why a locked out user can still unlock a workstation

This is because unlock process check against only cache hash of password locally. It doesn?t do another logon process with DC. Please see


Account Passwords and Policies : ForceUnlockLogon section

Information About Unlocking a Workstation.

Screensaver Password Works Even If Account Is Locked Out.

How to identify what service is listening on what port?

Open a command prompt and type

Netstat -ano

This command outputs a list of all listening ports, associated process IDs, and the port number

Now run

tasklist /svc

This will give you the service name that maps to a particular PID

Jul 13.
Further to above, a "new" option, -b, is available in netstat command after Windows 2003 SP1. This will show you what image occupies which port.

DFS, FRS, DFSR

- FRS is a service for replication files between servers
- DFS is a servcie to maintain shared namespaces between servers. It provides both unique name space and referral so users can have access to shared folders by using unique namespace without having to know where the resources are
- DFS is NOT responsible for replications. Synchronization between different link targets can be achieved by using FRS, manual copy(robocopy etc.) or thirdparty tools
- Sysvol folder on DCs is replicated using FRS

- In Windows 2003 R2, DFSR, DFS' own replication service replaces FRS (or any other replication service) to sync the folders/files
- FRS is not designed for replicating big files or huge amount of data