We have windows 2000 , the history of this system is every admin we hired before me he did some changes to AD , now we end with when I create a user he or she can join domain , it shouldn’t go that way. also user cannot change password , the massage says you cannot change password this time.
We want to start migrate to windows 2003 , but I am still wondering , should I start everything form scratch , means create new users , OUs , and build AD again. but if I do this I will have permission problem with all the old resources , if I restore AD from Backup it will be the same problem again. I don’t know what to do. is there is any tools to analyze active directory first to check if there is group policy conflicts. please advice.