I have a SBS Premium 2003, in the Domain I have a cou ple
other member servers Windows 2003. How can I set one of
these as the backup AD server in case SBS goes down?
Thanks

Re: Backup AD by Marina

Marina
Mon May 03 08:24:57 CDT 2004

Have you made one of those memberservers domaincontrollers? Have a look in
Servermanagement. There are helpfiles that explain exactly what you will
have to do.

--
Regards,

Marina
Microsoft SBS-MVP

"Jose" <ineedtoknow@knowledge.com> schreef in bericht
news:782401c4310a$1da89d00$a301280a@phx.gbl...
> I have a SBS Premium 2003, in the Domain I have a cou ple
> other member servers Windows 2003. How can I set one of
> these as the backup AD server in case SBS goes down?
> Thanks



Re: Backup AD by Jose

Jose
Thu May 06 10:53:13 CDT 2004

So is no problem a member server in a SBS 2003 Domain to
do set up the role of Domain Controller.
And then I will have the backup for AD.


>-----Original Message-----
>Have you made one of those memberservers
domaincontrollers? Have a look in
>Servermanagement. There are helpfiles that explain
exactly what you will
>have to do.
>
>--
>Regards,
>
>Marina
>Microsoft SBS-MVP
>
>"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>news:782401c4310a$1da89d00$a301280a@phx.gbl...
>> I have a SBS Premium 2003, in the Domain I have a cou
ple
>> other member servers Windows 2003. How can I set one
of
>> these as the backup AD server in case SBS goes down?
>> Thanks
>
>
>.
>

Re: Backup AD by Marina

Marina
Thu May 06 11:55:12 CDT 2004

Indeed, you can have additional domaincontrollers in a SBS environment.

--
Regards,

Marina
Microsoft SBS-MVP

"Jose" <ineedtoknow@knowledge.com> schreef in bericht
news:961101c43382$3ce4f720$a301280a@phx.gbl...
> So is no problem a member server in a SBS 2003 Domain to
> do set up the role of Domain Controller.
> And then I will have the backup for AD.
>
>
> >-----Original Message-----
> >Have you made one of those memberservers
> domaincontrollers? Have a look in
> >Servermanagement. There are helpfiles that explain
> exactly what you will
> >have to do.
> >
> >--
> >Regards,
> >
> >Marina
> >Microsoft SBS-MVP
> >
> >"Jose" <ineedtoknow@knowledge.com> schreef in bericht
> >news:782401c4310a$1da89d00$a301280a@phx.gbl...
> >> I have a SBS Premium 2003, in the Domain I have a cou
> ple
> >> other member servers Windows 2003. How can I set one
> of
> >> these as the backup AD server in case SBS goes down?
> >> Thanks
> >
> >
> >.
> >



Re: Backup AD by Jose

Jose
Thu May 06 18:57:20 CDT 2004

I tried to do it with 2 Windows 2003 server and it did
not work.
After I entered all the logon info, and it started to
replicate, it gave me a message that I do not have enough
permission to update the servername$ to Domain Controller.
I entered the Administrator logon information, who is
also the Enterprise admin.
The same message appeared when I tried in the other
server.



>-----Original Message-----
>Indeed, you can have additional domaincontrollers in a
SBS environment.
>
>--
>Regards,
>
>Marina
>Microsoft SBS-MVP
>
>"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>news:961101c43382$3ce4f720$a301280a@phx.gbl...
>> So is no problem a member server in a SBS 2003 Domain
to
>> do set up the role of Domain Controller.
>> And then I will have the backup for AD.
>>
>>
>> >-----Original Message-----
>> >Have you made one of those memberservers
>> domaincontrollers? Have a look in
>> >Servermanagement. There are helpfiles that explain
>> exactly what you will
>> >have to do.
>> >
>> >--
>> >Regards,
>> >
>> >Marina
>> >Microsoft SBS-MVP
>> >
>> >"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>> >news:782401c4310a$1da89d00$a301280a@phx.gbl...
>> >> I have a SBS Premium 2003, in the Domain I have a
cou
>> ple
>> >> other member servers Windows 2003. How can I set
one
>> of
>> >> these as the backup AD server in case SBS goes
down?
>> >> Thanks
>> >
>> >
>> >.
>> >
>
>
>.
>

Re: Backup AD by Jim

Jim
Thu May 06 22:40:23 CDT 2004

net time //sbsservernam /set /yes

servers do not do a lot of things well unless the time is the same.
Make sure time zones are the same.

Note from Jeff Middleton regarding some AD tasks.

The operation failed because: The Active Directory Installation Wizard
was unable to convert the computer account [SERVERNAME]$ to a domain
controller account. "Access is denied."
http://support.microsoft.com/?kbid=250874 and
http://support.microsoft.com/?kbid=232070
for explanation and solution.

To resolve this problem, use an account in the Administrators group,
or add the appropriate account to the Administrators group. To grant
this right to another user or group, set the delegation privilege on
the Group Policy object:

1) In the Active Directory Users and Computers snap-in, edit the
Default Domain Controllers Policy on the Domain Controllers
Organizational Unit.
2) Double-click Computer Configuration, click Windows Settings,
click Security Settings, click Local Policies, and then click User
Rights Assignment.
3) Under Enable Computer and User Accounts to be trusted for
Delegation, add the appropriate account or group.
4) Apply the policy using one of the following methods:
5) At a command prompt, type secedit /refreshpolicy
machine_policy /enforce.
6) In the Sites and Services snap-in (Dssite.msc), use the
Replicate Now feature to force replication from the domain controller
on which the policy was changed to the other domain controllers in the
domain.

Above info shared by Jeff M regarding another issue related to your
task.

"Jose" <ineedtoknow@knowledge.com> wrote:

>I tried to do it with 2 Windows 2003 server and it did
>not work.
>After I entered all the logon info, and it started to
>replicate, it gave me a message that I do not have enough
>permission to update the servername$ to Domain Controller.
>I entered the Administrator logon information, who is
>also the Enterprise admin.
>The same message appeared when I tried in the other
>server.
>
>
>
>>-----Original Message-----
>>Indeed, you can have additional domaincontrollers in a
>SBS environment.
>>
>>--
>>Regards,
>>
>>Marina
>>Microsoft SBS-MVP
>>
>>"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>>news:961101c43382$3ce4f720$a301280a@phx.gbl...
>>> So is no problem a member server in a SBS 2003 Domain
>to
>>> do set up the role of Domain Controller.
>>> And then I will have the backup for AD.
>>>
>>>
>>> >-----Original Message-----
>>> >Have you made one of those memberservers
>>> domaincontrollers? Have a look in
>>> >Servermanagement. There are helpfiles that explain
>>> exactly what you will
>>> >have to do.
>>> >
>>> >--
>>> >Regards,
>>> >
>>> >Marina
>>> >Microsoft SBS-MVP
>>> >
>>> >"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>>> >news:782401c4310a$1da89d00$a301280a@phx.gbl...
>>> >> I have a SBS Premium 2003, in the Domain I have a
>cou
>>> ple
>>> >> other member servers Windows 2003. How can I set
>one
>>> of
>>> >> these as the backup AD server in case SBS goes
>down?
>>> >> Thanks
>>> >
>>> >
>>> >.
>>> >
>>
>>
>>.
>>

Jim B. SBS MVP
remove the mvp to send email

Re: Backup AD by Jose

Jose
Fri May 07 09:51:22 CDT 2004

The time is OK, despite there is an event ID 29 (NTTP).
So I tried doing the AD , in the OU Domain Controllers it
shows just the server, I do not see a Computer
Configuration.
FYI I am also getting this error
Event ID 2262 and event ID 1000 occur, and users
experience search problems in SharePoint Portal Server
2003
I did a search in microsoft site and it says:
To resolve this problem immediately, contact Microsoft
Product Support Services to obtain the hotfix.


>-----Original Message-----
>net time //sbsservernam /set /yes
>
>servers do not do a lot of things well unless the time
is the same.
>Make sure time zones are the same.
>
>Note from Jeff Middleton regarding some AD tasks.
>
>The operation failed because: The Active Directory
Installation Wizard
>was unable to convert the computer account [SERVERNAME]$
to a domain
>controller account. "Access is denied."
>http://support.microsoft.com/?kbid=250874 and
>http://support.microsoft.com/?kbid=232070
>for explanation and solution.
>
>To resolve this problem, use an account in the
Administrators group,
>or add the appropriate account to the Administrators
group. To grant
>this right to another user or group, set the delegation
privilege on
>the Group Policy object:
>
>1) In the Active Directory Users and Computers snap-
in, edit the
>Default Domain Controllers Policy on the Domain
Controllers
>Organizational Unit.
>2) Double-click Computer Configuration, click
Windows Settings,
>click Security Settings, click Local Policies, and then
click User
>Rights Assignment.
>3) Under Enable Computer and User Accounts to be
trusted for
>Delegation, add the appropriate account or group.
>4) Apply the policy using one of the following
methods:
>5) At a command prompt, type secedit /refreshpolicy
>machine_policy /enforce.
>6) In the Sites and Services snap-in (Dssite.msc),
use the
>Replicate Now feature to force replication from the
domain controller
>on which the policy was changed to the other domain
controllers in the
>domain.
>
>Above info shared by Jeff M regarding another issue
related to your
>task.
>
>"Jose" <ineedtoknow@knowledge.com> wrote:
>
>>I tried to do it with 2 Windows 2003 server and it did
>>not work.
>>After I entered all the logon info, and it started to
>>replicate, it gave me a message that I do not have
enough
>>permission to update the servername$ to Domain
Controller.
>>I entered the Administrator logon information, who is
>>also the Enterprise admin.
>>The same message appeared when I tried in the other
>>server.
>>
>>
>>
>>>-----Original Message-----
>>>Indeed, you can have additional domaincontrollers in a
>>SBS environment.
>>>
>>>--
>>>Regards,
>>>
>>>Marina
>>>Microsoft SBS-MVP
>>>
>>>"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>>>news:961101c43382$3ce4f720$a301280a@phx.gbl...
>>>> So is no problem a member server in a SBS 2003
Domain
>>to
>>>> do set up the role of Domain Controller.
>>>> And then I will have the backup for AD.
>>>>
>>>>
>>>> >-----Original Message-----
>>>> >Have you made one of those memberservers
>>>> domaincontrollers? Have a look in
>>>> >Servermanagement. There are helpfiles that explain
>>>> exactly what you will
>>>> >have to do.
>>>> >
>>>> >--
>>>> >Regards,
>>>> >
>>>> >Marina
>>>> >Microsoft SBS-MVP
>>>> >
>>>> >"Jose" <ineedtoknow@knowledge.com> schreef in
bericht
>>>> >news:782401c4310a$1da89d00$a301280a@phx.gbl...
>>>> >> I have a SBS Premium 2003, in the Domain I have a
>>cou
>>>> ple
>>>> >> other member servers Windows 2003. How can I set
>>one
>>>> of
>>>> >> these as the backup AD server in case SBS goes
>>down?
>>>> >> Thanks
>>>> >
>>>> >
>>>> >.
>>>> >
>>>
>>>
>>>.
>>>
>
>Jim B. SBS MVP
>remove the mvp to send email
>.
>