<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>waynestorey.com Blog &#187; active directory</title>
	<atom:link href="http://waynestorey.com/blog/tag/active-directory/feed/" rel="self" type="application/rss+xml" />
	<link>http://waynestorey.com/blog</link>
	<description>Hopefully a useful blog of technology issues, errors and fixes</description>
	<lastBuildDate>Thu, 02 Feb 2012 11:25:07 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Change Schema Master in Active Directory</title>
		<link>http://waynestorey.com/blog/2010/02/17/change-schema-master-in-active-directory/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=change-schema-master-in-active-directory</link>
		<comments>http://waynestorey.com/blog/2010/02/17/change-schema-master-in-active-directory/#comments</comments>
		<pubDate>Wed, 17 Feb 2010 07:40:58 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2000]]></category>
		<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[mmc]]></category>
		<category><![CDATA[registry]]></category>
		<category><![CDATA[schema]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=368</guid>
		<description><![CDATA[To change the Schema Master in Active Directory you will need to register a DLL to enable the Active Directory Schema MMC. This MMC is disabled by default as this tool can break active directory completely if you make changes to the schema (think the regedit but for Active Directory). To start open a run [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2010/02/17/change-schema-master-in-active-directory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Normal user cannot add a network printer on a Terminal Server</title>
		<link>http://waynestorey.com/blog/2010/02/06/normal-user-cannot-add-a-network-printer-on-a-terminal-server/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=normal-user-cannot-add-a-network-printer-on-a-terminal-server</link>
		<comments>http://waynestorey.com/blog/2010/02/06/normal-user-cannot-add-a-network-printer-on-a-terminal-server/#comments</comments>
		<pubDate>Sat, 06 Feb 2010 03:59:15 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2000]]></category>
		<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[permissions]]></category>
		<category><![CDATA[print]]></category>
		<category><![CDATA[remote desktop]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=365</guid>
		<description><![CDATA[By default Windows 2000 and 2003 terminal services does not allow a non administration account to add a printer when they log onto a remote desktop connection. When they do attempt to install a printer the user gets the following error message. You do not have sufficient access to your computer to connect to the [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2010/02/06/normal-user-cannot-add-a-network-printer-on-a-terminal-server/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Reset all user passwords within an ou to the same password</title>
		<link>http://waynestorey.com/blog/2010/02/04/reset-all-user-passwords-within-an-ou-to-the-same-password/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=reset-all-user-passwords-within-an-ou-to-the-same-password</link>
		<comments>http://waynestorey.com/blog/2010/02/04/reset-all-user-passwords-within-an-ou-to-the-same-password/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 09:07:02 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[password]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=364</guid>
		<description><![CDATA[A quick and easy way to reset all the passwords for users in a particular OU is to run the following command in a command prompt window on the domain controller. The below will reset all the passwords to &#8220;password&#8221;.  Change your OU references to your own settings. C:\&#62;dsquery user OU=tech,OU=australia,DC=waynestorey,DC=com &#124; dsmod user -pwd [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2010/02/04/reset-all-user-passwords-within-an-ou-to-the-same-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Installing Quicktime 7 through Active Directory</title>
		<link>http://waynestorey.com/blog/2009/06/30/installing-quicktime-7-through-active-directory/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=installing-quicktime-7-through-active-directory</link>
		<comments>http://waynestorey.com/blog/2009/06/30/installing-quicktime-7-through-active-directory/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 01:00:53 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Windows Vista]]></category>
		<category><![CDATA[Windows XP]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[Windows 2003]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=310</guid>
		<description><![CDATA[Further to yesterdays posting I have also been trying to install Quicktime 7.62 to around 200 computers through the Active Directory application Software Installation GPO. As with Sketchup Apple did not provide an MSI file, but the quicktimeinstaller.exe file they do provide does extract to an MSI in the following folders when you double-click it [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/06/30/installing-quicktime-7-through-active-directory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Deploy Google Sketchup 7 using Active Directory</title>
		<link>http://waynestorey.com/blog/2009/06/29/deploy-google-sketchup-7-using-active-directory/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=deploy-google-sketchup-7-using-active-directory</link>
		<comments>http://waynestorey.com/blog/2009/06/29/deploy-google-sketchup-7-using-active-directory/#comments</comments>
		<pubDate>Mon, 29 Jun 2009 01:59:50 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[Windows Vista]]></category>
		<category><![CDATA[Windows XP]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[Windows 2003]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=307</guid>
		<description><![CDATA[Google only distributes google sketchup as an exe file which is not assignable through Active Directory Group Policy. This exe is only a wrapper for the msi file though and this msi is able to be assigned to computers. To get the msi file double-click on the GoogleSketchUpWEN.exe downloaded and when its at the &#8220;Welcome [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/06/29/deploy-google-sketchup-7-using-active-directory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>List of Control Panel Applets .cpl Files</title>
		<link>http://waynestorey.com/blog/2009/06/18/list-of-control-panel-applets-cpl-files/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=list-of-control-panel-applets-cpl-files</link>
		<comments>http://waynestorey.com/blog/2009/06/18/list-of-control-panel-applets-cpl-files/#comments</comments>
		<pubDate>Thu, 18 Jun 2009 03:41:01 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[Windows XP]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[control panel]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=303</guid>
		<description><![CDATA[The list of Control Panel applets below can be used to create a list of control panel items users can see (Or not allowed to see) within their Control Panel with the help of the Active Directory GPO setting &#8220;Show only specified Control Panel  applets&#8221; or &#8220;Hide specified Control Panel applets&#8221;. These settings are found [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/06/18/list-of-control-panel-applets-cpl-files/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Reset the DSRM Administrator Password</title>
		<link>http://waynestorey.com/blog/2009/04/07/reset-the-dsrm-administrator-password/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=reset-the-dsrm-administrator-password</link>
		<comments>http://waynestorey.com/blog/2009/04/07/reset-the-dsrm-administrator-password/#comments</comments>
		<pubDate>Mon, 06 Apr 2009 19:58:16 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[dsrm]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=301</guid>
		<description><![CDATA[Prior to Windows 2003 SP1 the DSRM (Directory Services Restore Mode) password was automatically synchronised with the Domain Administrator account password whenever you changed the domain admin account. With Win2003 SP1 and the breaking of this functionality you will find the below error in your application event log if these two passwords don&#8217;t match. Event [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/04/07/reset-the-dsrm-administrator-password/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Find and Delete Inactive Computer Accounts on a Domain</title>
		<link>http://waynestorey.com/blog/2009/03/16/find-and-delete-inactive-computer-accounts-on-a-domain/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=find-and-delete-inactive-computer-accounts-on-a-domain</link>
		<comments>http://waynestorey.com/blog/2009/03/16/find-and-delete-inactive-computer-accounts-on-a-domain/#comments</comments>
		<pubDate>Mon, 16 Mar 2009 00:58:32 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[active directory]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=280</guid>
		<description><![CDATA[To find the inactive computer accounts of 25 weeks or more run the following command in a command prompt on your domain controller: dsquery computer domainroot -d DOMAINNAME -inactive 25 &#62;c:\inactive25.txt To delete the inactive computers run the following command in a command prompt on your domain controller: for /F %i in (&#8216;dsquery computer domainroot [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/03/16/find-and-delete-inactive-computer-accounts-on-a-domain/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Setup your Log on to Domain automatically</title>
		<link>http://waynestorey.com/blog/2009/03/13/setup-your-log-on-to-domain-automatically/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=setup-your-log-on-to-domain-automatically</link>
		<comments>http://waynestorey.com/blog/2009/03/13/setup-your-log-on-to-domain-automatically/#comments</comments>
		<pubDate>Fri, 13 Mar 2009 01:00:31 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Windows XP]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[registry]]></category>
		<category><![CDATA[Windows 2003]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=199</guid>
		<description><![CDATA[One thing that really annoys me about windows is that when you add a machine to a domain the log on to domain defaults to &#8220;MachineName (This computer)&#8221;. This means that you then need to log into the machine under a domain account and then log off again if you don&#8217;t want to get a [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/03/13/setup-your-log-on-to-domain-automatically/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Redirecting Favorites using Group Policy</title>
		<link>http://waynestorey.com/blog/2009/02/22/redirecting-favorites-using-group-policy/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=redirecting-favorites-using-group-policy</link>
		<comments>http://waynestorey.com/blog/2009/02/22/redirecting-favorites-using-group-policy/#comments</comments>
		<pubDate>Sat, 21 Feb 2009 21:53:35 +0000</pubDate>
		<dc:creator>Wayne</dc:creator>
				<category><![CDATA[Windows 2003]]></category>
		<category><![CDATA[Windows XP]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[favorites]]></category>
		<category><![CDATA[internet explorer]]></category>
		<category><![CDATA[registry]]></category>

		<guid isPermaLink="false">http://waynestorey.com/blog/?p=96</guid>
		<description><![CDATA[Windows Active Directory and group policy lets you easily redirect your users Desktop, My Documents folders, Start Menu and Application Data (although I would like to know why anyone would redirect the App data folder). But for some reason the users Favorites redirection was left out of these defaults. I&#8217;m sure there are multiple ways [...]]]></description>
		<wfw:commentRss>http://waynestorey.com/blog/2009/02/22/redirecting-favorites-using-group-policy/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

