Active Directory/Server 2003 questions.

[Messiah Khan]

Ive just set up server 2003 and active directory on my home network. Its installed on a seperate server which is the domain controller. So far its going quite well, but im stumped on a few points;

Is there a way to import account settings from the local accounts on client machines? As all of my computers have been set up how I want when they were networked in a workgroup, I would like to retain all of the settings (wallpapers, icon layouts, program settings etc etc) is there a way to import all of these settings for the .domain accounts?

How do I get access to local account files when logged on as a .domain account (with admin rights). when I try and access the 'documents and settings' for the local account, it just gives an access denied error, despite being logged in with a .domain account with admin rights.

How do I add and share printers and folders in AD? Ive followed a few guides, but when I try and search for the printer/folder on the client machine, it simply doesn't find them (except 1 computer which found the printer automatically).

Any help, advice or tips to do with AD would also be appreciated.

 

[J.T]

1. Don't think so, although never had any reason to do it myself so there may be a way.

2. you need to add the domain admins group or domain user ID's to the local admin group on the PC's, will only work if you have joined the PC to the domain.

3. Have you actually joined the PC's to the domain? if not then they won’t have access to any domain resources.

 

[Messiah Khan]

1. Don't think so, although never had any reason to do it myself so there may be a way.

2. you need to add the domain admins group or domain user ID's to the local admin group on the PC's, will only work if you have joined the PC to the domain.

3. Have you actually joined the PC's to the domain? if not then they won’t have access to any domain resources.

Thanks for the answers. Right, thats no2 sorted. Yeah ive added all the computers to the domain, and they have all been picked up in AD and i've added the printer (Which happens to be attached to the server via usb) to a new organizational unit called 'devices'. Now how do I get anything in that organizational unit to be shared on all the client machines? And is this the right place to put a printer?

 

[L33]

You dont 'share' things through active directory, you can create security groups though to allow/deny access to shares etc

Create security group in AD (call it something meaningful/give it a decent description), add users to it. Share folder on whatever PC/server you want, give the AD group read/write/whatever permissions on the share.

You can then map these directories as drives for said group using group policy and/or logon script

Hope this helps

 

[ful56_uk]

you could create a gpo for the OU and then use a simple logon script to map the printer to all client machines.

script link

http://www.computerperformance.co.uk/Logon/LogonScript_Printer_Bonus.htm

Share the printer out firsts and make sure the tick box for list in directory is ticked as well.

Download the GPMMC addin form Microsoft right click OU then Group policy tab create the gpo there or download the gpmmc from microsoft and use that

 

[L33]

you could create a gpo for the OU and then use a simple logon script to map the printer to all client machines.

script link

http://www.computerperformance.co.uk/Logon/LogonScript_Printer_Bonus.htm

I find con2prt from the windows ZAK much easier to use.

Use in a login batch file:
con2prt.exe /c \\path\tosharedprinter
as many times for different printers as you like. Add /d to set as default.