Transferring FSMO roles

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ smallbiz
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Questions - installing SBS 2000 in an existing small network with W2K and E2K Ladies/Gentlemen - A new client of mine has ordered and received a nice, new Dell server and 25 users worth of Microsoft SBS 2000 software. They have an existing garage built piece of home brew crap running pirated Windows 2000 and Exchange 2000 Enterprise (!!!!). The goal - to get them off the old, junky, pirate ship to the new, sweet and clean, fully licensed server. Knowing the limitations and quirks of SBS 2000, the question(s) is(are): What is the best path to take for the most seamless transition? Normally, I'd add the new server, promote to DC, add Exchange site, move mailboxes, migrate data, make new server Exchange primary, demote and remove old server, DONE. But... I forsee lots of problems - SBS doesn't like joining a domain. I think Exchange SBS might get pissed being added to an Exchange Enterprise organization... So. Manually recreate everything? Well, that sorta sucks. Compounding this is that the user profiles are stored on the server (so dorky). I really don't want to have to reconfigure every desktop - anyone have a nice, clean path to transition profiles between domains? I'd like to do this with minimal impact to the desktop environment. Migrating them to the new SBS 2000 server in the same domain would allow the same desktop profile to be used. But that's not supposed to work... Any thoughts appreciated. I have a couple clients on SBS but have not needed to do much with them re: migration, and hoped someone who has had migration experience with SBS could share some... Venger Tag: Transferring FSMO roles Tag: 115689
  - 2
    - Exchange, meeting invitation Problem Can anyone help me, please Whe one of the clients sends an invitation to a meeting via outlook/exchange, he selects one participant and press send. The result is that all the members of the global address list including two clients who are deleted receives the invitation. What is wrong and what can I do? Peter Tag: Transferring FSMO roles Tag: 115684
  - 3
    - Lost ability to connect terminal services client Lots of peculiar stuff. Yesterday I had to reset the Linksys router and manually restart the Exchange mailbox and Public Folder stores. Today, I had to manually restart the stores again (the checkbox in their properties setting them not to restart automatically is not, repeat not, checked). Just for good measure I rebooted the machine. When the machine came back up, I couldn't connect my terminal services client. There is nothing in the event log that indicates any obvious problem with either the Exchange server or terminal services, but when I try the connection I get the error message, "The client could not connect to the Terminal Server. The server may be too busy. Please try connecting later." Of course, waiting until later hasn't helped. I found MSKB article 260746, but it dosn't seem to be any help. The IP address of the server resolves just fine. I even reinstalled term. services and created a new connection just out of curiousity. Any help here? I really need term services back and I want to know why these stores keep shutting down. Thanks. Mark Tag: Transferring FSMO roles Tag: 115681
  - 4
    - SBS 2000 Web server When I was following the instructions from www.smallbizserver.net on hosting a public website on our SBS, something "broke" in the process. I removed all the additons hoping to return the server to it's orignal state. Before this, we could review the website both internally and externally using the respective IP addresses but now, the Page Not Found error displays. This even happens with with setting up a new simple text page and running the new site internally. Any words of wisdom to restore the web server functions to at least dispay pages? Thank you. Tag: Transferring FSMO roles Tag: 115678
  - 5
    - POP3 I loaded SP1 for ISA server and now my POP3 vitural server will not start. Application error log has an error of: "An error occurred while starting the microsoft exchange POP3 service. Server instance number 1 failed to start with error Ox2740. Any ideas? Tag: Transferring FSMO roles Tag: 115677
  - 6
    - SBS 2000 + DNS We are having trouble viewing our company website when connecting to the net from the office. The site is hosted externally with our ISP and the site can be accessed from any machine outside of our office. I have been told that i need to ad an entry to the DNS that points to our external website. Is this correct, and if so how do i go about doing it. Thanks Tag: Transferring FSMO roles Tag: 115662
  - 7
    - Setting Up Small Business Server but not as a Domain Controller Is it possible to set up SBS 2000 on a server so that it is not a PDC or BDC? Tag: Transferring FSMO roles Tag: 115639
  - 8
    - Internet access Is it possible to prevent internet access at specific workstations while allowing the users at those workstations to access the internet at other workstations? In other words, can you make internet access machine specific, not user specific? Thanks Tag: Transferring FSMO roles Tag: 115629
  - 9
    - Dropped VPN Connections! My problem is this: I have an office which connects to my SBS2000 server by means of a VPN connection. Every now and again, the VPN connection drops. is there any reason for the OS to drop the connection or must it be connection or hardware related? Regards, Tag: Transferring FSMO roles Tag: 115626
  - 10
    - Unable to view attached .jpg's from within Outlook This question actually pertains to a Win2K server. We are using terminal services sessions to allow users to access their email etc... Yesterday I received a complaint from a user stating that they received an email which included attached .jpg files and that they were unable to open them. When they double click the attachment from within Outlook, an Outlook error box comes up simply stating "The system cannot find the path specified" However, if they drag that attachment out of email and place on their desktop, then double click it, the appropriate application is launched which allows them to view. What might be going on in Outlook that is generating this error? Thanks, Brad Tag: Transferring FSMO roles Tag: 115619
  - 11
    - How to STOP a Print Spooler Message I have a SBS2000 network with a printer attached to an NT Box. Since installing SBS, a print spooler "success" message is sent to the client (that originated the print job) telling them the job was successful when they print from this printer. Is there a way to get rid of this pop up notice? -- Brandon IT Director Office Equipment & Supplies at http://www.presentationsdirect.com Tag: Transferring FSMO roles Tag: 115613
  - 12
    - Exchange Disclaimer I'm running SBS2K. Does anyone know how to add a disclaimer in the form of an attachment to all outgoing mail? Any help would be much appreciated. Pete Tag: Transferring FSMO roles Tag: 115608
  - 13
    - smtp/pop/imap4 dosen't work (E2K)!? Dear all, I have the following: 1- SBS2000 2- W2K Server I've added two accounts to exchange by AD, naji@mydomain.com.lb, and admin@mydomain.com.lb, after that I've configured MSOutlook as POP and when I click on TEST button it seem that POP and SMTP is working fine. but the problem is outlook dosen't receive any email from the exchange so when I send an email to myself this email stay at the Exchange server. if I check the mailbox at exchange I find that it has one email count. Oulook shows no error it checks the exchange and emails download to client. thank you in advance Naji Tag: Transferring FSMO roles Tag: 115601
  - 14
    - Uising OWA to access other user's mailboxes Does OWA allow users to access other mailboxes that they have been given permission to view or manage? If not, is there a way to allow a user who's connecting remotely to login to OWA as another user? -kw Tag: Transferring FSMO roles Tag: 115597
  - 15
    - SBS2000 MSX , all mail forwarded to 1 client Hi, does anybody know if it is possibel to forward all mail to a client. I want that every incomming mail also will be diverted to a special mail box. (this is easy, AD, exchange , forward incomming mail to email adress) BUT I also want to automatic forward the outgoing mail to that same special mail box. does anybody know how to do that? thx Paul Tag: Transferring FSMO roles Tag: 115595
  - 16
    - Spot the typex : should read unexpectedly Tag: Transferring FSMO roles Tag: 115572
  - 17
    - TCP/IP Connection was unrepentantly terminated I'm trying to send/receive emails via my SBS using outlook 2000 and keep getting the message :TCP/IP Connection was unrepentantly terminated contact your lan administrator... I am not using exchange, just a standard internet account using LAN as the connection..ISA is configured to allow smtp & pop3 traffic. Any ideas Tag: Transferring FSMO roles Tag: 115571
  - 18
    - IE - 403 forbidden on first attempt, but refreshes OK Our server is SBS2K sp3 with XP workstations. Internet has been working OK, but recently we have been getting a problem with IE. When IE is first fired up on a workstation we get an error 403 forbidden - ISA server has blocked connection to the specified URL. If we click refresh, the page loads OK and all subsequent activity is fine for that session. If we close and reopen IE the problem repeats. The only thing that has changed on the system is that we set up a group policy to redirect "my documents" to the "company" shared folder and disabled "offline files" on each workstation. Any ideas? Steve Gray Tag: Transferring FSMO roles Tag: 115570
  - 19
    - Fax module I am considering upgrading to SBS and was wondering how the desktop Fax module works. I can see how outgoing faxes would be handled but what about incoming faxes, are they displayed on screen and if so which application runs them? Or is this just an outgoing service such that I would need to retain my fax machine for incoming communication? Tag: Transferring FSMO roles Tag: 115568
  - 20
    - Tape backup software What do people here recommend for tape backup software? I'm figuring on a DLT VS80 system, either a standalone drive or a small library (eg. Dell Powervault). Probably a daily incremental and a weekly full backup, for a small machine shop. Things to back up would include email, drawings, and job orders. Maybe 2-4 tape sets, one per week, with all but one kept off-site. I'd like to see a verify-after-write function. There's nothing worse than losing your hard disk and finding that your backups are trash. I want to be dead certain that the tapes have good data on them. Tag: Transferring FSMO roles Tag: 115566
  - 21
    - XP Slow This is a multi-part message in MIME format. ------=_NextPart_000_000A_01C346C9.2F24FD70 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable We have three computers connected to our SBS network Computer Name: OS TOM Win 98 DICK Win2K HARRY Win XP Pro Logging onto Tom or Dick as user Peter works fine and the speed of data = transfer between the workstations and the server is fine. Log on to Harry as Peter and the speed of data transfer is abysmal. We = have tried removing AV off the machine in case that was the problem but = to no avail. However, if you log onto Harry as the Administrator the speed is as good = as the other workstations! If you log onto Harry as a local machine and then connect to server once = in, the speed is fine. We have tried the same thing with Harry by using other user accounts and = the same problem with speed occurs. This is bizarre! Anybody got any ideas please? Many thanks Peter ------=_NextPart_000_000A_01C346C9.2F24FD70 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2716.2200" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>We have three computers connected to = our SBS=20 network</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Computer=20 Name:   OS<BR>TOM      &nbsp= ;=20             Win=20 98<BR>DICK           =20        =20 Win2K<BR>HARRY        =    =20     Win XP Pro</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Logging onto Tom or Dick as user Peter = works fine=20 and the speed of data transfer between the workstations and the server = is=20 fine.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Log on to Harry as Peter and the speed = of data=20 transfer is abysmal. We have tried removing AV off the machine in case = that was=20 the problem but to no avail.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>However, if you log onto Harry as the = Administrator=20 the speed is as good as the other workstations!</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>If you log onto Harry as a local = machine and then=20 connect to server once in, the speed is fine.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>We have tried the same thing with Harry = by using=20 other user accounts and the same problem with speed occurs.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>This is bizarre! Anybody got any ideas=20 please?</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Many thanks</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Peter</FONT></DIV></BODY></HTML> ------=_NextPart_000_000A_01C346C9.2F24FD70-- Tag: Transferring FSMO roles Tag: 115560
  - 22
    - Disaster Recovery Scenarios? Howdy Wonder if anyone has any suggestions for a disaster recover scenario for a customer of mine. They are running SBS 2000 on a server with ide raid 5, as well as a DDS4 tape drive. They run regular backups but are concerned about a critical failure of the server that might have them down for a period of time. They would like to have a PC that in the event of their server failing could have SBS restored to it in a short space of time as an interim measure until the server is back on line. Any suggestions of the best way to do this? Some of the scenarios that I would like comments or experiences people have had are: 1. Backup up SBS regularly over the network to a file and then restore this backup to the PC in the event of a failure. Problems I see with this are the short file name issue and restoring to new hardware. 2. Using some kind of snapshot program (ghost or similar) regularly to create an image over the network to restore in the event of failure. Again I think restoring to new hardware might be the issue. If anyone has a suggestion of an applications, hardware or methods to do this I would appreciate it. Also any obstacles I may face trying each of my scenarios would be appreciated. Regards Ian Tag: Transferring FSMO roles Tag: 115557
  - 23
    - OT: Critical Trend Micro Service Pack: DOWNLOAD NOW Subject: Critical Trend Micro Service Pack: DOWNLOAD NOW Date: Wed, 9 Jul 2003 15:16:50 -0700 From: "Trend Micro Customer Support Services" <onlinemarketing@trendmicro.rsc03.com> Reply-To: "Trend Micro Customer Support Services" <ausp@support.trendmicro.com> To: sbradcpa@pacbell.net Dear Trend Micro Product User: The Active Update Service Pack is available now at http://www.trendmicro.com/en/support/ausp/affectedproduct.htm Per our June email pre-notification, if you are using certain older Trend Micro products, you must update your software or apply an Active Update Service Pack before October 2003. Failure to act will prevent you from downloading pattern files after #650 and receiving the most up-to-date protection against new computer viruses. To see if your products are affected and to obtain the Service Pack and related deployment instructions, please go to http://www.trendmicro.com/ausp No action is required if the web page shows that your product does not need the Active Update modifications. If your product does require changes, you have two options: update your product to the latest version or apply an Active Update Service Pack. Update Option: Updated versions of the affected products are available now. In addition to the latest Active Update module, these new versions offer enhanced technology for virus detection and scanning. Most also support Trend Micro?s new Enterprise Protection Strategy for improved and proactive management of the outbreak lifecycle. Service Pack Option: Should you elect not to upgrade your products, you must install an Active Update Service Pack, available now. This Service Pack makes minor modifications to the Active Update module of your product to ensure uninterrupted receipt of pattern files. The Service Pack is free for customers who are current with maintenance. Trend Micro is increasing technical support resources during this period. For more information, please go to http://www.trendmicro.com/ausp Trend Micro Incorporated ______________________________________________________________________ This message was sent by Trend Micro using Responsys Interact (TM). If you prefer not to receive future e-mail from Trend Micro: https://trendmicro1.rsc03.net/servlet/optout?mktDBWBElIkHKJiHFiHJILssDgLmE0 To view our permission marketing policy: http://www.rsvp0.net Tag: Transferring FSMO roles Tag: 115550
  - 24
    - Outlook Message Recall a.. The recipient is Outlook. a.. The message has not been moved from the Inbox. a.. The message has not been read. If the receipent has fulfilled all the above conditions but he is in a different network (e.g. company) to me, can the recall be successful? Tag: Transferring FSMO roles Tag: 115535
  - 25
    - Wierd port for SSL One of my co-workers is suffering some ISA woes. A vendor has a ticketing program that starts with http traffic and slips to secure transactions using port 8081. Yes the vendor chose to not use normal ports. At the server is seems to work when you turn of the firewall but does not work when ISA is fully functional. I wonder if the packets start out leaving behind the firewall as port 80 traffic but they try to send things back on another port so it gets rejected. I am more than bit experienced with this kind of ISA so I am open to ideas and education. Workstations do not work even thought the firewall client is loaded. Well I am assuming the firewall client is loaded. Jim B. Tag: Transferring FSMO roles Tag: 115525
- Next
  - 1
    - Host a SSL Website on a member server behind ISA I have been assigned the lovely task of getting this one to work. SBS2K, running exchange, OWA (not by my recomendation), VPN, TS in remote admin mode. Member NT4 server hosts a SSL web site on Internet Services Manager. How can I go about publishing the server without interfereing with the OWA bound to the default web site on the SBS? Tag: Transferring FSMO roles Tag: 115505
  - 2
    - Service PAck 4 now available Can I just install sp4 for windows 2000 - or will Microsoft come out with a new service pack especially for SBS2000? Tag: Transferring FSMO roles Tag: 115501
  - 3
    - OT: Don't lose sight of Security Interesting read.... One of the guys who found quite a few IIS flaws is stepping away from the Security flaw biz, Rain Forest Puppy is his "handle" http://www.wiretrip.net/rfp/txt/evolution.txt "Don't lose sight of security. Security is a state of being, not a state of budget. He with the most firewalls still does not win. Put down that honeypot and keep up to date on your patches. Demand better security from vendors and hold them responsible. Use what you have, and make sure you know how to use it properly and effectively. And above all else, don't abuse or take for granted sources of help and information. Without them, you might find yourself lost or inconvenienced." http://www.wbglinks.net/pages/watchmen/pictures/pic01/rfp04.jpg PCWorld.com - Three Minutes with Rain Forest Puppy: http://www.pcworld.com/news/article/0,aid,63944,00.asp Tag: Transferring FSMO roles Tag: 115499
  - 4
    - Moving a printer I have just started with a company and have only recently had to use SBS. We have a printer HP 4500 connected to the network via CAT5 network cable directly into the wall jack and the power cable plugs into the wall power socket. (There is no parallel connection to the printer). When i look on the win2k SBS this Printer is set up as a local printer along with a shared FAX which is also setup as a local printer in the same manner. I now need to move this printer to a new room and new wall jack. Can i simply move the printer and connect it into the new wall jack? Would this work? If it won't what will i need to do to get it working? Sorry it's proabably a very basic IT question but networking is not my strong point. JJ Tag: Transferring FSMO roles Tag: 115487
  - 5
    - Public Folder to receive mail I need to set up an e-mail box on my SBS2K network that all users could get to and read mail. My thought was to make a public folder and somehow have the specific e-mail delivered there. Does that sound like a reasonable thought? Is this possible and do you know of any articles that would show me how to do such a thing? Thank you. Tag: Transferring FSMO roles Tag: 115469
  - 6
    - Terminal Server Hello there, This is strange but it looks like since I upgraded my client PC to SP4, some strange things started happening (BSOD, sudden shutdown) and at the end I cannot establish connection with my SBS through TS. It worked flawlessly. "Client could not connect to Terminal server. The server may be too busy. Please try again later." I did not change anything on the server and I assume it should be OK. Do you have any clue how to fix this problem? Thanks, Tag: Transferring FSMO roles Tag: 115460
  - 7
    - Upgrading a Novell network to SBS 2000 I am going to see a prospect next week about converting their Novell network over to Windows. They are using Novell 5 and Groupwise. I would like to suggest SBS 2000 to them with SA to upgrade to SBS 2003. I am wondering what is the best route to go: Install the SBS server and SBS clients on all the workstations and then use Gateway Service for Netware to connect the Novell server to the SBS network? The Novell server will have data that will have to be pulled over. Also, e-mail is another issue. How to we export or save all the Groupwise e-mail so it can be imported into the Exchange mailboxes. I am open to any suggestions or advise because I have never mixed the two, TIA Tag: Transferring FSMO roles Tag: 115448
  - 8
    - ISA Reports - How to view Once an ISA report is generated what s/w do u need to view/print this report. David Hellewell Tag: Transferring FSMO roles Tag: 115446
  - 9
    - Sql server question How do I stop sql server from listening on the external nic? Eventid :17055 19013: SQL server listening 192.168.0.2 :1433 external "I want to stop this one" SQL server listening 192.168.33.2 : 1433 internal SQL server listening 127.0.0.1 : 1433 normal Thank you -- Tag: Transferring FSMO roles Tag: 115438
  - 10
    - SBS connection woes New sbs 2000 box, can't get the second nic to even recognize the cable when I connect to T1 router. Cable is fine, nic lights up fine when I connect it to hub. Where is my next area to look? Intel MB with Dual Lan Using Gigabit to Lan, 10/100 to T1 router. Bob Tag: Transferring FSMO roles Tag: 115417
  - 11
    - Can't connect AD to DNS server on the same server Hi all, I am receiving a 0X80040e37 error when I fire up AD. I have just reinstalled AD and DNS after desinstalling DNS. Is it a reinstall issue/deinstall issue. I have seen this problem before, but don't remember the fix. I am on Server 2000. Thanks Tag: Transferring FSMO roles Tag: 115411
  - 12
    - Roaming profiles and redirection. Hi, I am currently using roming profiles and was wondering if I was to keep the roaming profiles as there are users that need to work on mult computers ie outlook. If I setup the my docu to folder redir. will it cancel out the roaming profiles from copying the my documents folder back and forth. Or is there a way to completely kill roaming profiles and altogether and still be able to have user setting carry from computer to computer.... Thanks Eddie Tag: Transferring FSMO roles Tag: 115410
  - 13
    - SBS internet connection Replacing an SBS server (functionally ok) with a much faster one. I've been through this nightmare before, installing SBS on a muli-homed machine. It won't even recognize the cable being plugged in on the nic to connect to the T1 line router. I know the nic card works, because if I reverse the connections the "cable unplugged" nag goes away. I have all the adapter setings just as they were on the old computer, and I'm using the connection right now on a new computer not connected to the LAN to send this message. I think I have something misconfigured in ISA, my hunch is that it's blocking access. Need help urgently, I'm at my clients branch location in another state and have only a couple days to replace the server and most of the workstations. Bob Tag: Transferring FSMO roles Tag: 115403
  - 14
    - **03-025 Flaw in Windows Message Handling through Utility Manager Could Title: Flaw in Windows Message Handling through Utility Manager Could Enable Privilege Elevation (822679) Date: July 09, 2003 Software: Microsoft Windows 2000 Impact: Privilege Escalation Maximum Severity Rating: Important Bulletin: MS03-025 The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-025 What Is It? The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-025 which concerns a vulnerability in Microsoft Windows 2000. Customers are advised to review the information in the bulletin and test and deploy the patch in their environments, if applicable. More information is now available at http://www.microsoft.com/technet/security/bulletin/MS03-025.asp If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. Tag: Transferring FSMO roles Tag: 115399
  - 15
    - **03-024Buffer Overrun in Windows Could Lead to Data Corruption Title: Buffer Overrun in Windows Could Lead to Data Corruption (817606) Date: July 09, 2003 Software: Microsoft Windows NT Server 4.0; Microsoft Windows NT Server 4.0;Terminal Server Edition; Microsoft Windows 2000;Windows XP Professional Impact: Allow an attacker to execute code of their choice Maximum Severity Rating: IMPORTANT Bulletin: MS03-024 The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-024 What Is It? The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-024 which concerns a vulnerability in Windows. Customers are advised to review the information in the bulletin and test and deploy the patch in their environments, if applicable. More information is now available at http://www.microsoft.com/technet/security/bulletin/MS03-024.asp If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. Tag: Transferring FSMO roles Tag: 115398
  - 16
    - SP4 install I have installed SP4 for W2K and now my print spooler services terminates unexpectedly. I have exchange SP3 running. Has anyone else run into this problem? Beware of the SP4 "HOT FIX"! Tag: Transferring FSMO roles Tag: 115396
  - 17
    - ** 03-023 Buffer Overrun in HTML [It's Wednesday Patch day] - - --------------------------------------------------------------- Title: Buffer Overrun In HTML Converter Could Allow Code Execution (823559) Date: 09 July 2003 Software: Microsoft(r) Windows (r) 98 Microsoft Windows 98 Second Edition Microsoft Windows Me Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Terminal Services Edition Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Impact: Allow an attacker to execute code of their choice Max Risk: Critical Bulletin: MS03-023 Microsoft encourages customers to review the Security Bulletins at: http://www.microsoft.com/technet/security/bulletin/MS03-023.asp http://www.microsoft.com/security/security_bulletins/ms03-023.asp - - --------------------------------------------------------------- Issue: ====== All versions of Microsoft Windows contain support for file conversion within the operating system. This functionality allows users of Microsoft Windows to convert file formats from one to another. In particular, Microsoft Windows contains support for HTML conversion within the operating system. This functionality allows users to view, import, or save files as HTML. There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. This flaw causes a security vulnerability to exist. A specially crafted request to the HTML converter could cause the converter to fail in such a way that it could execute code in the context of the currently logged-in user. Because this functionality is used by Internet Explorer, an attacker could craft a specially formed Web page or HTML e-mail that would cause the HTML converter to run arbitrary code on a user's system. A user visiting an attacker's Web site could allow the attacker to exploit the vulnerability without any other user action. To exploit this vulnerability, the attacker would have to create a specially-formed HTML e-mail and send it to the user. Alternatively, an attacker would have to host a malicious Web site that contains a Web page designed to exploit this vulnerability. The attacker would then have to persuade a user to visit that site. Mitigating factors: ==================== - By default, Internet Explorer on Windows Server 2003 runs in Enhanced Security Configuration. This default configuration of Internet Explorer blocks automatic exploitation of this attack. If Internet Explorer Enhanced Security Configuration has been disabled, the protections put in place that prevent this vulnerability from being automatically exploited would be removed. - In the Web-based attack scenario, the attacker would have to host a Web site that contained a Web page used to exploit this vulnerability. An attacker would have no way to force users to visit a malicious Web site outside the HTML e-mail vector. Instead, the attacker would need to lure them there, typically by getting them to click a link that would take them to the attacker's site. - Exploiting the vulnerability would allow the attacker only the same privileges as the user. Users whose accounts are configured to have few privileges on the system would be at less risk than ones who operate with administrative privileges. Risk Rating: ============ Critical Patch Availability: =================== - A patch is available to fix this vulnerability. Please read the Security Bulletins at http://www.microsoft.com/technet/security/bulletin/ms03-023.asp http://www.microsoft.com/security/security_bulletins/ms03-023.asp for information on obtaining this patch. Tag: Transferring FSMO roles Tag: 115395
  - 18
    - differences between SBS2000 and it's individual components... Greetings, A small business client of mine is purchasing a new properly management package to replace their old DOS based package. The new package is web based and runs on Win2k, IIS, SQL Server 2000 and Exchange 2000. The small business client currently runs an old Novell server and about 6 older Win95 and 98. The vendor of the new software made recommendation regarding the new server (Dell 2x Xeon, 2GB RAM, Raid 5) and also recommended the purchase of individual packages of Windows 2000, Exchange 2000, and SQL Server 2000 and the appropriate numer of CAL's for each. The vendor also stated that the backup program shipped with Win2k Server is more than adequate to back up this server properly. I came back with the recommendation that they consider the purchase and use of SBS2000 instead of the individual components. Purchasing SBS2000 would save about $3000 over the individual components so it's not a trivial sum. I also recommended the purchase of a third party server backup package (Backup Exec, Arcserve, etc.) to take care of the system backup needs. The vendor responded that SBS2000 wasn't the same as the individual components and that they've had lot of problems when using SBS2000, but could not provide specifics about these problems when asked. The vendor also stated that the level of support from MS was different and inadequate for the SBS products when compared to the individual components so that was another reason to not use SBS2000. The vendor also stated that they would allow the use of SBS2000, but would charge an additional 8-16 hours of install labor if SBS2000 was used. As a seasoned veteran of the consulting and small business technology support profession, I know what my feelings are towards what this vendor has to say. I'm interested in hearing from anyone who cares to comment regarding this vendors recommendations. Tag: Transferring FSMO roles Tag: 115392
  - 19
    - Please keep away from Symantec corporate 8.1 Hi all, Had a very bad experience with the latest Symantec Corporate Multi-tier version 8.1. You need to register it on Symantec site and they are supposed to send you a license file by e-mail which permits you to run liveupdate, I'm still waiting for the license file after 8 hours - the symantec support is pathetic (here in Europe). The problem is that even if you manually update to the latest virus pattern files, Symantec keeps on reverting to original pattern file i.e. 23/03/2003 so the server and clients are not fully protected. If tomorrow I don't get the license file, I'll revert back to old version and probably order Trend. If anybody is thinking of buying one please be aware. IK . Tag: Transferring FSMO roles Tag: 115390
  - 20
    - POP3 and Exchange Hi All Are there any specific issues I should be aware of using POP3 for incoming mail on our SBS2k Server. Are their any disadvantages in using POP3 instead of SMTP. Does POP3 make us any more likely to receive junk mail or have any other security implications. Regards ........ Fred Tag: Transferring FSMO roles Tag: 115389
  - 21
    - Remote connection The only remote connection that can currently connect onto my SBS from an external location is one using the administrator account. When another user trys to connect their access is denied. Their account has had the appropriate changes made to it (i think) but do i also need to change something within the server (i.e. a list of useres that are allowd to connect remotley). Help Thanks Tag: Transferring FSMO roles Tag: 115373
  - 22
    - VPN and SBS2000 I need to impliment VPN on the server so clients can access the server remotely (from Home) through VPN. Where can I get help on this issue on how to accomplish this project. YOur help will be appreciated. kiki@soservice.com Tag: Transferring FSMO roles Tag: 115366
  - 23
    - RAS users passwords keep going invalid We have several outworkers who have laptops, and who can connect to our network in the usual way when they come into the office, and they can do so without any difficulty. However, if they try and use RAS to dial into the server, their passwords become invalid,and they can't log on. Once their passwords have been reset on the server, they can RAS in again. Their accounts are set up as 'passwords never expire'. Does anybody know why their passwords keep getting invalidated, and how to stop it? Thanks Tag: Transferring FSMO roles Tag: 115356
  - 24
    - SBS default install was an open relay until I removed the SMTP Connector All settings were as specified by TechNet on both the Virtual Server and Connector. The relay was testing as open until I removed the connector. Has anyone run in to this? If so, what could be the problem? I used the ICW to set up the server's connection. Tag: Transferring FSMO roles Tag: 115355
  - 25
    - upgrade nt4 to sbs 2k Is it possible to upgrade an NT4 server to SBS 2k? Can you point me to any documentation to perform this or to move the current NT4 server to SBS 2k? The reason is to use the added components of SBS, like exchange. Tag: Transferring FSMO roles Tag: 115354

I have a small windows 2000 domain with 2 domain
controllers. The first created domain controller has DNS,
DHCP, and WINS for older clients. The second domain
controller is primarily the fileserver.

I want to retire the 1st domain controller. I read in the
help pages and the knowledge base that I can transfer the
Flexible Single Master Operations roles to my 2nd domain
controller.

Do I need to do anything special with the machine that I'm
transferring the roles to? Do I need to pre-configure and
start DNS, DHCP, WINS on domain controller #2 or does the
transfer process do the configuration for me? Do I need to
move particular data over from one machine to the other?
Note that this is a transfer-- both machines will be live
until machine two is ready to take over.

Sorry for the naive question-- if I had a few extra
computers, I would just try this out...

Thank you.

Top

Re: Transferring FSMO roles by Mark

Mark
Thu Jul 10 19:13:25 CDT 2003

dcpromo the 2nd DC, make it a GC, demote the first and it will transfer
roles for you.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com

"Matt Easton" <matthew@sublunar.com> wrote in message
news:01fa01c3471d$8502e910$a501280a@phx.gbl...
> I have a small windows 2000 domain with 2 domain
> controllers. The first created domain controller has DNS,
> DHCP, and WINS for older clients. The second domain
> controller is primarily the fileserver.
>
> I want to retire the 1st domain controller. I read in the
> help pages and the knowledge base that I can transfer the
> Flexible Single Master Operations roles to my 2nd domain
> controller.
>
> Do I need to do anything special with the machine that I'm
> transferring the roles to? Do I need to pre-configure and
> start DNS, DHCP, WINS on domain controller #2 or does the
> transfer process do the configuration for me? Do I need to
> move particular data over from one machine to the other?
> Note that this is a transfer-- both machines will be live
> until machine two is ready to take over.
>
> Sorry for the naive question-- if I had a few extra
> computers, I would just try this out...
>
>
> Thank you.

Top