0
votes
0answers
8 views

Only create roaming profiles by default in AD (Samba 4)

I just set up an Active Directory Domain Controller with Samba 4, created users, shares, groups etc., everything is working like a charm. BUT: I have an environment where the use of roaming profiles ...
3
votes
1answer
31 views

FRSDIAG / NTFRSUTL looking for servers which don't exist

I am using the FRSDIAG room(from tech-net) to do diagnosis on FRS replication. The issue is its tying to check the DC's which no ,longer exist . Error being "missing server reference for the server ...
1
vote
2answers
39 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
0
votes
1answer
30 views

Domain controller is registering 2 IP addresses with DNS

Recently a DC was promoted and the IP was used from the old DC which was demoted and shutdown.How tostop this DC from registering 2 IP addresses with DNS? Please let me know if any questions.
0
votes
1answer
26 views

Domain controller with new domain on my network

I am migrating my organization from one domain to another. The old domain can be referred to as X, and the new domain is Y. On domain X, I have created a VM that will act as a DC for domain Y. ...
1
vote
0answers
11 views

Sysvol Replication issue

I have read a lot about this recently and must say it is doing my head in. now what I did was 6 months ago we did a upgrade of our infrastructure. We had a 2008 R2 server for domain controller now I ...
0
votes
1answer
46 views

Active Directory DNS probelm

I have following scenario. Windows 2008 R2 base Active Directory DC (DC1), which is hosting DNS+ DHCP too. (previously it was on windows 2003 32bit, i migrated it last year on 2008 r2 64bit). Also ...
4
votes
2answers
162 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
2
votes
1answer
176 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
-1
votes
1answer
16 views

Windows Domain controller recover test

I'm testing a Exchange 2012 VM recovery in a Hyper-V test server. I have this VM, 2 DC and a Exchange server: SRVDC1 (pdc, nm, rid) SRVDC2 SRVEX2 As far as I know I need to recover also a Domain ...
1
vote
3answers
99 views

Add additional name to a Domain Controller

I am looking to rename a Domain Controller. Functional level and everything else means I can use netdom to carry out the process. Looking a the technet article on the subject I can see the first ...
0
votes
0answers
20 views

Creating Exchange account for user of subdomain

We have a W2008R2 server which serves as AD DC for intra.contoso.com and Exchange server. We have a W2012 server which serves as AD DC for subdomain sub.intra.contoso.com (which is not a new forest) ...
1
vote
0answers
20 views

Will the timezone be converted across geographical areas?

I'm using Active directory in Windows server 2008 R2. My domain is in a particular timezone and my client say X is in another timezone. Now I have implemented certain restrictions that X cannot logon ...
3
votes
3answers
249 views

How can I prevent the compromise of a Domain Controller on ESX stored in a unsecured location?

A client of ours has a DC that will be located in an insecure location. RODCs and separate domains/forests are not permitted by management. All the servers will be located on a VMWare ESX server. ...
0
votes
1answer
50 views

what happens to the local users and groups when promoting a server to a domain controller? [duplicate]

What happens to the local users and groups when promoting a domain member to a domain controller? I have a Windows Server 2008 that I have made to a domain controller by installing AD DS, but it was ...
3
votes
2answers
132 views

Windows Server 2012 Migration (DNS/AD DS Standard Eval to Essentials OEM) P2V -> Do I need a Secondary Domain Controller during migration?

This is my first post on this exchange (although not my first on stack exchange), so please have patience. I am a 3rd year student intern, and I have been tasked with virtualizing the server systems ...
1
vote
1answer
56 views

gpupdate failing when using Samba 4 AD DC

I have a Samba 4 AD domain running with 2 DCs on Centos 6.5, with a named DNS backend. I have multiple Windows 7 machines joined to this domain, which is fine. However, I can't get GPOs to apply. ...
0
votes
1answer
25 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
2answers
53 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
1
vote
1answer
65 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
0
votes
1answer
82 views

how to expose Domain Controller on public IP address, and make other DC talk to it?

basically we have 2 DC servers which used to have site-2-site VPN but it's not working anymore. So we started to get various errors, DNS stopped working, etc, etc. As a last resort attempt (before ...
13
votes
3answers
799 views

Why can I login to a box even if the AD Domain controller is down?

Scenario: While my DC is running, I log into an arbitrary machine. I stop the DC I log off the arbitrary machine. Let's bounce it for good measure, too. When the machine comes back up, I can still ...
1
vote
2answers
172 views

How to find which machines are configured for specific DNS server?

We are currently removing ancient DC's from our domain so we can upgrade and I ran into an issue the last time one was removed. We had a few old UNIX machines that were pointing to a certain DNS ...
1
vote
2answers
357 views

How to remove orphaned Domain Controller's DNS records?

It looks like in the past there were some two improperly decommissioned Domain Controllers (DC1 and DC2) that belonged to this domain. I am concluding this based on some remaining records in the ...
0
votes
2answers
81 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
0
votes
1answer
60 views

How can I upgrade an ancient Win 2000 based domain controller to Windows 2008/2012? (by replacement)

We're running Windows 2000 as our domain controller (!) and a separate backup domain controller, but as the PDC is 12 years old we would like to replace it. We have a couple of 2008 R2 and Win 2012 ...
3
votes
3answers
229 views

Active Directory - List ISP DNS servers as Forwarders?

Background: I have a relatively small Active Directory domain (Windows 2003 Functional level) with two domain controllers, both running DNS servers. They are the primary and secondary DNS servers ...
1
vote
0answers
59 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
2
votes
1answer
151 views

Domain Controller all FSMO roles, AD,DHCP,DNS 2008r2 backup best practice

hello I am looking to back up my 2008 r2 domain controller, we have 1 forest and 2 domain controllers, idomain-1 and idomain-2 idomain-2 is used for failover and idomain-1 replicates to it. having ...
3
votes
2answers
142 views

How Active Directory Dynamic DNS updates works behind the scenes?

I've looked through the AD documentation and I was not able to find any conclusive answer to this question. It's plain simple, but hard enough to be answered. How DDNS of AD works behind the scenes? ...
1
vote
1answer
47 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
99 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
8
votes
2answers
414 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
0
votes
1answer
58 views

Joining an AD domain from Workgroup with runas

I've got an user A who is connected to a Workgroup. From this Workgroup, now, I want to connect, with the console, to the user "john" who belongs to an active directory (MYAD) Though I try : runas ...
4
votes
2answers
327 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
6
votes
1answer
102 views

Active Directory Country capitals (letters)

Does someone know how to solve the problem of changing all country fields at once and probably why the country field is multiplied each time I select + apply a country change until the Object is being ...
-1
votes
1answer
69 views

Are (PRIMARY, SECONDARY / PRIMARY, BACKUP) Domain Controller already exist? [closed]

i know that since Windows 2000 was introduced there are no such things anymore like "primary" and "secondary" domain controllers. But if I run in the CMD on my redundant Domain Controllers ...
-2
votes
3answers
356 views

If my single domain controller is down, what happens? [closed]

I have comprehension question. Let us assume I have an ESXi environment about 20 running VMs. One of the 20VMs is the domain controller (DC01) as a single domain controller (no other sides are ...
2
votes
1answer
336 views

What's the downtime limit of a domain controller (DC)?

On my VMware ESXi environment there are 10 VMs running. One of the VMs is the domain controller (Windows Server 2008 R2). The other VMs are configured with a static DHCP and DNS IP address in their ...
2
votes
1answer
62 views

Is this USN Rollback?

I have 6 Windows 2008 R2 Domain Controllers, all GCs, across multiple locations (2+2+2). On my main site I have a clone of one of our DCs done a few month ago, usually totally isolated from the ...
-1
votes
1answer
84 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
0
votes
1answer
525 views

Join Windows 2003 R2 guest to Windows 2012 R2 domain controller

I'm trying to join a Windows Server 2003 R2 guest to a domain with a Windows Server 2012 R2 Domain controller server. I get the error "The following error occured attempting to join the domain ...
24
votes
7answers
2k views

Is it best practices to have separate login for a domain for domain admins?

I typically like to set up separate logins for myself, one with regular user permissions, and a separate one for administrative tasks. For example, if the domain was XXXX, I'd set up a XXXX\bpeikes ...
3
votes
1answer
61 views

Can a Server Foundation 2012 machine serve as a backup domain controller to a machine running Server Foundation 2008?

In this particular context we have a small business (10 user office) looking to establish a Domain setup. There is already one machine running Server Foundation 2008. If that machine is selected as ...
0
votes
1answer
40 views

We're migrating everything to the cloud - is there a reason to keep Active Directory around? [duplicate]

We are "cloud-sourcing" all our services (web, databases, file storage, e-mail, print, DNS). As authentication is made on the could-provider side, I'm wondering about the pro and cons to keep our ...
-4
votes
1answer
73 views

Why does second domain controller not display [closed]

We have 2 domain controllers DC1 and DC2, both sharing the same AD database The "Active directory users and computer" console of both DC1 and DC2 display DC1 only, under "Domain Controllers". what ...
4
votes
3answers
1k views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
0
votes
2answers
364 views

Windows Clients connecting to DC in wrong site?

Ok so Sites are separated by WAN Domain : production.contoso.local SITE A Site network: 192.168.0.0/16 Site DCs : DC1-SiteA, DC2-SiteA Client : serverA ...
0
votes
0answers
739 views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
3answers
120 views

Why is the secondary interface address on our AD DCs in our domain's primary DNS zone?

We have 2 hardware interfaces on our Active Directory Domain Controllers. The secondary interface should never be listed in our domain's DNS zone, but it is. This is problematic because most machines ...