A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

0
votes
2answers
47 views

Windows refuses to add an additional DC

I am trying to add a second DC to my network. It seems to go well: I install AD DS on a second server, I enter my credentials and the domain, and the domain is shown. I choose it, but when I click ...
1
vote
2answers
54 views

Replace DC/DNS in Active Directory

I have just tried to replace one of my domain controllers in a single domain forest keeping the old IP (But a new computername). As this is an environment I have "inherited" from a previous sysadmin I ...
2
votes
0answers
26 views

Samba4 internal DNS and isc-dhcp zone update

Could anybody explain, how to solve this problem with internal samba4 DNS and dynamic zone updates from isc-dhcp? In the logs I have: dhcpd: Unable to add reverse map from ...
0
votes
0answers
26 views

How long can a domain controller not be in contact with the domain without causing problems? [duplicate]

Server 2012 R2 w/ GUI in Hyper-V role, hosting VM servers. Very small system at present. Primary Servers in this system are: Domain Controller(DC), SQL, TFS, IIS, Build server I successfully ...
13
votes
1answer
361 views

Are all domain controllers on a small network considered equivalent/equal?

Windows Server 2012 R2 w/ GUI, Hyper-V host, VM DC I am installing my first second Domain Controller(DC) (sounds weird but that really is what I'm doing). I have what I think is a good process to ...
0
votes
1answer
34 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
0
votes
2answers
47 views

One domain controller configured in a failover cluster? Or two DCs, one on each cluster node?

I am currently planning a high available Windows Server 2012 R2 environment within a Hyper-V-Cluster with two nodes. I am not sure about how to deploy the virtual domain controller for the work ...
0
votes
2answers
16 views

Want to leave a domain/set account as administrator

I have a laptop used for school but since I've graduated long ago I wanted to remove my laptop from the school's domain, so I changed the settings and now I'm under a workgroup which sucks because ...
1
vote
1answer
36 views

Time Sync Offset on Domain Controllers and Hyper-V Hosts

I have a network with the following: Windows 2003 (PDC Emulator) (in the process of migrating) Windows 2003 DC (same) Windows 2008 Hyper-V Host w/ 5 VMs, one VM is a DC, soon to be the PDC ...
1
vote
1answer
35 views

Domain names on 2 similar windows domains (active directory)

I am fairly new to windows administration (Server 2008r2), but I am putting together a new environment, and am setting up active directory domains. I have broken my system into 2 parts, management ...
1
vote
1answer
33 views

Do Explicit Deny ACLs apply to a Domain Administrator account?

I've had a need come in a client with a two way trust (source company doesn't want us to have full admin rights, so we're having lots of permissions issues). We effectively need Domain Admin rights ...
-3
votes
0answers
23 views

Restoring a Win2000 AD domain from a Win2000 BDC?

This is where I landed, I have a Win2000 "DC" That in actuality is a BDC. My predecessor left it as is since it worked and he didn't have to redo the user profiles. I now want to upgrade to 2008, ...
1
vote
0answers
21 views

Windows domain controller errors

I got the following errors when enquiring two domain controllers. Cannot open security log for DC DC2.org - The interface is unknown. and OpenEventLog failed for DC DC2.org(10.126.2.6) - ...
1
vote
0answers
32 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
1answer
20 views

Can user still log on if local DC (which is also the DNS & DHCP) fails?

I have only 1 domain with 3 DCs (all of them are GC, DNS, DHCP). The DCs are located at 3 different sites, A, B, C. If site B DC fails, can a user at site B log in?
1
vote
1answer
33 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
0
votes
1answer
19 views

Can you demote SBS 2003 DC with Exchange still working

I'm sitting with a bit of a delema, and I don't want to demote the AD on the SBS 2003 server before I know it is safe. We are consolidating servers, and I installed a new Windows 2008 R2 Standard ...
0
votes
2answers
27 views

SBS 2011, second domain controller - make RODC?

I have an SBS 2011 domain at a single site. I had previously added a second domain controller for redundancy (including DNS) so that when the SBS server needs rebooting the network is uninterrupted. ...
0
votes
1answer
49 views

Replication not working on DC

I am getting the following error (4612) on my secondary and tertiary DCs: The DFS Replication service initialized SYSVOL at local path C:\Windows\SYSVOL\domain and is waiting to perform initial ...
0
votes
1answer
57 views

Installing a new domain server on a small network without taking down the old one

I'm attempting to replace a windows server 2003 domain controller/dns/dhcp server on a small business network with a new machine running server 2012 without having to take down the old one until ...
0
votes
1answer
67 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
1answer
56 views

Windows Server 2012 - How to set up Domain Controller Trust?

I'm attempting to set up a test system to replicate the following environment: Two AD domain controllers serving two separate domains, mycorp.local and mycorp.hq. It's not exposed to the outside ...
0
votes
0answers
34 views

System error 1314 : Samba and WIndows 7 client

I'm getting the following error when trying to log in a domain PC System error 1314 has occurred. A required privilege is not held by the client. This only occurs on this PC and it happens for all ...
1
vote
1answer
90 views

Domain controllers won't replicate

I recently removed a secondary domain controller (forcefully) and created a new one as secondary for the same domain. The problem is, is that the new secondary can see the primary and itself, but the ...
3
votes
1answer
35 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
0
votes
1answer
35 views

Best practices for time syncing a WS2012R2 domain controller that is a Hyper-V virtual machine?

What are generally the best practices for keeping time in a WS2012R2 domain controller? Right now I have left it as installation and honestly, there is no problem ("If it aint broke, don't fix it") ...
0
votes
1answer
47 views

Windows Server R2 2008 domain join - logon failure: unknown username or bad password

I have this problem where I try to make a winodws machine authenticate against a ubuntu samba PDC, but i keep getting the error logon failure: unknown user name or bas password here is my ...
0
votes
0answers
48 views

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly ...
2
votes
3answers
97 views

What should happen when I browse to my Windows domain name via UNC?

A while back I setup a DFS namespace \\my.dom.com\somecrap. Its working great, but I've always notice something that confused me and I never asked about it. When I just browse to \\my.dom.com it ...
0
votes
1answer
38 views

Restored virtual DC - Issues after restore

I have two HyperV hosts, hv01 and hv02. hv01, a HyperV 2012 R2 server, hosts an SBS 2011 server and two other member servers, 2k8 R2 and Server 2012 R2, but neither are DCs. hv02 is Win 2k8r2 with ...
0
votes
0answers
27 views

DFS Namespace is inaccessible when DC4 is up and running

DC1, DC2 and DC3 are at site A. DC4 and DFS server (2008 R2) are at Site B. DC4 is Server 2003 and not a Global Catalog. DC1, DC2 and DC3 all are Server 2003, FSMO role holders and a Global Catalog. ...
0
votes
2answers
43 views

Active Directory Multi Domain Enviornment

I work for a small organization which will be starting another branch of business here shortly. We have an existing active directory infrastructure and are looking to add another domain to the ...
1
vote
1answer
192 views

Missing SRV record at DNS server

Server 2008R2. 2003 functional level. One of my branch DCs, which we will call BranchDC1, is not registering SRV records in example.com/_msdcs/gc/_sites/_tcp. The DC is marked as a Global Catalog in ...
1
vote
1answer
66 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
2answers
150 views

Client computer(Windows 8.1 Pro) unable to connect to a domain(Windows Server 2012)

I am unable to connect a client pc to a domain controller which is a Windows Server 2012 Datacenter. I have tried connecting it : Through the system menu in Control Panel Putting all the ...
6
votes
1answer
212 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
4
votes
2answers
92 views

Audit policy being overwritten by “something”

I'm installing vendor software which requires account auditing to be enabled on our DCs. The problem is Audit Policy is not being pushed. Checking secpol.msc shows Windows Settings->Security ...
-2
votes
1answer
41 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
3
votes
1answer
166 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
3
votes
0answers
97 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
-1
votes
2answers
127 views

Reuse old domain controller IP address

We currently have 2 Windows Server 2008 R2 domain controllers, and I want to replace one of them with a Server 2012 R2 DC. I also want to reuse the IP address after I demote the old DC. What is the ...
-2
votes
1answer
201 views

The security database on the server does not have a computer account for this workstation trust relationship. Error in 1 PC [duplicate]

We have a small office with 9 PCs and a Windows Server. Today one PC, Cypher shows this when trying to log in: The security database on the server does not have a computer account for this ...
0
votes
1answer
25 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
0
votes
2answers
85 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
1
vote
1answer
53 views

Windows server 2012R2 RDS installed on Domain Controller will not uninstall

Knowing I had 90 days to figure out the licensing, I installed RDS. Seems I didn't need to as Administrators can log in anyway. Now it seems we don't want to buy any more licenses so I figured I would ...
1
vote
1answer
122 views

Windows computer not recognizing membership in active directory group

In my active directory setup (Windows Server 2012r2 acting as domain control), I have a group called "TestComputers". I have a domain computer called "Computer1" that is a member of this group. On ...
0
votes
0answers
35 views

How to set up internal dns to copy public dns plus additional entries?

I have a windows domain example.com and a public domain of the same name. How do I set up my company DNS to resolve all the subdomains like the public DNS does, and more? Do I have to copy the entries ...
2
votes
0answers
145 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
4
votes
1answer
71 views

Server 2003 Missing NETLOGON Folder

I've just started working for a new company where there was perviously no-one really managing the IT environment, and it's quite a small company that has only one Domain Controller (plus other servers ...
0
votes
1answer
16 views

Group Policies For Wallpaper Failing

We have some computers that are no longer getting our wallpaper pushed by group policy. In checking to see if they can access the UNC for the wallpaper (\domain.com\NETLOGON\LogonFiles\our-logo.jpg) ...