Re: smtp AD site Link versus IP AD Site Link

From: Int'l Aromatics (IntlAromatics_at_discussions.microsoft.com)
Date: 02/22/05 

Date: Mon, 21 Feb 2005 22:47:02 -0800

Thanks, i will have to bring the DC in site 3 back to site 1 to be able to do
that as both now don't authenticate accounts for the other domain.
i was thinking of it the other way around to have the dc3 admin member of
the Enterprise admin group, i will do both, also i am testing to increase the
bandwidth to see if this help relief the problem, could you give me an idea
about how to test if the network connection is suitable for AD replication
using IP site Links? any recommendation on min bandwidth?, our wan ping is
(500-2000 ms), is there any registery key that i could modify to increase the
min bandwidth required for AD?

nslookup, dcdiag, netdiag, nltest /dcget,...etc all run successfully on both
DCs

thanks for your reply

"ptwilliams" wrote:

> Assuming replication is fine, add the member that is an EA to the (child)
> domain's Domain Admins group.
>
> EA only gives you so many permissions; domain admins is what gives you
> rights to administer machines, etc.
>
>
> --
>
> Paul Williams
>
> http://www.msresource.net/
> http://forums.msresource.net/
>
> "Int'l Aromatics" <IntlAromatics@discussions.microsoft.com> wrote in message
> news:69254B85-043F-46E4-A1AA-82791F24851B@microsoft.com...
> your help is greatly needed because i have a forest with several child
> domains, as for site 1 & 2 they are connected with IP links & working fine
> but site 1 & 3 they are connected with SMTP as when i used IP replication
> failed as the network connection is not stable.
>
> now with SMTP replication is OK but when i try logging in with enterprise
> admin account i failed with an error stating that "Access is denied" thus
> preventing me from changing any setting that need enterprise admin rights
> like DNS, exchange, ....
>
> i have another site to be added soon and it will be using the same network
> connection thus i expect same problems, and that site is overseas, which
> make
> even harder.
>
> help is really apperciate but i hope i get some reply soon
>
> --
> Eng. M William
>
>
>

Relevant Pages

  • Re: Prevent Admin Logon to RWW
    ... 'Administrator' does not have RRAS rights, if I wish to VPN to a server I do ... OR since the introduction of RWW RDP Proxy I would prefer ... My preference is not to lock out the domain admins from RWW, ... you can still do remote admin work ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Admins removed from local admin group
    ... You can use restricted groups to fix the administrators on the local machines. ... Even if the user is local admin and removes the domain admins after the next GPO refresh they will be in again. ...
    (microsoft.public.windows.server.general)
  • Re: List Level Security problem - Please help!
    ... If I installed and created the top level site and I'm in the Domain Admins ... I'm listed as the portal server admin. ... this setting is only supported on WSS not SPS but I have played with it ... I created a list called Security Events ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Admin Shares
    ... computer, click Start->Run, type \\<The local computer name>\C$. ... workgroup, domain admins doesn't exist)? ... > Subject: Admin Shares ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to send a query to the browser from time to time?
    ... spend a lot of bandwidth, it would reload all the page and graphics all the time. ... Admin. ...
    (comp.lang.python)