 R2
- Installed Domain Controller role using dcpromo. I set the forest and domain as Windows Server 2008 R2
- Added a forest trust between main domain and test Exchange domain (set up as ex2010.local)
- Installed IIS and Application Server role
- Installed Hyper-v role
- Installed Desktop Experience feature
- Installed Exchange and recieved the error
When it worked I set up the forest and domain in Windows Server 2008 mode (i.e. not R2), installed Exchange first and then set up the forest trust and then Hyper-v. It did say it failed to configure dns which was probably because it started trying to do automatic updates half way through the dcpromo! DNS seems to work ok though.
I did notice this time that Hyper-v gave a warning about the virtual network adapter not being set up correctly and the local network did not work correctly although I could access the internet. Not sure if this could have been related to the cause of the problem previously. For now I have disabled the virtual network until I get time to try and get it working and so the mail will work in the meantime.
I also noticed that Hyper-v added an extra 443 ssl binding to the default website so as it had 2 bindings on port 443 it refused to start. After deleting one it worked.
I decided to install Exchange onto a domain controller as it is only a test and I wouldn't do it in a live environment. I am also short of test machines! It didn't give me any warnings about this actually, I think previous versions warn you that it is not recommended.
Andreas and Chinthaka: I did not know about the requirement to run the domain at 2003 mode. The main domain is running in 2008 mode with Exchange 2007 so I assume this is just a temporary beta related requirement. It does seem to be working (second attempt) so far in a 2008 mode domain although I haven't had a chance to fully test it yet.
Thanks
Robin
P.S. Sorry it's taken me a while to reply!
Robin Wilson

Administrators unable to write to a text file created by another Administrator on Windows Server 2008.

Why are Administrators unable to write to a text file created by another Administrator on Windows Server 2008?
--- The Administrators already have full control so how do I fix this? ---
Example: On a Windows Server 2008 (SP1): user A (who belongs to the Administrators group) logs in and creates a directory C:\foo and creates a file readme.txt in the foo directory. User B (also a member of the Administrators group) logs in and opens C:\foo\readme.txt in notepad. User B types something and tries to save the file. User B cannot save the file…an option to save as some other file name is presented. The security permissions of C:\foo\readme.txt show that Administrators have full control.
Work around 1: Explicitly add user B to have full control over the foo directory. The problem is that all the all other Administrators still need to be added (current and future).
Work around 2: Change the Users security permission to be full control on the foo directory. (this seems dangerous!)
It is interesting to not that this same procedure is not a problem in Windows Vista. (Any insight about the difference?)
Sincerely,
Ian

so there is no way to change this without literally shutting down the UAC?
I have files that I need to modify all the time, and it is very annoying to have to save as to my desktop modify and then copy and paste the file again.
I would also rather not give myself permissions to the entire C:\ Drive even specified Folders or documents, etc......
You can change these settings without bringing down the UAC

1.    Click Start, type gpedit.msc and press Enter.
2.    Expand Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.

3.    Double-click “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode” on the right pane.
a.    Choose “Elevate without prompting” and click OK.
b.    Double-Click “User Account Control: Admin Approval Mode for the Built-in Administrator account”, Click Enable, Apply and then OK
c.     Double-Click “User Account Control: Run all users, including administrators, as standard users”,Click Enable, Apply and then OK
Then reboot the Server. You should now have the ability to modify any document, etc....

Windows Server 2008 R2 Remote Desktop - The requested session access is denied

Hi, I have been using Windows Server 2008 R2 since it was released, and have 100 servers up and running. I configured Allow Remote Desktop on all of them and have been able to connect to them and manage them via RDP since then. I also have two servers configured as Remote Desktop Services.
That was up until yesterday. Yesterday afternoon I started getting the The requested session access is denied. I managed all Terminal services via Group Policy and have three users entered.
I am connecting to the servers via Windows XP SP3 and Windows 7. Both clients have been updated to the latest Remote Desktop Services client.
I have been searching for the answer, and I am not finding it.
I have also tried KB954369 without any success.
Thanks,
Brian

Ok, from my trials and tribulations and discussions with Microsoft I have identified the following;
Assumptions;
A. My terminal server is in domain widget
B. All the users are in domain contoso
1. I had the Terminal Server configurured with a specific Login, which would launch a specific application only and not give them any desktop functions. Wiht this configured this way, I get the error I wrote about.
2. If I turn the specific login off, then I can login normally and perform the functions as Administrator that I need/want to do.
3. Microsoft said to configure the Terminal Server with Single Sign-on. I did as instructed and went thru all the steps, however because my terminal server is in domain widget, the users get prompted twice each time for login. Once on the website, and then again as the application launches. Microsoft said that the users needed to Remote Desktop Client 7.x or the self-signed certificate that I have has to be included in the domain contoso certificate authority so that they will not be prompted for the second sign-on.
4. Conclusions - I need to have a chat with our enterprise security team about including the self-signed certificate in the contoso certificate authority. I need to also work on my RDWeb website so that it meets our company standard look.
Here are the links that Microsoft provided;
http://technet.microsoft.com/en-us/library/cc772108(WS.10).aspx
Enable RDC Client Single Sign-On for Remote Desktop Services
http://technet.microsoft.com/en-us/library/cc742808.aspx
Blogs -
http://blogs.msdn.com/rds/archive/2007/04/19/how-to-enable-single-sign-on-for-my-terminal-server-connections.aspx
http://blogs.msdn.com/rds/archive/2009/08/11/introducing-web-single-sign-on-for-remoteapp-and-desktop-connections.aspx
http://blogs.msdn.com/rds/archive/2009/06/05/publishing-in-windows-server-2008-r2.aspx
http://blogs.technet.com/pfe-ireland/archive/2008/09/05/windows-server-2008-terminal-services-presentation-virtualisation-and-windows-xp-clients.aspx
I hope this help you in your troubleshooting.
Brian

About Install Oracle Access Manager On Windows Server 2008 64bit

hi,
Question 1:
Can I install OAM10g(10.1.4.3.0) on Windows Server 2008 64bit ?
(because OAM10g all is for win32)
(I have tried to install it , but when OHS restart, have errors, so I found the 64bitOS is the trouble...)
Question 2:
If Question1 cannot, Can Oracle Identity and Access Management 11g fix it ?
Help
Thanks.

Does this server use Itanium processors ? See MOS Doc 430677.1 (The image file setup.exe is valid, but is for a machine type other than the current machine.)
Srini

Windows server 2008 R2 x64 Authentication failure while try to access Windows server 2003 R2

Hello,
I try to access Windows Server 2003 R2 Standard from Windows Server 2008 R2 x64 standard using integrated windows authentication . And because my application tries to read SQL server i'm getting and error that user is not trusted. Then I tried to open a
simple shared folder on 2003 and none of the users is able to do it. Both servers are part of common workgroup in the same IP range. Using domain is not an option. Migrating 2003 to 2008 is not an option either. The specific DB provider I have to use
supports only windows authentication, so creating user into SQL server is not an option too. I have tested many applications and cases which requires/uses windows authentication and non of the manage to connect.
Any help is very welcome because things are urgent!
Authentication failure

That method in workgroup mode may be a problem.
Authentication in SQL Server
Might ask them over here.
SQL Server forums on
MSDN
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Microsoft Excel cannot access the file "-". There are several possible reasons. Windows Server 2008 R2 with Microsoft Office 2010

I have a problem with starting the Excel Application under a particular user (service account).
I try to schedule this C# script through an application X (not Windows Task Scheduler. And this
application will always use a service account to run services on the server). If I run the C# script in
command prompt under the same user, it runs. Under the application X, which uses the exact same
user, to initiate the C# script, it fails to open the Excel application (not sufficient permission?).
This script calls application.Workbooks.Open(<ExcelFileName>,0,false,Type.missing....). At this line
of code, it gives the following error:
Microsoft Excel cannot access the file "...". There are several possible reasons:
-The file name or path does not exist.
-The file is being used by another program.
-The workbook you are trying to save has the same name as a currently open workbook.
I tried all the methods that I found online as follow:
Create directory "C:\Windows\SysWOW64\config\systemprofile\Desktop" (for 64 bit Windows) or "C:\Windows\System32\config\systemprofile\Desktop" (for 32 bit Windows).
Changed the DCOM config for the Microsoft Excel application to include this user for Local/Remote Launch and Access.
Enabled all macros in Excel application and set the Trust Center.
Add the user to have full control on all folders that contain the Excel file.
Under DCOM
config, Microsoft Excel Application, if I modify the Identity tab to check on "This User" and enter the username/password to let Excel always run under that user. Then the application runs perfectly. However, other users can't run the excel application
on their own with the following error: "Cannot use object linking and embedding". If I check "Use the launching user", then Excel can't be launched. No errors in the logs or events anywhere to check.
Yet, still the same error. I think it's permission but I am not sure where and what to do for this to work.
Now, normally, when I run this excel report, I can double-click on the file and it'd automatically run,
save the new parameters into the current file and generate a new excel file (with date attached to the
file name). That means there is a change (save) to the original file.
Environment: Windows Server 2008 R2 and running Microsoft Excel 2010.
I appreciate all your help!

I am wondering if this has anything to do with having the user log into Excel.
In point #5 above: Under DCOM config, Microsoft Excel Application, if I modify the Identity tab to check on "This User" and enter the username/password to let Excel always run under that user. Then the application runs perfectly. However, other
users can't run the excel application on their own with the following error: "Cannot use object linking and embedding". If I check "Use the launching user", then Excel can't be launched. No errors in the logs or events anywhere to check.
Because running with the launching user proposes an user to run the Excel application. However, I do not think there is any where that we can pass in the password for this user to Excel. However, this Excel has all the permissions to Excel application as
well as the folders that have the Excel files.
Please help!
Thank you!

Oracle 11g R2 to MS Access .mdb (Windows Server 2008 64-bit) problem

I have a need to make connection from Oracle 11g R2 to MS Access database file (mdb). OS is MS Windows Server 2008 64-bit. My configuration is next:
1. I made System DNS mikeacs (using c:\windows\sys_wow6\odbcad32.exe) to my access mdb file;
2. I made initmikeacs.ora file in ora_home\hs\admin folder:
# HS init parameters
HS_FDS_CONNECT_INFO = mikeacs
HS_FDS_TRACE_LEVEL = debug
HS_FDS_SHAREABLE_NAME = c:\Windows
3. Listener.ora file is:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = CLRExtProc)
(ORACLE_HOME = C:\Oracle\product\11.2.0\dbhome_1)
(PROGRAM = extproc)
(ENVS = "EXTPROC_DLLS=ONLY:C:\Oracle\product\11.2.0\dbhome_1\bin\oraclr11.dll")
(SID_DESC =
(SID_NAME = mikeacs)
(ORACLE_HOME = c:\oracle\product\11.2.0\dbhome_1)
(PROGRAM = dg4odbc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = cspo02)(PORT = 1521))
4. Tnsnames.ora is:
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(CONNECT_DATA =
(SID = CLRExtProc)
(PRESENTATION = RO)
MIKEACS =
(DESCRIPTION=
(ADDRESS=(PROTOCOL=tcp)(HOST=cspo02)(PORT=1521))
(CONNECT_DATA=(SID=mikeacs))
(HS=OK)
5. After this, I restarted Listener:
lsnrctl stop;
lsnrctl start;
Given feedback:
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 64-bit Windows: Version 11.2.0.1.0 - Production
Start Date 20-RUJ-2010 14:47:21
Uptime 0 days 0 hr. 0 min. 3 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File C:\Oracle\product\11.2.0\dbhome_1\network\admin\listener.ora
Listener Log File c:\oracle\diag\tnslsnr\cspo02\listener\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1521ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=cspo02)(PORT=1521)))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "mikeacs" has 1 instance(s).
Instance "mikeacs", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
6. I created db link: create public database link macs using 'MIKEACS' (connected as sysdba);
7. tnsping mikeacs:
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION= (ADDRESS=(PROTOCOL=tcp)(HOST=cspo02)(PORT=1521)) (CONNECT_DATA=(SID=mikeacs)) (HS=OK))
OK (0 msec)
Then, when I try fire query (connected as sysdba): select * from mytable@macs;
get result:
ERROR at line 1:
ORA-28513: internal error in geterogeneous remote agent
ORA-02063: preceding line from MACS;
Although, when I fire the same query, but connected as other user, get next result:
ERROR at line 1:
ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Microsoft][ODBC Driver Manager] Data source name not found and no default
driver specified {IM002}
ORA-02063: preceding 2 lines from MACS
Where is my problem? Please help. Thanks in advance!

That's the problem. DG4ODBC on 64bit Windows is 64bit and thus it also requires a 64bit ODBC driver.
If you don't find one - maybe you can install DG4ODBC 32bi on a 32bit platform (please do NOT install it on the 64bit Windows machine) and then use this 32biit DG4ODBC with the 32bit ODBC driver.
Another option would be to purchase a commercial ODBC driver or a bridged ODBC driver.

Access Denied DNS Server 'Windows Server 2008 R2 and Install AD (PDC) and ADD (BDC=Additional AD)

hi
I Have
Windows server 2008 R2 and Install Active Directory
Install and configuration for windows server 2008 PDC (Primary Domain Controller) and BDC (Additionall Domain Controller)
Error
A security Package specific Error Occurrred. would you like to add it anyway
and
Access Denied Console Other Domain AD
and Nslookup
C:\Users\admin>nslookup pdc
Server: bdc.*.*
Address: 10.0.X.X
Name: pdc.*.*
Addresses: 10.0.1.11
10.0.X.X

Hello,
your description is a bit confusing. You get the error message when you try to add the other DC to the DNS management console on one machine?
Both DCs belong to the same domain according to your description?
Please post an unedited ipconfig /all from both DC/DNS servers here.
BTW: PDC/BDC concept is gone since the start from AD with Windows 2000 Server. All DCs are the same, difference are only the FSMO roles, still that can be held from any DC in the domain according to some rules.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

A trouble free way of giving Administrators access to redirected folders on Windows Server 2008 R2 Standard?

Similar Messages

Maybe you are looking for