RE: Windows Active Directory Domains

"Mikhail A. Utin" <[email protected]> Mon, 14 Jul 2014 11:02:35 -0400
Newsgroups gmane.comp.security.basics
Message-ID <025B5895F8BCCC40AC35F6CD6D972B1C1EBA49437D@cca-mail1.commonwealthcare.org>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==