[clutch]

I just got off the phone from this kind gentleman at MS Product Support with an AD replication/sync issue (that bastard SurfControl company ;( ), and he gave me this list of links that he finds rather useful (and I am sure that myself and others will as well):

Active Directory:

Q260371 Troubleshooting Common Active Directory Issues in Windows 2000

http://support.microsoft.com/support/kb/articles/q260/3/71.asp

Q196464 An Overview of the Active Directory

http://support.microsoft.com/support/kb/articles/q196/4/64.asp

Q216498 Removing Active Directory Data After an Unsuccessful Demotion

http://support.microsoft.com/support/kb/articles/q216/4/98.asp

Q255504 Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Server

http://support.microsoft.com/support/kb/articles/q255/5/04.asp

Q257623 DC's DNS Suffix Does Not Match Domain Name

http://support.microsoft.com/support/kb/articles/q257/6/23.asp



Dcpromo Process:

Q263624 Cannot Remove Active Directory from a Replica Domain Controller

http://support.microsoft.com/support/kb/articles/q263/6/24.asp

Q298713 How to Prevent Overloading of Windows 2000 and Windows XP

http://support.microsoft.com/support/kb/articles/q298/7/13.asp

Q219289 Description of the Netdiag /fix Switch

http://support.microsoft.com/support/kb/articles/q219/2/89.asp

Q238369 Promoting and Demoting Domain Controller to Member Server

http://support.microsoft.com/support/kb/articles/q238/3/69.asp

Q237675 Setting Up the Domain Name System for Active Directory

http://support.microsoft.com/support/kb/articles/q237/6/75.asp

Q241505 SRV Records Missing After Implementing Active Directory and DNS

http://support.microsoft.com/support/kb/articles/q241/5/05.asp

Q248132 How to Recover a Deleted Domain Controller Computer Account

http://support.microsoft.com/support/kb/articles/q248/1/32.asp

Q258101 Dcpromo Does Not Allow All-Numeric Label in a Domain Name

http://support.microsoft.com/support/kb/articles/q258/1/01.asp

Q260362 How to Configure Active Directory on a Home Network

http://support.microsoft.com/support/kb/articles/q260/3/62.asp

Q270915 Active Directory MMC Tools Are Slow to Initialize

http://support.microsoft.com/support/kb/articles/q270/9/15.asp



Active Directory FSMO Roles:

Q255504 Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Server

http://support.microsoft.com/support/kb/articles/q255/5/04.asp Q223787

Q223787 Flexible Single Master Operation Transfer and Seizure Process

http://support.microsoft.com/support/kb/articles/q223/7/87.asp

Q197132 Windows 2000 Active Directory FSMO Roles

http://support.microsoft.com/support/kb/articles/q197/1/32.asp

Q223346 FSMO Placement and Optimization on Windows 2000 Domains

http://support.microsoft.com/support/kb/articles/q223/3/46.asp



Deployment Links:

Setting Up DNS for Active Directory

http://www.microsoft.com/windows2000/library/resources/reskit/samplechapters/cncf/cncf_imp_zzui.asp

Deployment Planning Guide

http://www.microsoft.com/windows2000/library/resources/reskit/dpg/default.asp

Change and Configuration Management Deployment Guide

http://www.microsoft.com/WINDOWS2000/library/resources/reskit/deploy/CCM/default.asp

Troubleshooting Change and Configuration Management

http://www.microsoft.com/WINDOWS2000/library/resources/reskit/samplechapters/dsef/dsef_tbs_xovi.asp

Implementing Common Desktop Management Scenarios

http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicy.asp

Step-by-Step Guide to Setting up Additional Domain Controllers

http://www.microsoft.com/WINDOWS2000/library/planning/activedirectory/domaincntrl.asp

Q238369 - Promoting and Demoting Domain Controller to Member Server

http://support.microsoft.com/support/kb/articles/q238/3/69.asp

Step-by-Step Guide to Remote OS Installation

http://www.microsoft.com/WINDOWS2000/library/planning/management/remotesteps.asp

Automating Windows 2000 Deployments with Sysprep

http://www.microsoft.com/WINDOWS2000/library/planning/incremental/sysprep11.asp

Q216899 - Best Practice Methods for Windows 2000 Domain Controller Setup

http://support.microsoft.com/support/kb/articles/q216/8/99.asp

Q178009 - Renaming a Domain: Process and Side Effects

http://support.microsoft.com/support/kb/articles/q178/0/09.asp

Q260371 - Troubleshooting Common Active Directory Issues in Windows 2000

http://support.microsoft.com/support/kb/articles/q260/3/71.asp

Q241328 - Adding Windows NT 4.0 Domain Controllers to Windows 2000

http://support.microsoft.com/support/kb/articles/q241/3/28.asp

Q172953 - How to Install and Configure Microsoft DNS Server

http://support.microsoft.com/support/kb/articles/q172/9/53.asp

Q216937 - Windows 2000 System Preparation Tool and Answer File Usage

http://support.microsoft.com/support/kb/articles/q216/9/37.asp

Q260871 - How to Set Up ADMT for Windows NT 4.0 to Windows 2000 Migration

http://support.microsoft.com/support/kb/articles/q260/8/71.asp

Q216937 - Windows 2000 System Preparation Tool and Answer File Usage

http://support.microsoft.com/support/kb/articles/q216/9/37.asp



File Replication Service:

Q257338 Troubleshooting Missing SYSVOL and NETLOGON Shares

http://support.microsoft.com/support/kb/articles/q257/3/38.asp

Q221111 Description of FRS Entries in the Registry

http://support.microsoft.com/support/kb/articles/q221/1/11.asp

Q292438 Troubleshooting Journal_Wrap Errors on Sysvol & DFS Replica Sets

http://support.microsoft.com/support/kb/articles/q292/4/38.asp

Q241452 How to Install Distributed File System (Dfs) on Windows 2000

http://support.microsoft.com/support/kb/articles/q241/4/52.asp

Q283133 Error Message: The Specified Domain Either Does Not Exist or...

http://support.microsoft.com/support/kb/articles/q283/1/33.asp



Active Directory Delegation of Control:

Step-by-Step Guide to Using the Delegation of Control Wizard

http://www.microsoft.com/WINDOWS2000/techinfo/planning/activedirectory/delegsteps.asp

Delegating Administration

http://www.microsoft.com/windows2000/en/...ts_delegate.htm

Delegate control of an organizational unit:

http://www.microsoft.com/windows2000/en/...ou_delegate.htm

Q235531 Default Security Concerns in Active Directory Delegation

http://support.microsoft.com/support/kb/articles/q235/5/31.asp

Q294952 How To Delegate the Unlock Account Right

http://support.microsoft.com/support/kb/articles/q294/9/52.asp

Q279723 How to Grant Help Desk the Specific Right to Unlock Locked User

http://support.microsoft.com/support/kb/articles/q279/7/23.asp

Q229873 Delegate Control Wizard Cannot Be Used to Remove Groups or Users

http://support.microsoft.com/support/kb/articles/q229/8/73.asp

Q296999 Min. Permissions Needed for Delegated Admin to Force PW Change

http://support.microsoft.com/support/kb/articles/q296/9/99.asp

Q275715 How to Delegate Administration of Group Policies

http://support.microsoft.com/support/kb/articles/q275/7/15.asp



Active Directory Client:

Active Directory Client Extensions for Windows 95, Windows 98 and Windows NT Workstation 4.0

http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/adextension.asp

Q288358 HOWTO: Install the Active Directory Client Extension

http://support.microsoft.com/support/kb/articles/q288/3/58.asp

Q276472 Directory Services Client Is Not Included with Windows Me

http://support.microsoft.com/support/kb/articles/q276/4/72.asp

Q295166 INFO: Installation of Directory Services Client for Windows NT 4

http://support.microsoft.com/support/kb/articles/q295/1/66.asp

Q281235 DSCLIENT.EXE /Q Command Does Not Run in Quiet Mode

http://support.microsoft.com/support/kb/articles/q281/2/35.asp



DNS:

Q255248 How to Delegate a DNS Namespace to a Child Domain

http://support.microsoft.com/support/kb/articles/q255/2/48.asp

Q291382 Frequently Asked Questions About Windows 2000 DNS

http://support.microsoft.com/support/kb/articles/q291/3/82.asp

Q257623 DC's DNS Suffix Does Not Match Domain Name

http://support.microsoft.com/support/kb/articles/q257/6/23.asp

Q262376 Computer Name Does Not Match the Windows 2000 Domain Name

http://support.microsoft.com/support/kb/articles/q262/3/76.asp

Q269425 List of Bugs Fixed in Windows 2000 Service Pack 1 (2 of 3)

http://support.microsoft.com/support/kb/articles/q269/4/25.asp

Q178169 DNS Records Registered by Windows 2000 Domain Controllers

http://support.microsoft.com/support/kb/articles/q178/1/69.asp

Q200462 DHCP Server Errors 1007, 1008, 7023 & DNS Server Errors 407, 408

http://support.microsoft.com/support/kb/articles/q200/4/62.asp

Q231306 DNS Records with Same Name as Subdomain Are Moved or Missing

http://support.microsoft.com/support/kb/articles/q231/3/06.asp



Trusts:

Q180094 How to Write an LMHOSTS File for Domain Validation

http://support.microsoft.com/support/kb/articles/q180/0/94.asp

Q216393 Resetting Computer Accounts in Windows 2000

http://support.microsoft.com/support/kb/articles/q216/3/93.asp

Q180546 Automating Updates to Local Groups on Member Servers

http://support.microsoft.com/support/kb/articles/q180/5/46.asp



DFS and Profiles:

Q287566 Offline File Caching Option Must Be Disabled on Roaming Profile

http://support.microsoft.com/support/kb/articles/q287/5/66.asp

Q274789 The Folder Redirection Feature Does Not Function

http://support.microsoft.com/support/kb/articles/q274/7/89.asp

Q283902 Files and Folders Reappear After Deletion in a Cached Profile

http://support.microsoft.com/support/kb/articles/q283/9/02.asp

Q242557 Registry Settings for Folder Redirection in Windows 2000

http://support.microsoft.com/support/kb/articles/q242/5/57.asp



Licensing:

Q253239 Err Msg: HTTP 403.15 Forbidden: Client Access Licenses Exceeded

http://support.microsoft.com/support/kb/articles/q253/2/39.asp

Q250776 Windows 2000 Terminal Services Issues in Active Directory

http://support.microsoft.com/support/kb/articles/q250/7/76.asp

Q263657 No Indication NFR Software Is Installed on Windows 2000 Server

http://support.microsoft.com/support/kb/articles/q263/6/57.asp

Q185953 How License Service Keeps Track of License Usage

http://support.microsoft.com/support/kb/articles/q185/9/53.asp



Group Policy:

Q260715 Event ID 1000 and 1202 After Configuring Policies

http://support.microsoft.com/support/kb/articles/q260/7/15.asp



Profiles:

Q185255 How Not to Save Cached Internet Files with Roaming User Profiles

http://support.microsoft.com/support/kb/articles/q185/2/55.asp

Q232692 Folder Redirection Feature in Windows

http://support.microsoft.com/support/kb/articles/q232/6/92.asp

Q245607 Terminal Server Edition Issues in a Domain Environment

http://support.microsoft.com/support/kb/articles/q245/6/07.asp

Q214470 How to Move the Location of a Locally Cached Profile

http://support.microsoft.com/support/kb/articles/q214/4/70.asp



Windows Time Service:

Windows Time Service Whitepaper

http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/security/wintimeserv.asp

Q223184 Registry Entries for the W32Time Service

http://support.microsoft.com/support/kb/articles/q223/1/84.asp

Q224799 Basic Operation of the Windows Time Service

http://support.microsoft.com/support/kb/articles/q224/7/99.asp

Q258059 Synchronize Time on Windows 2000 in Windows NT 4.0 Domain

http://support.microsoft.com/support/kb/articles/q258/0/59.asp

Q232209 Win32 Time Service Informational, Warning, and Error Messages

http://support.microsoft.com/support/kb/articles/q232/2/09.asp

Q257187 RPC Error Messages Returned for Active Directory Replication

http://support.microsoft.com/support/kb/articles/q257/1/87.asp

Q247321 W32tm Command Generates Error Message Running on Windows 2000 DC

http://support.microsoft.com/support/kb/articles/q247/3/21.asp

Q216734 How to Configure an Authoritative Time Server in Windows 2000

http://support.microsoft.com/support/kb/articles/q216/7/34.asp

Q262680 SNTP Time Servers That Are Available on the Internet

http://support.microsoft.com/support/kb/articles/q262/6/80.asp



Certificate Services:

Step-by-Step Guide to Administering Certificate Services

http://www.microsoft.com/windows2000/library/planning/security/adminca.asp

Step-by-Step Guide to Setting Up a Certificate Authority

http://www.microsoft.com/windows2000/library/planning/security/casetupsteps.asp

Step-by-Step Guide to Setting Up Certification Authority Trust for a Domain

http://www.microsoft.com/windows2000/library/planning/security/catruststeps.asp

Step-by-Step Guide to Advanced Certificate Management

http://www.microsoft.com/windows2000/library/planning/security/advcertsteps.asp

Step-by-Step Guide to Public Key-Based Client Authentication in Internet

Explorer

http://www.microsoft.com/windows2000/library/planning/security/pubkeyie.asp

An Introduction to the Windows 2000 Public Key Infrastructure

http://www.microsoft.com/windows2000/library/howitworks/security/pkiintro.asp

Microsoft Windows 2000 Public Key Infrastructure

http://www.microsoft.com/windows2000/library/planning/security/pki.asp

Public Key Interoperability

http://www.microsoft.com/windows2000/library/howitworks/security/w2kpkint.asp



Q258048 Windows 2000 Certificate Services and X.500 Compliant CAs

http://support.microsoft.com/support/kb/articles/q258/0/48.asp

Q228821 Generating a Certificate Request File Using Certificate Wizard

http://support.microsoft.com/support/kb/articles/q228/8/36.asp

Q218445 How to Configure Certificate Server for Use with SSL on IIS

http://support.microsoft.com/support/kb/articles/q218/4/45.asp

Q256099 How to distribute or push a root ca certificates to clients

http://support.microsoft.com/support/kb/articles/q256/0/99.asp

Q231881 How to Install/Uninstall a Public Key Certificate Authority

http://support.microsoft.com/support/kb/articles/q231/8/81.asp

Q246563 Publishing Certificate Revocation Lists to an FTP Location

http://support.microsoft.com/support/kb/articles/q246/5/63.asp

Q232162 Incorrect CRL on Certificates Issued by Certificate Services 2.0

http://support.microsoft.com/support/kb/articles/q232/1/62.asp

Q258727 Web Site Accepts Revoked Certificates

http://support.microsoft.com/support/kb/articles/q258/7/27.asp

Q258048 Windows 2000 Certificate Services and X.500 Compliant CAs

http://support.microsoft.com/support/kb/articles/q258/0/48.asp



Certificate Server (IPSEC related)

Q253498 How to Install a Certificate for Use with IP Security

http://support.microsoft.com/support/kb/articles/q253/4/98.asp

Q247231 Event ID 20111 When Establishing a L2TP/IPSec Connection|

http://support.microsoft.com/support/kb/articles/q247/2/31.asp

Q248750 Description of the IPSec Policy Created for L2TP/IPSec

http://support.microsoft.com/support/kb/articles/q248/7/50.asp

Q249067 How to Configure Cisco IOS for L2TP/IPSec in Windows 2000

http://support.microsoft.com/support/kb/articles/q249/0/67.asp

Q249278 Windows VPN Compatibility with Cisco VPN

http://support.microsoft.com/support/kb/articles/q249/2/78.asp

Q249125 Using Certificates for Windows 2000 and Cisco IOS Interoperation

http://support.microsoft.com/support/kb/articles/q249/1/25.asp

Q254442 L2TP/IPSec Interoperation with Third-Party Manufacturers

http://support.microsoft.com/support/kb/articles/q254/4/42.asp

Q240262 How to Configure a L2TP/IPSec Connection Using a Pre-shared Key

http://support.microsoft.com/support/kb/articles/q240/2/62.asp

Q265112 IPSec and L2TP Implementation in Windows 2000

http://support.microsoft.com/support/kb/articles/q265/1/12.asp

Q252735 How to Configure IPSec Tunneling in Windows 2000

http://support.microsoft.com/support/kb/articles/q252/7/35.asp

Q259335 Basic L2TP/IPSec Troubleshooting in Windows 2000

http://support.microsoft.com/support/kb/articles/q259/3/35.asp



Terminal Services:

Q186434 Slow Network Default Profile Operation

http://support.microsoft.com/support/kb/articles/q186/4/34.asp



Terminal Services Profiles:

Q196284 Controlling Default Behavior for Roaming User Profiles

http://support.microsoft.com/support/kb/articles/q196/2/84.asp

Q261099 Using Usrmgr.exe with Windows 2000 Terminal Services

http://support.microsoft.com/support/kb/articles/q261/0/99.asp

Q274152 Using Group Policy to Delete Cached Copies of Roaming Profiles

http://support.microsoft.com/support/kb/articles/q274/1/52.asp



Terminal Services Licensing:

Microsoft Clearinghouse Phone Number: (888) 571-2048

Knowledgebase Articles:

Q271245 Cannot Revoke Windows 2000 Terminal Services License from Client

http://support.microsoft.com/support/kb/articles/q271/2/45.asp

Q239107 Establishing Preferred Terminal Services License Server

http://support.microsoft.com/support/kb/articles/q239/1/07.asp

Q258045 Terminal Services Licensing Does Not Accept a Valid License Key

http://support.microsoft.com/support/kb/articles/q258/0/45.asp

Q261110 Terminal Services Cannot Find Windows 2000 Licensing Server

http://support.microsoft.com/support/kb/articles/q261/1/10.asp

Q232520 Description of Terminal Services License Server Discovery

http://support.microsoft.com/support/kb/articles/q232/5/20.asp

Q248650 Windows 2000 Evaluation Version and Terminal Services Licensing

http://support.microsoft.com/support/kb/articles/q248/6/50.asp

Q250776 Windows 2000 Terminal Services Issues in Active Directory

http://support.microsoft.com/support/kb/articles/q250/7/76.asp

Web Sites:

Licensing for Terminal Services in Windows 2000 Home

http://www.microsoft.com/windows2000/server/howtobuy/pricing/terminal.asp

Windows 2000 Pricing Information

http://www.microsoft.com/windows2000/server/howtobuy/pricing/pricingwindows.asp#terminal

White Paper:

Microsoft Windows 2000 Terminal Services Licensing

http://www.microsoft.com/windows2000/techinfo/howitworks/terminal/TSLicensing.asp



Network Monitor:

Q148942 How to Capture Network Traffic with Network Monitor

http://support.microsoft.com/support/kb/articles/q158/7/44.asp

[Four and Twenty]

thanks for the links
i have saved them for later reference

lucky for me so far win2k and .net have been easy to figure out for me and i haven't needed any of these type of resorces to get ad and other things going. However the servers on my network are not doing anything really crazy and my network is very small (10 pcs)

[Davros]

Nice set of links, thanks!

[Rhadoo]

Thanks for the list !

I hope I will use those links for information only, not for having real problems...

[Four and Twenty]

Quote:

I hope I will use those links for information only, not for having real problems...

what you don't like problems ;(