Posts

Showing posts from March, 2010

Creating Bulk Users

hi please help. i have tons of users create , want import them using csv on powershell, keep getting errors. bulk script , error: script $objou=[adsi]"ldap://ou=staff,ou=stratorg,dc=workforcegroup,dc=com"  $datasource=import-csv "stratorg.csv"  foreach($datarecord in $datasource) {  $cn=$datarecord.givenname + " " + $datarecord.surname  $samaccountname=$datarecord.givenname + "." + $datarecord.surname  $givenname=$datarecord.givenname  $sn=$datarecord.surname  $samaccountname=$samaccountname.tolower()  $displayname=$datarecord.displayname  $userprincipalname=$samaccountname + "@workforcegroup.com"  $objuser=$objou.create("user","cn="+$cn)  $objuser.put("samaccountname",$samaccountname)  $objuser.put("userprincipalname",$userprincipalname)  $objuser.put("displayname...

Import-csv to SQL

   i looking @ different scripts loaded csv files sql. found script , changed parameters to load delimited file local server. how can script changed write records that's unable load exception log file, continue load rest of file. next can make sure only load sql schema allows(if it's field in sql defined nvarchar(8) , csv has 10 characters it truncates on load 8 characters). script errors saying ""received invalid column length bcp client colid 2". maybe case logs error continues load other records. # database variables $sqlserver = "(local)" $database = "sales" $table = "code_mstr" # csv variables $csvfile = "c:\codemstr.csv" $csvdelimiter = "|" $firstrowcolumnnames = $false $i = 0 ################### no need modify below ################### write-host "script started..." $elapsed = [system.diagnostics.stopwatch]::startnew() [void][reflection.assembly]::loadwithp...

When we re-name computers in our domain they do not reflect the new name in AD Users and Computers

when re-name computers in our domain not reflect new name in ad users , computers.  for example, have computer named rigid.  we rename 112rigid3.  we in ad users , computers under computer accounts list , computer still shows rigid.  when double click on computer account show 112rigid3 under dns name, under the list of computer accounts rigid still.   i tried in test environment , worked (i.e. name, samaccountname , dns name got updated) , computer displayed in ad users , computer snapin. used "domain admin" credentials rename computer. what credentials did use? Windows Server  >  Directory Services

KB3034344 failed to install with error 80073AA2 after restart

Image
the update seems install correctly after computer restarted error message. tried several times... hello, and question is? best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog: http://blogs.msmvps.com/mweber disclaimer: posting provided no warranties or guarantees , confers no rights. twitter:   Windows Server  >  Windows Server General Forum

Do I need to cleanup metadata?

we had dc thats been offline 6 months or virtual box.  dc still exisits in ad , dns etc never held fsmo roles.  we going recreate domain controller, orginal has been deleted esx host. need cleanup metadata first or can create server same name , ip , dcpromo it? cheers simon hello, yes, see here details http://msmvps.com/blogs/mweber/archive/2010/05/16/active-directory-metadata-cleanup.aspx additional check dns zones , zone properties, name server tab. ad sites , services must controlled dc listed there is/must removed. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Directory Services ...

Windows 2012 Server USER GPO apply on Computers

hello! i want deploy user configuration gpo's such drive maps, shortcuts, registry settings, printers etc. on computers wich not have user in domain, computer account. is possible? if user not member of domain, no user gpos apply. true loopback enabled - non domain user cannot authenticate, fail. martin no not evil, if know doing: or bad gpos? , if bothers me - coke bottle design refreshment :)) restore forum design - user defined cascading style sheet! Windows Server  >  Group Policy

Insure Terminal Services / Insufficient terminal Services / remote Terminal Services, RDP Server ....

Image
hi, i have 2 windows 2012 servers assessed security audit firm , outlined below risks (low) server --  running sftp server ( https://www.bitvise.com/ssh-server ) server b -- installed sql 2012 database, reporting service server import data server b sql database via vb6 program some windows 7 workstations use https://serverb/report.aspx view sql report server b as don't need rdp access these 2 servers, can uninstall terminal server security risk fixed on item 2,3,4,5... ?? please further advise ... in advance ...  hi, as don't need rdp access these 2 servers, can uninstall terminal server security risk fixed on item 2,3,4,5... ?? as long no 1 need terminal services installed on 2 servers, can uninstall terminal services. otherwise, suggest enable nla , using certificates enhance communication security between terminal servers , clients. regarding security risk no. 5, not specific terminal services, need disable outdated versions of ssl/t...

Publishing Directory (LDAP) via Webpage

hello. 1 of deficiencies having trouble finding solution is, out of box solution read contents of ldap tree , publish selected information (employee directory) website. ideally, being able suppress accounts list (eg. if test in first name), being able export data csv , such hugely beneficial well. is there out of box solutions reasonably priced folks can suggest? thanks! ed gray ed- have @ ithicos tools - http://www.ithicos.com/ thanks, brian consulting  |  blog  |  ad book Windows Server  >  Directory Services

PING: transmit failed. error code 1231.

i have hyperv environment set on laptop. within hyperv's virtual network manager, have created 3 network connections, 1 external, 1 internal no vlan id, , internal vlan id = 2. i have vm network adapter set external connector. (i've tried internal connectors, too). if ping ip, result: ping: transmit failed, error code 1231. host networking configuration lan connection * microsoft virtual network switch protocol * internet protocol version 4 (tcp/ipv4) on sharing tab * allow other network users connect... connection: local area connection 3  (local area connection 3 virtual adapter external connector.) i've tried sharing unchecked. what missing? thanks! david sharepoint developer in nutshell - have broken virtual network. when using external virtual network - not assign ip physical nic (in network connections). here happens. when external virtual network created - hyper-v inserts virtual switch in between physical nic , parent partition.  parent partition given new virtua...

Acceso remoto a servidores

buenas tengo tres servidores en la red. los cuales uno hace la funcion de dc, ts, fw. en mi dc, tengo instalado un servicio de ca para que funcione junto conel ts y entregue la trusted ca mis usuarios de la red. en el ts, esta instalado el ts remote desktop y la aprte web del mismo. ahora desde un tiempo para aca no puedo acceder mi dc via escritorio remoto y no se por que la maquina desde donde lotento hacer pertenece al dominio, en el firewall del dc esta habilitado el escritorio remoto, igualmente esto aplica para el servidor de firewall (isa) en este servidor tambien esta configurada la regla de acceso remoto interno. la conexio remota al ts esta habilitada y este si puedo conectarme remotamente sin problemas. que se debera este comportamiento. saludos hola, algún error cuando intentas conectarte? la conexión la haces internamente o desde fuera de la red? saludos, marc microsoft certified system administrator 2003 microsoft certified system engineer 2003...

How to move Previous version snapshots to another volume

hi there i have several shared folders on 1 of our server 2012 machine previous versions enabled.  previous version vss information stored on same drive shared folders located, can move location of snapshots drive while maintaining previous snapshots? anybody know how this? hi, can add shadow copy storage association specified volume , store shadow copy volume.  run command below turn on shadow copy storage space on c: volume, volume d used storage , maximum size storage space 900 mb. vssadmin add shadowstorage /for=c: /on=d: /maxsize=900mb more detailed information, please refer article below: vssadmin add shadowstorage https://technet.microsoft.com/en-us/library/cc788051.aspx best regards, mandy please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server ...

Assigning printers via Group Policy

hi, up until have added , removed printers via login scripts (vbscript), doesn't work expected. looking @ deploying printers using gpo. have around 90 shared printers on 1 2008 r2 server. so, create new group policy, assign printer , link ou. worked realise there doesn't appear way set printer default? surely isn't so, , missing step? also, there way remove printers via gpo? i appreciate advice on matter. tia neil   hi neil, try using group policy preferences , set option default printer. check out link:  http://blogs.technet.com/b/grouppolicy/archive/2009/06/24/gp-preferences-set-a-default-printer.aspx hope helps. ;) every second counts..make use of it. Windows Server  >  Print/Fax ...

Shadow Copy Windows 2012

hi gurus, possible export shadow copies external drive? thanks. :) every second counts..make use of it. never mind got it: following examples show how the  wbadmin start backup  command can used in different backup scenarios: scenario #1 create backup of volumes e:, d:\mountpoint, , \\?\volume{cc566d14-4410-11d9-9d93-806e6f6e6963} save backup volume f: wbadmin start backup -backuptarget:f: -include:e:,d:\mountpoint,\\?\volume{cc566d14-44a0-11d9-9d93-806e6f6e6963}\ from link:  http://technet.microsoft.com/en-us/library/cc742083(v=ws.10).aspx every second counts..make use of it. Windows Server  >  Windows Server 2012 General

zip IIS log files

have folder number of iis logs. zip , archive iis logs when zip , archive, not want store in 1 zip folder. matter of fact, create 1 zip folder per log , want folder have same basename log file. trying use function achieve want: function add-zip{ param($source, $destination) $name = get-childitem $source | select-object basename foreach($obj in $name) { add-type -assembly system.io.compression.filesystem $compressionlevel = [system.io.compression.compressionlevel]::optimal $zipfilename = $destination + "\" + $obj.basename + ".zip" [system.io.compression.zipfile]::createfromdirectory("$source\$name", $zipfilename, $compressionlevel, $false) } } using function, able zip folders have same name iis logs themselves. however, zip files present @ source folder got copied inside every zip folder. how make sure every zip folder gets 1 log file? appreciate help. thanks here how create single file zip. ...

Changed IP of guests, now not working

i changed ip of 4 guest machines in preparation moving primary hyper v server brand office.  turned on server , none of guests can see network.   the primary server can.  server has 4 nic's.  configured hyper v - local area connection 1 2 guests lac 2 1 guest lac 3 1 guest lac4 i changed ip inside os of each guest, not on hyper v. i notice hyper v has 3 virtual adapters set dhcp , getting leases new office, right?  didn't pay attention adapters on hyper v server when built it, because worked. so example, lac 4 on hyper v machine getting ip of 192.168.75.51 (the dhcp scope there 75.50- 75.150 and in server using lac 4, programmed use 192.168.75.14, static , inside same /24 route , should work, can anywhere.   what happened after re-ip ing guests machines , host server, then sending host server down new office, networking setup didn't work.   it straight forward... 192.168.75.x /24 host .11 guest .4 guest .12 gues...

How to enable traffic between VPN clients in Windows Server 2012 R2?

hello,  i installed remote access role vpn. ipv4 router enabled: http://snag.gy/uamy2.jpg vpn clients should use static ip pool: http://snag.gy/rejkb.jpg one vpn user configured have static ip: http://snag.gy/twwq0.jpg vpn server uses windows authentication , windows accounting. with setup, vpn clients can connect server, ip addresses , can see server via server's vpn ip. server can connect vpn clients (using client's vpn ips). vpn clients can't communicate each other. for example, vpn server has ip 192.168.99.5 vpn client 1 - 192.168.99.6 vpn client 2 - 192.168.99.7 i able ping 192.168.99.5 both clients, , able ping 192.168.99.6 and 192.168.99.7 server via remote desktop. not able ping 192.168.99.7 client 1 and 192.168.99.6 client 2. if trace route from 192.168.99.6 to 192.168.99.7 - can see packets goes server (192.168.99.5) , next hop - request timeout. what else should configure allow network traffic be...

0xc00002e2 - Virtualized domain controller does not start after storage lost connection to host

Image
hello, we have host (windows server 2012) , storage attached via iscsi. yesterday host lost connection storage couple of seconds. after this, found domain controller vm turned off (which windows server 2012). now, when try start it, blue screen, 0xc00002e2 error. i red articles on how recover error, problem if try start in dsrm, enter admin password , the screen turns black , nothing happens more. now, can access command prompt window. also, able copy vhdx pc , mount it. can see files in it. is there way restore dc? p.s. dc in organization. many thanks, adrian yes, able see disk files. here result of inspect of dc01.vhdx file: i cannot restart host right now, there other vms cannot stopped moment. couple of hours later. Windows Server  >  Hyper-V ...

Cannot create the C:\Windows\System32\drivers\etc\hosts file. MISSING OR SPELLED WRONG

cannot create c:\windows\system32\drivers\etc\hosts file. make sure path , file name correct. have tried start , programs,accessories =, cmd, right click riun admin please hep f possible have crucial files needed school hii queen could pls following below steps 1. copy host file "c:\windows\system32\drivers\etc\hosts " to  desktop. 2. open host file on desktop , save after edit process. 3. copy host file desktop "c:\windows\system32\drivers\etc\hosts " have nice day. ersin can - tat mcse - private cloud - vcp 5 my blog , my contact Windows Server  >  Windows Server 2012 General

Problem with DHCP server Windows 2012 R2

hi, i have dhcp cluster server under windows 2012 r2. both servers domain controllers. there 1 scope, clustered in load balance mode @ 50:50. lease time ips in scope configured 40 days. max client lead time configured 960 hours, correspond 40 days. client machines, renoves ip's each day , when occurs, lose conenctions have established before renewal. if dhcp console, example, computer appeared yesterday lease valid till 16th october @ 17:30 (after making ipconfig /release ipconfig /renew yesterday @ 17:30). today, see computer ip in dhcp console leased ip valid until 17th october @ 8:38, today haven't make ipconfig renew release. this problem begun appear @ time migrate 'normal' dhcp under windows 2003 clustered one. @ begining, max client lead time setup default 1 hour, clients renewed ip each hour, changed same time scope lease time. i know why happening, , how can workaround it, because users complain when lose connections, stoping work. thank you ...

Server 2010 Startup and Bluetooth

Image
i installed server 2012 , when run msconfig disable startup programs it's telling me, startup items not enabled on system, i tried the task manager it's not there either, i need know know how enable that; , cannot bluetooth dongles work, tried installing drivers none work. thanks help. edward gonsalves hi, please make sure bluetooth devices full compatible windows server 2012 , reinstall driver hardware vendor. regards, arthur li technet community support Windows Server  >  Windows Server 2012 General

password outlook 2010 not working after changing domain password

we have new domaincontroller (windows server 2010) , rds-server/windows 10 desktops. after changed our login passwords domair, outlook 2010 keeps asking password after login. when enter password works fine, after logging out , logging in again have enter password again. know how solve problem? maybe locally better whole domain? i advise check dcs healthy using dcdiag , ad replication works fine using repadmin . have created following troubleshooting guide can fix ad replication issues: http://www.ahmedmalek.com/web/fr/articles.asp?artid=23 this posting provided no warranties or guarantees , , confers no rights. ahmed malek my website link my linkedin profile my mvp profile Windows Server  >  Group Policy ...

Where is the Terminal Services Configuration?

when access server remotely want keep it's default printer, , not switch laptops default printer.  i've searched net how this, , every page says need access terminal services configuration, or follow " computer config | policies |admin templates | windows components | terminal services | terminal server | printer redirection: ".  i have absolutely no idea how terminal services configuration or "computer config".  when click start , hover on administrative tools, there not option starting terminal.  can please explain me how fix problem windows server 2008???  thank you! terminal services configuration: start-menu, administrative templates, remote desktop services, remote desktop session host configuration or follow " computer config | policies |admin templates | windows components | terminal services | terminal server | printer redirection: ": open group policy management or write gpmc.msc in search. create policy , ...

Hyper V Server R2 Disk Management Issues

hello everyone i have real pain in ____ problem testing hyper v server r2 prior implimenting school , cannot manage disk management via mmc. unable connect virtual disk service rpc server unavailable virtual disk service enabled. can view event viewer , other items need access disk managment going using software based raid configure raid sets. have had no problems test machine when running full version of server 2008 r2 hyper v role enabled. i have in event viewer. 'hypervisor' driver required virtual machine management service not installed or disabled. check settings or try reinstalling hyper-v role. i have disabled firewall on hyper v server , client connecting per documentation still no joy. many thanks hi, please note, try disable firewall on both machines or run command below on both machines test, not hyper-v server. netsh advfirewall firewall set rule group="remote volume management" new enable=yes thanks. this posting provided "as is" no war...

WMI Script

i trying shut down windows 2008 server remotely using wmi script , domain admin account. this fails. if run same script built-in administrator account works every time.   i have tried adding domain admin account the com security access , launch permissions,  disabled simple file sharing allowed incoming wmi connection even turned off firewall question how can i get script run under domain admin account successfully?  thank you hi,   i able script work in environment between dcs:   http://www.freevbcode.com/showcode.asp?id=4889   it calls same shutdown method documented here:   http://msdn.microsoft.com/en-us/library/aa393627%28vs.85%29.aspx   in dcom settings on server, looking @ windows management , instrumentation   none of users/groups had explicit deny set, of these explicitly allowed permissions.   abbreviations:   ll - local launch rl - remote launch la - ...

How to clone treenode?

how duplicate/clone treenode another? i have build treenode actice directory ou structure $treenode1 variable. want to clone $treenode2 variable not know how. cloning show-stopped right now. hi, i have not clear treenode mean, please share code here , explain more details? do mean “new-object windows.forms.treenode”?  if so, hope below links helpful: generate tree nodes in powershell on fly http://msdn.microsoft.com/en-us/library/system.windows.forms.treenode(v=vs.110).aspx in additon, scripting please post in official scripting guys forum , msdn forum: https://social.technet.microsoft.com/forums/scriptcenter/en-us/home?forum=itcg hope helps. technet subscriber support if are technet subscription user , have feedback on our support quality, please send feedback here . regards, yan li Windows Server  >  ...

DFS on Server 2003 R2 Replication issues

hello everyone, i have server in , server in mexico.  have dfs share between them used house engineering data needs used @ both locations.  there large files being replicated (i don't think issue). the main issue having files not replicating longer.  created test file , let sit several days , did not replicate.  primary server has 30,995 files in frs-staging folder while mexico server has 0 files in respective folder. i had set secondary share on dfs shares because if mapped dfs share access painfully slow.  once secondary share created access increased dramatically. the other nugget of information can think share if access dfs share via new drive map see more files if view network share directly. hello version of active directory using? check make sure active directory replication working running repadmin /showreps , errors.  make sure dfs replication configuration working..try doing test replication within location , see if works or experien...

ISA 2006 Proxy Failover

hello, have isa 2006 ent. running proxy , have installed array member. configure second server failover , not load balanced because filter web traffic on first box , feel acceptable lose web filtering while primary brought online. can refer me whitepaper configuration or perhaps load balanced , assigned priorities? thank you! hi,   thanks post.   you may take @ “ failover web proxy clients in isa server 2006 enterprise edition ” section of following article:   http://technet.microsoft.com/en-us/library/bb794779.aspx   as isa-related issue, please post new thread our forefront edge security forums further assistance.   http://social.technet.microsoft.com/forums/en-us/category/forefrontedgesecurity   hope helps. Windows Server  >  Network Infrastructure Servers ...

WDS client error: "WdsClient: An error occurred while starting networking"

   after googled "wdsclient: error occurred while starting networking" found this: error message when start pxe client connect wds server on windows server 2003 sp1-based computer: "wdsclient: error occurred while starting networking" http://support.microsoft.com/default.aspx/kb/923834/en-us but note didn't me. use windows 2003 entrprise edition r2 sp2 x32 , don't have dvrload despite installing aik tools. don't have file: setupapi.app.log after installing , upgrading windows 2003 sp1 windows 2003 entrprise edition r2 sp2. don't know need help!!! if knows how fix problem please tell me how... also, can't understand why note talking about windows 2003 sp1? can't install wds on platform! on sp2...  i searched the web , the microsoft technical support but didn't find anything... can install wds onto windows server 2003 sp1... installl wds oob update comes waik... wds included in sp2 as far driver issue goes... make sure find right nic dr...

Minor UI issue : Add a user

2016 tech preview4 on add user screen: i enter different password  in "reenter password" field  and tab next field not show "the passwords entered don't match.  try again".  however, when click next shows message.  however, if fix password match still shows the "the passwords entered don't match.  try again" making think entered wrong again. hi, have test on windows server 2016 tp4(version 10.0.10586) below: open control panel – user account, try add user account. enter passwords not matched first time, error prompted. enter password matched secondary time, account created successfully.  want confirm if os installation file downloaded microsoft official website. besides, may run “msinfo32” check os version, confirm see if same mine test system. best regards, eve wang please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@mic...

Disable Windows 10 Creators Update Notification

in company install updates through wsus. going run creators update through wsus saw online user still receive notification install manually. make gpo disable notification , not allow user install update manually. possible? far couldn't find way so. appreciated. thanks. hi, if mean windows 10 creators update notification ads, there way found remove below reghack. [hkey_local_machine\software\microsoft\windowsupdate\ux\settings] “hidemctlink”=dword:00000001 note: remember take backup before modifying registry. we can perform registry modifications using group policy preferences or perform using reg file under computer config>policies>windows settings>scripts>startup . check manually reg file can executed on clients. more articles reference: configure registry item https://technet.microsoft.com/en-us/library/cc753092.aspx deploying custom registry changes through group policy http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custo...

Distribution Lists type

why not returning results? $name = gc ".\list.txt" foreach ($user in $name){ $searcher = new-object directoryservices.directorysearcher([adsi]””) $searcher.filter = “(&(objectclass=group)(samaccountname= $user))” $founduser = $searcher.findone() $founduser.properties.grouptype $value = $founduser.properties.grouptype if ($value -eq '2') { write-output “global distribution group” } if ($value -eq '4') { write-output “domain local distribution group” } if ($value -eq '8') { write-output “universal distribution group” } if ($value -eq '-2147483646') { write-output “global security group” } if ($value -eq '-2147483644') { write-output “domain local security group” } if ($value -eq '-2147483640') { write-output “universal security group” } } this should work better: $users = gc list . txt foreach($user in $users){ $searcher =[adsisearcher]"samaccountna...

Copy text from one file into another at a specific possition using Powershell - Having trouble with Select-String -Pattern

hello , thank in advance community can provide! i'm trying create powershell script copy "excel.officeui" file network drive, users local drive "c:\users\%userid%\appdata\local\microsoft\office"  folder, if file exists, want copy specific portion of file , append local 1 exists in file, there bunch of headers same, shows <mso:tab id="mso_c2.3ed4dc" label="macros" insertbeforeq="mso:tabhome">.... , information custom ribbon created in excel appear way </mso:tab> so want take between <mso:tab id=".... </mso:tab> , copy "excel.officeui" file on local workstation, , enter right before </mso:tabs> (the final tag tabs) don't disrupt custom ribbons might have created. if still following me here, thank patience :) so here code i'm trying use reason, not find text i'm looking , might have way i'm entering "-pattern ..." portion or fact file might have multi...

Hyper-v failed to start

Image
hi everybody!! i have big problem, 1 of vm can't start, restored vm think problem physical server saturated memory (30gb used on 32gb) can't restart because others vm installed on same server. put here capture screen. if know way find out problem without restart you'd save life thanks you hi offrock, would please provide more information of event? post content under general. i have seen post of similar issue. , cause hyper-v service not running local system. https://social.technet.microsoft.com/forums/systemcenter/en-us/1fb4bfb9-1f0c-49a1-af9f-dcd462627ca3/event-viewer-says-not-found-component-not-installed-or-installation-is-corrupted?forum=virtualmachingmgrhyperv >> i restored vm think problem physical server saturated memory (30gb used on 32gb) how startup memory have assigned vm? there enough memory available? best regards, leo please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, cont...

Sendkeys not working on the system Print window

after bring up the windows system print window on webpage by using powershell script , manually press enter key , print xps default printer. however, it will not print after  use sendkeys :  $wshell = new-object -com wscript.shell  $wshell.sendkeys("{enter}") or use [void] [system.reflection.assembly]::loadwithpartialname("'system.windows.forms") [system.windows.forms.sendkeys]::sendwait("{enter}")  but all work after using $ie.execwb(6, 2) bring window up. any idea why? thanks i have no idea, then. have few desktop shortcuts vbscripts use manage making changes detailed property dialogs, activate them shortcut key, , find works well. i tend not use "{enter}", see no reason cause problem. try sending space character instead, has same effect clicking on button has focus. here's thought: possible default button highlighted if has focus when control has focus. 1 example of run dialo...

Query drives and printers for user security in Windows Server 2003

my goal find drives , printers associated list of around 20 different groups , users. somehow need query windows 2003 server show me objects users have access to. can point me in right direction command line tools can use accomplish this? seemed dsquery , dsget might way go, can seem find syntax describes looking in particular. afternoon, you should take @ subinacl, has ability enumerate directory security based on user acount. avaliable here hope helps Windows Server  >  Windows Server General Forum