Difference betwen groups in the Builtin container and Domain Local groups

Group sAMAccountType groupType systemFlags isCriticalSystemObject —————————————————————————— Built-in 536870912 -2147483643 -1946157056 Yes DL       536870912 -2147483644 <Not Set> <Not Set>The groups in the Builtin container may look like ordinary Domain Local groups, but they are not. In Windows Server 2003 Active Directory they are listed as Builtin Local. These groups cannot be used on other machines in …

Exchange group relationships in a multi-domain forest

In a multi-domain forest with Exchange 2000/2003 installed there are some special group relationships. Each domain for which DomainPrep has been run, has the following Exchange related groups: Exchange Domain Servers (Global Group) Exchange Enterprise Servers (Domain Local Group) Exchange Enterprise Servers Purpose: Group all Exchange servers in a specific Enterprise (organization/forest) This group has …

Logging on through Terminal Services on a Windows Server 2003 Domain Controller

I work extensively with multi-domain forests, usually in a configuration with an empty root domain and several child domains that host users and computers etc. The other day I was trying to log on to a newly added Domain Controller in a child domain. I was going to prepare the domain for Exchange so I …

How to remove Event Logs from Event Viewer

The Event Viewer management console has several categories depending on the roles of a server. All systems running Windows have Application, Security and System logs, or categories. These logs are represented by .evt files on disk, typically located in the %SystemRoot%system32config directory. When a system loses a role, eg. it is demoted from Domain Controller …