ICTCity

please open a command prompt on the DNS server and type: ipconfig /flushdns ipconfig /all route print tracert www.google.com nslookup (this will bring you to a "sub" program with a ">") type this: www.microsoft.com exit post the results :)

Excuse me... do you have a domain? Is your server / are yours clients joined in that domain?

At the end of your batch file type: PAUSE This should help...

FIRST: I want to remember a thing: NEVER INSTALL THIRD PART SOFTWARE IF NOT STRICTLY NECESSARY! But if you want to do that... http://www.groovypost.com/howto/microsoft/vista/add-runas-to-explorer-context-menu-in-vista-and-server-2008/

If you want to use a LOCAL account you have to create a local account... CONTROL PANEL > USERS > CREATE NEW USER

If you just joined a domain, policies applied to your machine CANNOT BE REMOVED. Only the administrator can do that. I don't know what mean by " i want to work hiddenly in the presence on my network so that my administrator will not see my activities". If your network's admin watch your activities, it should be ONLY for security purpose. The only thing you can do is to UNJOIN the domain (right click on computer > proprieties > set to WORKGROUP). BE CAREFUL, users not in domain may have many other restrictions, for example no internet access or no personal folder access.

If you want to copy a GP it's quite simple. On your DC open the Group Policy Manager and right click the policy you want to copy, then click COPY (or export... I can't remember right now). Now you have a clone of your GP :)

From msdn: To change security authentication mode 1. In SQL Server Management Studio Object Explorer, right-click the server, and then click Properties. 2. On the Security page, under Server authentication, select the new server authentication mode, and then click OK. 3. In the SQL Server Management Studio dialog box, click OK, to acknowledge the need to restart SQL Server. To restart SQL Server from SQL Server Management Studio 1. In Object Explorer, right-click your server, and then click Restart. If SQL Server Agent is running, it must also be restarted. Tell me if this resolves your problem

When you join domain, your computer is put on COMPUTERS in AD. DNS Server doesn't know anything about yours clients until you join domain :) Try just one thing, on a pc that IS NOT on domain open the command prompt and type: nslookup, you should see SERVER: and Address: . Check if these values are exactly the same of your DNS (IP and name), if yes... well I have to think about it... else... I'm right :P DHCP Server Role is easy to install and setup, but if you need help tell me :) byeee

Hi Issa :) Welcome :)

Hi, That's correct! When you JOIN a domain you have to type a NAME (THE DOMAIN'S NAME), for example: mynewdomain.local Computers and networks don't speak human-language, they use IPs :) When you type the domain mynewdomain.local, your client uses the PRIMARY DNS SERVER (setted up in TCP/IP config) querying it to retrieve the IP address. Once it has the IP your client will be able to join. You must configure DNS on yours clients (also via DHCP works). Let me know if you need further help!

Well... this is not exactly true... you have two choices: 1) You can MANUALLY create each profile folder (bad idea...) 2) Map a network script that runs with admin right to create the folder Where I work I did that :)

Mhhhh let me know your ping delay... I think your problem could be the network speed. Open your VPN and once connected type to the command prompt (XP client): ping -t ServerIP >C:\PingOut.txt then TRY to open the network path \\Server\resource... once your get the error message return to your prompt and type CTRL+C. Now come back here and upload the file just created (C:\PingOut.txt). Cheers

Hi guys, I hope I can help you and you me :P I'm young (almost 21) but I have a good experience with Windows and Linux. I'm Network+ certified and I'm studying for the CEH certification. I love networks and security :) Keep posting guys! Cheers

Right click on UserProfile folder, under SECURITY select ADVANCED and then CHANGE PERMISSIONS. Here you could delete every user BUT NOT Administrator and/or SYSTEM (if exists). Once you're finished click ADD. I think your users are in a DOMAIN, if so type DOMAIN USERS, or if you prefer type the name of the group containing allowed users. Then click OK. Now you should see a list of permission (starting with full control), here are my suggestions: ALLOW: LIST FOLDER / read data DENY: everything else *** DO NOT CHECK >>> DENY > FULL CONTROL *** Now for each subfolder you should assign a "full control" to the owner. But this is up to you :) I hope this can help you :) Let me know!

Sorry BSchwarz, I don't want to "bypass" you but I had a similar problem... There're only 2 solutions: Download the latest firmware for you motherboard (PAY ATTENTION - IBM'S SERVERS NEED A SPECIFIC PROCEDURE TO UPDATE FIRMWARES, SOMETIMES YOU NEED TO UPDATE THE CONTROLLER FIRST AND THEN YOUR MOBO!) The other "solution" is to replace the ram... it could be faulty. Cheers

You have to enable DYNAMIC NAT, take a look here: http://www.windowsnetworking.com/articles_tutorials/NAT_Windows_2003_Setup_Configuration.html That's for WS 2k3 but it should be the same on WS 2k8. Let me know

Here you should find the right link: http://technet.microsoft.com/en-us/library/cc753781%28WS.10%29.aspx Anyway, I'm not sure that this will work. Think for a while, when you estabilish a VPN you create a tunnel and I think Windows Firewall doesn't know HOW to manage this. Check the link or google "Windows server 2008 firewall log" and post your results... maybe it's just a misconfiguration but it could be also a firewall limitation. Cheers

So you have a windows server with windows firewall activated and blocking INCOMING traffic on port 443... right? Clients try to connect with pptp on port 443 right? Are you sure you blocked port 443 and NOT the SSL service? How can you be sure that clients are using port 443? You wrote something that is not correct: "when users connect using pptp protocol (through RRAS) their 443 port is open" But this is correct... YOUR firewall BLOCKS connection TO and/or FROM server ITSELF! If clients OPEN the connection locally on port 443 (that's strange...) and connect TO port #1723, you can understand why this works :) Anyway, take a look here: http://technet.microsoft.com/en-us/library/cc947815(WS.10).aspx#bkmk_ToenableWindowsFirewallandconfigurethedefaultbehavior and here: http://technet.microsoft.com/en-us/library/ff428136(WS.10).aspx Finally here: http://technet.microsoft.com/en-us/library/cc753781(WS.10).aspx and here: http://technet.microsoft.com/en-us/library/ff428145(WS.10).aspx Because you are in a test environment, you could post logs )

I just found the problem and a "workaround". The problem is that users with THINCLIENT (no framework installed) do not support printer redirection... Luckly I found almost all printer's driver for x64 server. Anyway, if you have another solution let me know! :) bye

Excuse me... but why do you close the SSL port? PPTP runs at 1723.

Why would you like to access your DC from OUTSIDE?! Depends on what you want to do... if you need to manage your DC a VPN could be a solution. If you need an EXTERNAL / PUBLIC DOMAIN that's a bit different. Let me know

Basically a THINCLIENT is something made of: - NIC (network card) - CPU - Flash memory (usually 1 GB) - RAM - Windows CE / XP Embedded If you have a old pc... that is not a thinclient... is a pc :) A thinclient is used JUST to do network tasks (RDP, Citrix RDP) I hope this answer your question

Try to watch the event viewer and post your result

Well... you simply add the interested user to that group... not? Maybe I don't understand what you want...