-3
votes
0answers
34 views

Active Directory (Samba 4) administration with free software on Linux [closed]

I've no idea about LDAP or Active Directory, but somebody installed Samba 4 for centralized user accounts for some infrastructure tools and I'd like to administrate users and groups from a Linux ...
0
votes
1answer
43 views

Active Directory DNS probelm

I have following scenario. Windows 2008 R2 base Active Directory DC (DC1), which is hosting DNS+ DHCP too. (previously it was on windows 2003 32bit, i migrated it last year on 2008 r2 64bit). Also ...
4
votes
2answers
154 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
2
votes
1answer
161 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
-1
votes
1answer
13 views

Windows Domain controller recover test

I'm testing a Exchange 2012 VM recovery in a Hyper-V test server. I have this VM, 2 DC and a Exchange server: SRVDC1 (pdc, nm, rid) SRVDC2 SRVEX2 As far as I know I need to recover also a Domain ...
1
vote
3answers
96 views

Add additional name to a Domain Controller

I am looking to rename a Domain Controller. Functional level and everything else means I can use netdom to carry out the process. Looking a the technet article on the subject I can see the first ...
0
votes
0answers
20 views

Creating Exchange account for user of subdomain

We have a W2008R2 server which serves as AD DC for intra.contoso.com and Exchange server. We have a W2012 server which serves as AD DC for subdomain sub.intra.contoso.com (which is not a new forest) ...
1
vote
0answers
20 views

Will the timezone be converted across geographical areas?

I'm using Active directory in Windows server 2008 R2. My domain is in a particular timezone and my client say X is in another timezone. Now I have implemented certain restrictions that X cannot logon ...
3
votes
3answers
248 views

How can I prevent the compromise of a Domain Controller on ESX stored in a unsecured location?

A client of ours has a DC that will be located in an insecure location. RODCs and separate domains/forests are not permitted by management. All the servers will be located on a VMWare ESX server. ...
0
votes
1answer
48 views

what happens to the local users and groups when promoting a server to a domain controller? [duplicate]

What happens to the local users and groups when promoting a domain member to a domain controller? I have a Windows Server 2008 that I have made to a domain controller by installing AD DS, but it was ...
3
votes
2answers
119 views

Windows Server 2012 Migration (DNS/AD DS Standard Eval to Essentials OEM) P2V -> Do I need a Secondary Domain Controller during migration?

This is my first post on this exchange (although not my first on stack exchange), so please have patience. I am a 3rd year student intern, and I have been tasked with virtualizing the server systems ...
1
vote
1answer
48 views

gpupdate failing when using Samba 4 AD DC

I have a Samba 4 AD domain running with 2 DCs on Centos 6.5, with a named DNS backend. I have multiple Windows 7 machines joined to this domain, which is fine. However, I can't get GPOs to apply. ...
0
votes
1answer
23 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
2answers
53 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
1
vote
1answer
60 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
0
votes
1answer
80 views

how to expose Domain Controller on public IP address, and make other DC talk to it?

basically we have 2 DC servers which used to have site-2-site VPN but it's not working anymore. So we started to get various errors, DNS stopped working, etc, etc. As a last resort attempt (before ...
13
votes
3answers
792 views

Why can I login to a box even if the AD Domain controller is down?

Scenario: While my DC is running, I log into an arbitrary machine. I stop the DC I log off the arbitrary machine. Let's bounce it for good measure, too. When the machine comes back up, I can still ...
1
vote
2answers
168 views

How to find which machines are configured for specific DNS server?

We are currently removing ancient DC's from our domain so we can upgrade and I ran into an issue the last time one was removed. We had a few old UNIX machines that were pointing to a certain DNS ...
1
vote
2answers
306 views

How to remove orphaned Domain Controller's DNS records?

It looks like in the past there were some two improperly decommissioned Domain Controllers (DC1 and DC2) that belonged to this domain. I am concluding this based on some remaining records in the ...
0
votes
2answers
79 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
0
votes
1answer
55 views

How can I upgrade an ancient Win 2000 based domain controller to Windows 2008/2012? (by replacement)

We're running Windows 2000 as our domain controller (!) and a separate backup domain controller, but as the PDC is 12 years old we would like to replace it. We have a couple of 2008 R2 and Win 2012 ...
3
votes
3answers
204 views

Active Directory - List ISP DNS servers as Forwarders?

Background: I have a relatively small Active Directory domain (Windows 2003 Functional level) with two domain controllers, both running DNS servers. They are the primary and secondary DNS servers ...
1
vote
0answers
59 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
2
votes
1answer
134 views

Domain Controller all FSMO roles, AD,DHCP,DNS 2008r2 backup best practice

hello I am looking to back up my 2008 r2 domain controller, we have 1 forest and 2 domain controllers, idomain-1 and idomain-2 idomain-2 is used for failover and idomain-1 replicates to it. having ...
3
votes
2answers
128 views

How Active Directory Dynamic DNS updates works behind the scenes?

I've looked through the AD documentation and I was not able to find any conclusive answer to this question. It's plain simple, but hard enough to be answered. How DDNS of AD works behind the scenes? ...
1
vote
1answer
47 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
95 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
8
votes
2answers
401 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
0
votes
1answer
58 views

Joining an AD domain from Workgroup with runas

I've got an user A who is connected to a Workgroup. From this Workgroup, now, I want to connect, with the console, to the user "john" who belongs to an active directory (MYAD) Though I try : runas ...
4
votes
2answers
296 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
6
votes
1answer
101 views

Active Directory Country capitals (letters)

Does someone know how to solve the problem of changing all country fields at once and probably why the country field is multiplied each time I select + apply a country change until the Object is being ...
-1
votes
1answer
63 views

Are (PRIMARY, SECONDARY / PRIMARY, BACKUP) Domain Controller already exist? [closed]

i know that since Windows 2000 was introduced there are no such things anymore like "primary" and "secondary" domain controllers. But if I run in the CMD on my redundant Domain Controllers ...
-2
votes
3answers
315 views

If my single domain controller is down, what happens? [closed]

I have comprehension question. Let us assume I have an ESXi environment about 20 running VMs. One of the 20VMs is the domain controller (DC01) as a single domain controller (no other sides are ...
2
votes
1answer
335 views

What's the downtime limit of a domain controller (DC)?

On my VMware ESXi environment there are 10 VMs running. One of the VMs is the domain controller (Windows Server 2008 R2). The other VMs are configured with a static DHCP and DNS IP address in their ...
2
votes
1answer
62 views

Is this USN Rollback?

I have 6 Windows 2008 R2 Domain Controllers, all GCs, across multiple locations (2+2+2). On my main site I have a clone of one of our DCs done a few month ago, usually totally isolated from the ...
-1
votes
1answer
83 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
0
votes
1answer
482 views

Join Windows 2003 R2 guest to Windows 2012 R2 domain controller

I'm trying to join a Windows Server 2003 R2 guest to a domain with a Windows Server 2012 R2 Domain controller server. I get the error "The following error occured attempting to join the domain ...
24
votes
7answers
2k views

Is it best practices to have separate login for a domain for domain admins?

I typically like to set up separate logins for myself, one with regular user permissions, and a separate one for administrative tasks. For example, if the domain was XXXX, I'd set up a XXXX\bpeikes ...
3
votes
1answer
60 views

Can a Server Foundation 2012 machine serve as a backup domain controller to a machine running Server Foundation 2008?

In this particular context we have a small business (10 user office) looking to establish a Domain setup. There is already one machine running Server Foundation 2008. If that machine is selected as ...
0
votes
1answer
40 views

We're migrating everything to the cloud - is there a reason to keep Active Directory around? [duplicate]

We are "cloud-sourcing" all our services (web, databases, file storage, e-mail, print, DNS). As authentication is made on the could-provider side, I'm wondering about the pro and cons to keep our ...
-4
votes
1answer
73 views

Why does second domain controller not display [closed]

We have 2 domain controllers DC1 and DC2, both sharing the same AD database The "Active directory users and computer" console of both DC1 and DC2 display DC1 only, under "Domain Controllers". what ...
4
votes
3answers
985 views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
0
votes
2answers
336 views

Windows Clients connecting to DC in wrong site?

Ok so Sites are separated by WAN Domain : production.contoso.local SITE A Site network: 192.168.0.0/16 Site DCs : DC1-SiteA, DC2-SiteA Client : serverA ...
0
votes
0answers
699 views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
3answers
119 views

Why is the secondary interface address on our AD DCs in our domain's primary DNS zone?

We have 2 hardware interfaces on our Active Directory Domain Controllers. The secondary interface should never be listed in our domain's DNS zone, but it is. This is problematic because most machines ...
0
votes
3answers
286 views

Group Policy not replicating - Server 2012

I have 2 DCs. Both are Server 2012. For some reason Group Policy does not replicate between them and the client keeps getting : The processing of Group Policy failed. Windows attempted to read the ...
2
votes
2answers
62 views

Is a gradual migration from a workgroup to a domain possible?

I have a small setup of around ~30 computers [some of which are located at a remote office] that I need to get migrated over from a workgroup to a domain to maintain my sanity. The previous admin ...
0
votes
2answers
1k views

How can I change dns name on domain controller?

I am in the process of trying to clean up after a domain rename gone bad. The rename was from xxx.com to hq.xxx.com My current problem is that I cannot login to the DC (only DC on network) Logging ...
0
votes
0answers
88 views

What happens when one of the 2 DC's goes down

There are 2 Domain Controllers running Windows Server 2003 x64 R2. The installed roles of DC1 (10.0.0.1) are: File Server, Print Server, Application Server, DNS Server and of course Active Directory. ...
1
vote
1answer
63 views

Active Directory Site/Domain Interactions

I'm having an issue wrapping my head around the myriad Active Directory components, and I'm hoping I can get some opinions or corrections from someone. At our workplace, we used to have individual ...