A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

1
vote
0answers
30 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
2
votes
1answer
27 views

New Domain DC Adds FQDN (including forest) to DNS - Cant Resolve

I added a new domain recently to our AD. It was added using the option to add a new domain to an existing forest. So now we have the original domain.local which is in the forest also called ...
-3
votes
2answers
32 views

Demoted the Domain Controller and would like to promote again

I have demoted the active Directory server "dc01"--running Windows server 2012 r2--and would like to promote it again. I also didn't make a note of what FSMO roles it held before I demoted it. How ...
0
votes
0answers
31 views

Sync NT4 SAM setting with Samba4 - possible?

I've got a Samba4 installation set up as a backup domain controller: james@photon:~$ testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum ...
0
votes
1answer
15 views

sssd using remote ad servers instead of local ad servers

I am using sssd to join Redhat servers to a windows server 2008 r2 domain. Most of the time things work fine but I have noticed that sssd is trying to reach remote domain servers instead of being ...
1
vote
1answer
93 views

DC1 Can't See DC2 Nor Network Machines Can't See Domain

Using Windows Server 2008 R2 Found an issue with my Domain Controller 1. Setup is basic and the main domain controller is hosting AD and DNS. The secondary cannot find the primary. dcgetdcname ...
3
votes
1answer
67 views

How do I prepare local domain controller for uplink outage

My site will be losing connectivity to the rest of the network for a few days up to a week. When we've had outages before I find we get delays browsing local shares and very long delays logging in. ...
0
votes
1answer
52 views

An Active Directory Domain Controller to the domain … could not be contacted [on hold]

I got this error: Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has ...
1
vote
4answers
58 views

Windows Server 2012 - Can't join computer to the domain

This was supposed to be an easy one but I ran into an issue here. I set up the domain and a static IP on the server. The server is connected to a router/AP (which obviously functions as a switch) as ...
1
vote
2answers
45 views

Must the root domain name be registered when creating a new forest in Active Directory?

When creating a new forest in Active Directory on my domain controller running Windows Server 2012 R2, I was prompted to specify a root domain name. Must the domain name be registered and owned by me? ...
0
votes
0answers
31 views

Changing Active Directory Root Domain / Forest Domain Name

I have created an AD Network where the root / forest domain is chicago.mydomain.com. I realized that it should have been best to make the root / forest domain mydomain.com and then create the ...
4
votes
3answers
100 views

Should i disable DNS recursion?

I have two Domain Controller, both are DNS server and i have set Forwarder for both ( as per below Print-screen ) but i have not disable recursion on both server ( please see below print-screen ) ...
2
votes
1answer
56 views

Cleaning up after demoting old DC

I recently added a new Server 2012 DC and took the previous 2003 DC offline. The Server 2012 DC is now the only DC on the network. I also added an alias (CNAME) so that the new server can be accessed ...
0
votes
1answer
31 views

How can I create a filter in Active Directory to show only 'Enabled' Computer Accounts

Please note: I am referring to COMPUTER accounts. Not USER accounts. In Active Directory, it is easy to create a filter to show only Disabled Computer Accounts by ticking the box "Disabled Accounts" ...
0
votes
1answer
38 views

What actually happens when a computer is deleted from Active Directory? [closed]

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
2
votes
3answers
44 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
1
vote
5answers
372 views

How to establish trust relationship when logging in with the old password and network disabled?

I have two computers in the same domain that I use, recently I changed the domain password on one of them. When I tried to login with the same account on the other machine I get: The trust ...
0
votes
1answer
55 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
1
vote
2answers
48 views

After a DC loads the DNS zone does it ever have to contact the DNS server again?

I have a DC in a branch office. The DC is pointed to another DNS server in a central office (which is also a DC) for its primary DNS. So let me make sure I understand how this works: When the DC ...
0
votes
1answer
25 views

Is there a way to manage machines which are off-domain centrally?

We have a number of three tier setups here which are mostly Windows Server 2008 boxes. They tend to consist of 1 web server, 1 application/web services server, 1 db server. As this is a three tier ...
0
votes
1answer
25 views

Upgrade Server 2012 Standard Evaluation member server to Standard

I've been running a Server 2012 Standard evaluation as a member server for a while - it has been a remote site AD server that connects to our existing Essentials domain ("PDC"). The server has been ...
0
votes
0answers
17 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
1
vote
0answers
30 views

Certain GPO settings are not taking effect on Clients

I've been trying to deploy a printer with Print Management on Server 2012 however it never appears on any of the clients after deployment. And this is not only the case with printers, the same thing ...
0
votes
0answers
45 views

Deployment of Base-Node via iSCSI in Server 2012R2 HPC cluster fails (can not join domain)

We are currently evaluating Server 2012R2 with HPC Pack for an upcoming project. Sadly we are stuck at deploying the base node. The node boots via PXE (iPXE) and connects to iSCSI, installs Windows ...
3
votes
2answers
49 views

After setting PDC to external time source, do I have to perform a similar action for every pc/server to sync with PDC?

Server 2012 R2 as PDC, Hyper-V servers and Win 7/8 workstations I have my PDC synchronized to an external time source. What is my next step in getting my domain synchronized with regard to the PDC's ...
3
votes
0answers
78 views

How do I fix the Event ID 10154 regarding SPNs?

Server 2012 R2, Hyper-V VM-PDC w/ AD DS, DNS (single DC still; 2nd will be created shortly) The Event ID 10154 General comments state: The WinRM service failed to create the following SPNs: ...
1
vote
1answer
41 views

How do I manually check if Time Service is advertising or not?

Server 2012 R2, Hyper-V VM-PDC w/AD DS, DNS I originally had an Event ID 12 and successfully setup the time service as covered in this post. The Event ID 12 no longer shows up during startups. ...
0
votes
2answers
53 views

Should integration services always be installed on a Hyper-V VM?

Server 2012 R2, Hyper-V In researching my PDC time synchronization problems (noted in this serverfault post) I came across this Microsoft guidance at this link: "For virtual machines that are ...
1
vote
1answer
43 views

Fax Server on a Domain Controller

So I have this Fax number attached to a modem inside a Windows 2012 R2 DC. I followed the steps on: https://technet.microsoft.com/en-us/library/jj134193.aspx to install and configure the Fax Service. ...
1
vote
1answer
58 views

How do I confirm what my PDC is using for it's time source and how do I setup an external time source?

Server 2012 R2, Hyper-V I am trying to finalize setting up my first primary domain controller. One of the warnings that always comes up after first promoting the DC is Event ID 12 along with other ...
1
vote
1answer
40 views

Creating Offline Test environment

So I'm trying to create a test environment that hosts a copy of one of the domain controllers in production and I was wondering if anyone has some insight on the best way to perform the "copying" of ...
5
votes
1answer
101 views

Cannot transfer controller operations master role or demote a domain controller

Server 2012 R2, Server 2012, Domain Controller role After experiencing some permissions problems on my domain I noticed that my 2nd domain controller appears to be corrupted in some way (I'm sorry ...
0
votes
0answers
111 views

Promoting Windows Server 2012 to DC, cannot create DNS delegation because SBS 2003 DNS server is not found

I'm promoting our new Windows Server 2012 Essentials box (ASH) to Domain Controller so that I can then deprecate and demote our failing Windows SBS 2003 box (PINE), which is the only current DC. ...
0
votes
1answer
142 views

The configuration information describing this enterprise is not available - Error I receive

I have Windows Server 2012 R2 installed and when I navigate to 'AD DS' and try to go to 'Active Directory Domains and Trust' the error I receive is "The configuration information describing this ...
0
votes
2answers
63 views

Using Exchange 2013 with Samba as DC

I realize that Exchange relies heavily on AD, and I was wondering if it is possible install Exchange 2013 into an environment that is running Samba 4 as the DC?
2
votes
1answer
195 views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
1
vote
1answer
32 views

Active Directory 2008 multiple local user accounts

I have installed a new Active Directory 2008 Domain controller into my environment. We are currently running the 2008 AD server as a secondary. The primary AD server is a 2003 Domain Controller. We ...
0
votes
0answers
19 views

several domain controller logon

I've got two domain controllers. The master is DC01 and slave Fil01. I got that problem, that some computers logon over the slave dc and not the master. How can I set the order or prevent them on ...
0
votes
1answer
65 views

What user accounts are necessary on the domain controller pc?

2012 R2 environment When a server is created to be a domain controller, it can be setup using the domain\administrator account when is attached to the domain. The machine will also have the default ...
3
votes
1answer
320 views

DCOM Communication Error on Domain Controller

DCOM was unable to communicate with the computer 8.8.8.8 using any of the configured protocols; requested by PID 1830 (C:\Windows\system32\dcdiag.exe). This error and a couple of others to different ...
1
vote
0answers
38 views

SMB server's behavior under NT Domain and Active Directory Domain

(1) If SMB server joined to the NT Domain, does the SMB server itself executes a user authentication by communicating to a Domain Controller? To do it, does SMB client need to send a Type3Message ...
0
votes
1answer
168 views

How do I enable Remote Desktop Connection on a domain controller?

So I've come to the conclusion that something by default must prevent RDC from operating on a 2012 R2 DC. This particular post (link) suggests RDC on a DC is a bad idea and the I understand the ...
1
vote
0answers
17 views

Domain Controller Roles not properly configured

I added a W2008R2 domain controller to a domain which previously had two W2003 domain controllers. I want to demote and remove the W2003 server that held the primary roles. I successfully ...
1
vote
1answer
25 views

Windows Server Domain User and Workstation Software

I have a new server with windows server 2012(domain) and want to add a few new users and workstations( with AD), so all user could login on all workstations. That is easy, but now I would like to add ...
3
votes
0answers
56 views

Exchange 2013 and AD/GC issues

I have Exchange 2013 (minimal install and all roles are on a single server) on-premises running on a Windows 2012 R2 server (both Windows and Exchange are patched and up-to-date). Basically this ...
0
votes
3answers
40 views

Windows 2003 DC in 2008 functional level

Is it possible to have a 2003 DC in a domain with a 2008 functional level? I was under the impression that the functional level was limited by the lowest OS version of the DCs. Are there potential ...
1
vote
2answers
190 views

Should my exchange server also be a domain controller?

Please be kind in your response I'm no expert. I just want to know if it's a bad idea or good idea for my Server 2012 server that has Exchange 2013 to also be a domain controller. We currently have 3 ...
-3
votes
1answer
47 views

How Active Directory identifies a computer? [closed]

I have no administrative rights to AD in my company. I have also a virtual machine (based on Virtual Box). I want to plug it into the AD with the same identity as my PC has. How AD domain controller ...
0
votes
2answers
52 views

Windows refuses to add an additional DC

I am trying to add a second DC to my network. It seems to go well: I install AD DS on a second server, I enter my credentials and the domain, and the domain is shown. I choose it, but when I click ...
1
vote
2answers
97 views

Replace DC/DNS in Active Directory

I have just tried to replace one of my domain controllers in a single domain forest keeping the old IP (But a new computername). As this is an environment I have "inherited" from a previous sysadmin I ...