A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

0
votes
0answers
12 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
1answer
17 views

Can user still log on if local DC (which is also the DNS & DHCP) fails?

I have only 1 domain with 3 DCs (all of them are GC, DNS, DHCP). The DCs are located at 3 different sites, A, B, C. If site B DC fails, can a user at site B log in?
0
votes
0answers
9 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
0
votes
1answer
12 views

Can you demote SBS 2003 DC with Exchange still working

I'm sitting with a bit of a delema, and I don't want to demote the AD on the SBS 2003 server before I know it is safe. We are consolidating servers, and I installed a new Windows 2008 R2 Standard ...
0
votes
2answers
19 views

SBS 2011, second domain controller - make RODC?

I have an SBS 2011 domain at a single site. I had previously added a second domain controller for redundancy (including DNS) so that when the SBS server needs rebooting the network is uninterrupted. ...
0
votes
1answer
32 views

Replication not working on DC

I am getting the following error (4612) on my secondary and tertiary DCs: The DFS Replication service initialized SYSVOL at local path C:\Windows\SYSVOL\domain and is waiting to perform initial ...
0
votes
1answer
38 views

Installing a new domain server on a small network without taking down the old one

I'm attempting to replace a windows server 2003 domain controller/dns/dhcp server on a small business network with a new machine running server 2012 without having to take down the old one until ...
-1
votes
0answers
20 views

Recommended Storage for Domain Controller Collecting Audit Logs

I am currently working with a customer on getting their Windows audit logs to our SIEM. Since the customer is unwilling/unable to provide hostnames for each host in the environment, I have suggested ...
0
votes
1answer
54 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
1answer
45 views

Windows Server 2012 - How to set up Domain Controller Trust?

I'm attempting to set up a test system to replicate the following environment: Two AD domain controllers serving two separate domains, mycorp.local and mycorp.hq. It's not exposed to the outside ...
0
votes
0answers
18 views

System error 1314 : Samba and WIndows 7 client

I'm getting the following error when trying to log in a domain PC System error 1314 has occurred. A required privilege is not held by the client. This only occurs on this PC and it happens for all ...
1
vote
1answer
57 views

Domain controllers won't replicate

I recently removed a secondary domain controller (forcefully) and created a new one as secondary for the same domain. The problem is, is that the new secondary can see the primary and itself, but the ...
3
votes
1answer
29 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
0
votes
1answer
24 views

Best practices for time syncing a WS2012R2 domain controller that is a Hyper-V virtual machine?

What are generally the best practices for keeping time in a WS2012R2 domain controller? Right now I have left it as installation and honestly, there is no problem ("If it aint broke, don't fix it") ...
0
votes
0answers
22 views

Windows Server R2 2008 domain join - logon failure: unknown username or bad password

I have this problem where I try to make a winodws machine authenticate against a ubuntu samba PDC, but i keep getting the error logon failure: unknown user name or bas password here is my ...
0
votes
0answers
33 views

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly ...
2
votes
3answers
90 views

What should happen when I browse to my Windows domain name via UNC?

A while back I setup a DFS namespace \\my.dom.com\somecrap. Its working great, but I've always notice something that confused me and I never asked about it. When I just browse to \\my.dom.com it ...
0
votes
1answer
27 views

Restored virtual DC - Issues after restore

I have two HyperV hosts, hv01 and hv02. hv01, a HyperV 2012 R2 server, hosts an SBS 2011 server and two other member servers, 2k8 R2 and Server 2012 R2, but neither are DCs. hv02 is Win 2k8r2 with ...
0
votes
0answers
24 views

DFS Namespace is inaccessible when DC4 is up and running

DC1, DC2 and DC3 are at site A. DC4 and DFS server (2008 R2) are at Site B. DC4 is Server 2003 and not a Global Catalog. DC1, DC2 and DC3 all are Server 2003, FSMO role holders and a Global Catalog. ...
0
votes
2answers
39 views

Active Directory Multi Domain Enviornment

I work for a small organization which will be starting another branch of business here shortly. We have an existing active directory infrastructure and are looking to add another domain to the ...
1
vote
1answer
91 views

Missing SRV record at DNS server

Server 2008R2. 2003 functional level. One of my branch DCs, which we will call BranchDC1, is not registering SRV records in example.com/_msdcs/gc/_sites/_tcp. The DC is marked as a Global Catalog in ...
1
vote
1answer
42 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
2answers
117 views

Client computer(Windows 8.1 Pro) unable to connect to a domain(Windows Server 2012)

I am unable to connect a client pc to a domain controller which is a Windows Server 2012 Datacenter. I have tried connecting it : Through the system menu in Control Panel Putting all the ...
6
votes
1answer
119 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
4
votes
2answers
76 views

Audit policy being overwritten by “something”

I'm installing vendor software which requires account auditing to be enabled on our DCs. The problem is Audit Policy is not being pushed. Checking secpol.msc shows Windows Settings->Security ...
-2
votes
1answer
41 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
3
votes
1answer
153 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
3
votes
0answers
72 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
-1
votes
2answers
76 views

Reuse old domain controller IP address

We currently have 2 Windows Server 2008 R2 domain controllers, and I want to replace one of them with a Server 2012 R2 DC. I also want to reuse the IP address after I demote the old DC. What is the ...
-2
votes
1answer
96 views

The security database on the server does not have a computer account for this workstation trust relationship. Error in 1 PC [duplicate]

We have a small office with 9 PCs and a Windows Server. Today one PC, Cypher shows this when trying to log in: The security database on the server does not have a computer account for this ...
0
votes
1answer
22 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
0
votes
2answers
67 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
1
vote
1answer
48 views

Windows server 2012R2 RDS installed on Domain Controller will not uninstall

Knowing I had 90 days to figure out the licensing, I installed RDS. Seems I didn't need to as Administrators can log in anyway. Now it seems we don't want to buy any more licenses so I figured I would ...
1
vote
1answer
85 views

Windows computer not recognizing membership in active directory group

In my active directory setup (Windows Server 2012r2 acting as domain control), I have a group called "TestComputers". I have a domain computer called "Computer1" that is a member of this group. On ...
0
votes
0answers
32 views

How to set up internal dns to copy public dns plus additional entries?

I have a windows domain example.com and a public domain of the same name. How do I set up my company DNS to resolve all the subdomains like the public DNS does, and more? Do I have to copy the entries ...
2
votes
0answers
104 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
4
votes
1answer
57 views

Server 2003 Missing NETLOGON Folder

I've just started working for a new company where there was perviously no-one really managing the IT environment, and it's quite a small company that has only one Domain Controller (plus other servers ...
0
votes
1answer
14 views

Group Policies For Wallpaper Failing

We have some computers that are no longer getting our wallpaper pushed by group policy. In checking to see if they can access the UNC for the wallpaper (\domain.com\NETLOGON\LogonFiles\our-logo.jpg) ...
2
votes
2answers
111 views

The requested operation requires elevation

We have about 15 PCs on our network. I can make changes to all the PCs except one. I keep getting the message "The requested operation requires elevation". When I try to run a program as an admin, ...
3
votes
0answers
83 views

AD Replica DC Promotion Stall

I recently inherited infrastructure duties for a small startup I am working with. My traditional role has been development, so bear with me... I was hoping to start off on the right foot, and get ...
0
votes
0answers
82 views

Samba DLC and Windows 7 Clients. Random drop of connection. Kerberos?

I have a Samba (Version 4.1.6-Ubuntu) DLC (Server role: ROLE_ACTIVE_DIRECTORY_DC) on an Ubuntu Server (Ubuntu 14.04.1 LTS) Several Windows 7 Professional Clients are connected every day and usually ...
0
votes
1answer
121 views

Windows Server Essentials Experience DirSync Not Working After Adding Second Domain Controller

I recently did a domain upgrade for our office to Windows Server 2012 r2. Upon seeing the new Windows Server Essentials Experience and its ability to perform a directory sync with Office 365, I ...
-4
votes
1answer
182 views

Windows Server 2012 R2 Foundation joining a domain

Today I've had a problem with my Microsoft servers. This is my environment: Windows 2008 R2 standard: Domain Controller (AD) Telefon Server Windows 2012 R2 Foundation: Web Server (Apache) Some ...
2
votes
1answer
67 views

Single forest with multiple domains - authentication?

I have a single forest and a 2 domains in it. Remote sites have a mix of users from both domains. All of my domain controller are global catalogs and trusts are set up. Do I need to have domain ...
0
votes
1answer
34 views

Domain Controller Demotion & static ldap querys

I am going to be demoting some DC's and want to see if there is a way via wireshark or netstat or something to see if a server might be out there that has statically mapped to them for LDAP queries. ...
2
votes
2answers
530 views

Authenticate client against specific Domain Controller

I am having an issue with an active directory account not running login scripts. The scripts run fine in one location and not in the other. Getting the following errors in the event logs: ...
-1
votes
2answers
49 views

Prevent windows users from logging into, pinging, or browsing other workstations [closed]

Bluecoat security did an analysis of the Sony attack and says the following "This particular sample highlights the value of a network architecture where workstations cannot talk to each. While ...
0
votes
2answers
303 views

Adding client computers to an active directory domain controller

After facing a hell of a problem with adding a client computer to a domain controller, i followed the answer i got on this site and used my server's IP address as the preferred DNS on the clients ...
0
votes
0answers
16 views

Domain attached file server not authenticating with DC

I have 2 servers: Domain controller (Windows server 2012 std) - 192.168.1.2 Name dcsrv01 File server (Windows server 2012 std) - 192.168.2.2 Name fsrv01 The file server is domain attached. The two ...
1
vote
1answer
42 views

Replace the domain controller without copying the AD

we might have some special terms to do with replacing our DC. The current DC is running on an old machine with Windows Server 2003. As of the GPOs we aren't able to manage all new computers and as the ...