How to view and transfer FSMO roles in Windows Server 2003

FSMO Roles

In a forest, there are at least five FSMO roles that are assigned to one or more domain controllers. The five FSMO roles are:

• Schema Master: The schema master domain controller controls all updates and modifications to the schema. To update the schema of a forest, you must have access to the schema master. There can be only one schema master in the whole forest.
• Domain naming master: The domain naming master domain controller controls the addition or removal of domains in the forest. There can be only one domain naming master in the whole forest.
• Infrastructure Master: The infrastructure is responsible for updating references from objects in its domain to objects in other domains. At any one time, there can be only one domain controller acting as the infrastructure master in each domain.
• Relative ID (RID) Master: The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. At any one time, there can be only one domain controller acting as the RID master in the domain.
• PDC Emulator: The PDC emulator is a domain controller that advertises itself as the primary domain controller (PDC) to workstations, member servers, and domain controllers that are running earlier versions of Windows. For example, if the domain contains computers that are not running Microsoft Windows XP Professional or Microsoft Windows 2000 client software, or if it contains Microsoft Windows NT backup domain controllers, the PDC emulator master acts as a Windows NT PDC. It is also the Domain Master Browser, and it handles password discrepancies. At any one time, there can be only one domain controller acting as the PDC emulator master in each domain in the forest.

You can transfer FSMO roles by using the Ntdsutil.exe command-line utility or by using an MMC snap-in tool. Depending on the FSMO role that you want to transfer, you can use one of the following three MMC snap-in tools:

Active Directory Schema snap-in
Active Directory Domains and Trusts snap-in
Active Directory Users and Computers snap-in

If a computer no longer exists, the role must be seized. To seize a role, use the Ntdsutil.exe utility.

Transfer the Schema Master Role

Use the Active Directory Schema Master snap-in to transfer the schema master role. Before you can use this snap-in, you must register the Schmmgmt.dll file.

Register Schmmgmt.dll

1. Click Start, and then click Run.
2. Type regsvr32 schmmgmt.dll in the Open box, and then click OK.
3. Click OK when you receive the message that the operation succeeded.

Transfer the Schema Master Role

1. Click Start, click Run, type mmc in the Open box, and then click OK.
2. On the File, menu click Add/Remove Snap-in.
3. Click Add.
4. Click Active Directory Schema, click Add, click Close, and then click OK.
5. In the console tree, right-click Active Directory Schema, and then click Change Domain Controller.
6. Click Specify Name, type the name of the domain controller that will be the new role holder, and then click OK.
7. In the console tree, right-click Active Directory Schema, and then click Operations Master.
8. Click Change.
9. Click OK to confirm that you want to transfer the role, and then click Close.

Transfer the Domain Naming Master Role

1. Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
2. Right-click Active Directory Domains and Trusts, and then click Connect to Domain Controller.
   
   NOTE: You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
3. Do one of the following:
   • In the Enter the name of another domain controller box, type the name of the domain controller that will be the new role holder, and then click OK.
     
     -or-
   • In the Or, select an available domain controller list, click the domain controller that will be the new role holder, and then click OK.
4. In the console tree, right-click Active Directory Domains and Trusts, and then click Operations Master.
5. Click Change.
6. Click OK to confirm that you want to transfer the role, and then click Close.

Transfer the RID Master, PDC Emulator, and Infrastructure Master Roles

1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click Active Directory Users and Computers, and then click Connect to Domain Controller.
   
   NOTE: You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
3. Do one of the following:
   • In the Enter the name of another domain controller box, type the name of the domain controller that will be the new role holder, and then click OK.
     
     -or-
   • In the Or, select an available domain controller list, click the domain controller that will be the new role holder, and then click OK.
4. In the console tree, right-click Active Directory Users and Computers, point to All Tasks, and then click Operations Master.
5. Click the appropriate tab for the role that you want to transfer (RID, PDC, or Infrastructure), and then click Change.
6. Click OK to confirm that you want to transfer the role, and then click Close.

Useful Software Applications

Vmware

Vmware is a very useful application as it allows users to run many 'Virtual Machines' simultaneously. Vmware simulates hardware and allows you to run an operating system and other software just as you would on a regular machine.

The advantage of running a virtual machine is that you can change things and mess around without worrying about consequences. Perfect for a development or testing environment. Since all settings are stored in a file it is very easy to move a virtual machine created on one computer to another computer. You can also simulate situations which would be complex and expensive to do using real hardware. Virtual networks allow bridging of certain network adapters so they appear in the virtual machine and can be used to test various firewall or internet configurations.

Basically, the possibilities are endless when using virtual machines for different purposes.


Crossloop

Crossloop is a great remote access and assistance tool which is very easy to use and works behind NAT firewalls. Perfect for situations where you need to demonstrate some thing or other. Basically, one computer is the host who will be sharing their screen and the guest who will be able to see the hosts screen and take control of the keyboard and mouse. The host still has access to their screen and can see everything the guest is doing and can terminate the session at any time.


Synergy

This is a neat little sourceforge project that allows you to use a single set of keyboard and mouse with multiple computers with monitors at a single workstation. Its cross platform and allows simple configuration where you can arrange screens, and once working, provides seamless usage of multiple computers.

How to repair .PST Recovery Tool

The Outlook ScanPst.exe .PST Recovery Tool

To get at it, you'll need to navigate to this path using Windows Explorer:

For Outlook XP & 2003: Hard Drive Letter:\Program Files\Common Files\System\MSMAPI\LocaleID (which is 1033 for the USA or similar)

For Outlook 2007: Hard Drive Letter:\Program Files\Microsoft Office\OFFICE12Now, inside this folder, you're looking for this particular setup file: "Scanpst.exe" When you run the .exe, you'll need to Browse... to your current .pst file and hit Start:


The Inbox Repair Tool will now scan the corrupted .PST file for errors:


If your PST file is recoverable, you'll see the repairable errors show up in the scan results. To fix them, select Repair.:
Transferring Recovered PST File Data to New PST File

Once the repair finishes, Outlook creates a "Recovered" version of your .pst file, and you need to tell Outlook to use it rather than the old, damaged or corrupted .pst file.Next, you'll need to point Outlook in the right direction, namely at the recovered .PST file: Start Outlook Normally

RESTART PROBLEM ON EVERY REBOOT THE WINDOWS XP

>>>>You can try this:

1. click on your start menu and open the run dialog.

2. type "cmd" and return (note: dont enter quotes)

3. Next type "fsutil dirty query C:"

4. If the return message indicates that the volume is dirty go to step 5

5. Next type "chkdsk C: /f /x"

6. After that finshes repeat step 3.

7. If it is no longer dirty then reboot and you should notice no more
ckdisk.

>>>>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager
Change the BootExecute entry from:
autocheck autochk * /.
To:
autocheck autochk *

Or else try this :

Start> Run> bring up a command prompt by typing in “CMD” and type ” fsutil dirty query g: “. This queries the drive, and more than likely it will tell you that it is dirty. Next, type “CHKNTFS /X G:”. The X tells Windows to NOT check that particular drive (G) on the next reboot. At this time, manually reboot your computer, it should not do a Chkdsk and take you directly to Windows.

Once Windows has fully loaded, bring up another CMD prompt and type and now you want to do a Chkdsk manually by typing “Chkdsk /f /r g:”. This should take you through 5 stages of the scan and will unset that dirty bit. Finally, type “fsutil dirty query g:” and Windows will confirm that the dirty bit is not set on that drive.

Add Your Gmail Account to Outlook 2007

Everybody loves Gmail, but some people use a desktop client, especially in corporate environments where Outlook is king. Adding your Gmail account to Outlook 2007 couldn’t be easier.

First we need to make sure your gmail account is set up to enable POP (Post Office Protocol). In Gmail just go to mail settings and choose the Forwarding and POP tab. Click on one of the options to enable POP.

Update: Note the drop-down that says what to do when mail is accessed with POP3. Please do NOT change this to “Delete”.

Now open up Outlook 2007 and go to Tools \ Account Settings…

Under Account Settings choose the E-mail tab and click on New…

Enter in all of your gmail account information **make sure there is no check next to Manually configure server…** You do not have to go through these extra steps. Just click on Next.

After Outlook has successfully configured the e-mail server settings you can go ahead and click Finish.

Go back to your inbox and hit send/receive and you are done!

If this doesn’t work

If you are having problems with the automatic setup, you’ll need to choose the “Manually Configure Server” option, and then fill in your details as follows:

Here are the important settings:

• Email Address: Your full gmail address
• Incoming Mail Server: pop.gmail.com
• Outgoing Mail Server: smtp.gmail.com (Note: If you have problems with sending email you may have to check with your internet provider, as they often require you to send email through their system.
• User Name: Your full gmail email address

Now you’ll need to click on the More Settings… button, and check the box on the Outgoing Server tab for “My outgoing server requires authentication”

Now switch to the Advanced tab, and check the box that says “This server requires an encrypted connection”, then change the fields to match these values:

• Incoming Server: 995
• Check the box for “This server requires an encrypted connection”
• Outgoing Server (SMTP): 587
• Change the type of encrypted connection to Auto, or use TLS if you have problems.

Close the dialogs and go through the rest of the wizard and everything should be working.

Change Outlook Startup Folder

Outlook 2007 and earlier versions display the Outlook Today page when you first start up, but for most people it’s a fairly useless page since you just want to get to your email anyway.

You can disable Outlook Today easily, or you can use the advanced options to choose a particular folder to start in. You can start by just clicking on the Customize Outlook Today button.

Then just uncheck the “When starting, go directly to Outlook Today” checkbox, which should set the Inbox as the default startup folder.


If it doesn’t, or if you want to make outlook display a different folder on startup, open Outlook Options, click on the Other tab, and then click on Advanced Options.


In this dialog, you can click the Browse button and choose a different folder if you want. You can even choose Search Folders in Outlook 2007, which can be very useful…

For instance, you could choose the Followup Today search folder to only see items that you’ve flagged to follow up with on the current day. Quite useful!

Symptom

When you open a Web page, the .PNG images in that page may not be displayed. Instead, a red X, or a placeholder, may appear in place of the images. However, all other image file types may display correctly in Internet Explorer.

Resolution

This problem may be seen after installing a third-party application, which may have altered the file class and MIME settings for the PNG file type. To resolve the problem, use these steps:

• Download PNG_Fix.zip and save it to the Desktop.
• Unzip and extract the two files (pngasso_xp.reg and pngasso_vista.reg) to the Desktop.
• If you're using Windows XP, right-click pngasso_xp.reg and choose Merge. If you're using Windows Vista, right-click pngasso_vista.reg and choose Merge. Click Yes to confirm the merge operation. Additionally, in Windows Vista, you'll have to click Continue when you see the User Account Control elevation dialog.

Note: The .REG files above should fix the file association and MIME settings for .PNG file types. File paths in the .REG files are hardcoded for C:\. If you have installed Windows in a different location than C:\, you'll need to edit the REG file(s) using Notepad and update the drive-letter and/or the Path accordingly.