1
vote
0answers
52 views

Active Directory Mismatch

I have a Active Directory Mistmatch how do I fix this? I have 2 x 2008 R2 Domain Controllers and a 2008 Domain Controller and I was trying to add a 2012 R2 Domain Controller. The Schema Version of ...
-1
votes
0answers
52 views

2008 R2 DC / ADDS disaster recovery plan help needed [closed]

First off, I have a perfectly healthy production domain with 2 domain controllers. One is 2008R2, the other is Server 2003. Replication occurs between them, the only issue is there on the same site. ...
1
vote
2answers
84 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
2
votes
1answer
237 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
0
votes
1answer
27 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
1
vote
1answer
100 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
0
votes
2answers
92 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
0
votes
1answer
68 views

How can I upgrade an ancient Win 2000 based domain controller to Windows 2008/2012? (by replacement)

We're running Windows 2000 as our domain controller (!) and a separate backup domain controller, but as the PDC is 12 years old we would like to replace it. We have a couple of 2008 R2 and Win 2012 ...
1
vote
0answers
60 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
2
votes
1answer
230 views

Domain Controller all FSMO roles, AD,DHCP,DNS 2008r2 backup best practice

hello I am looking to back up my 2008 r2 domain controller, we have 1 forest and 2 domain controllers, idomain-1 and idomain-2 idomain-2 is used for failover and idomain-1 replicates to it. having ...
1
vote
1answer
51 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
-1
votes
2answers
91 views

changed public ip address of domain controller now other servers cannot find dc [closed]

I have 3 virtual machines. I had to move them to another dedicated server since the company I was using is having so many issue. The new dedicated server, of course, has new ip addresses. They are ...
1
vote
1answer
110 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
9
votes
2answers
483 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
0
votes
1answer
58 views

Joining an AD domain from Workgroup with runas

I've got an user A who is connected to a Workgroup. From this Workgroup, now, I want to connect, with the console, to the user "john" who belongs to an active directory (MYAD) Though I try : runas ...
3
votes
3answers
1k views

How To Properly Setup DNS Forwarders On Windows Server

I was wondering how to properly setup DNS forwarders on Windows Server 2008 R2. I have three Domain Controllers. Each of the DC's have have following: AD Role DNS Role DHCP Role Static IP Address ...
2
votes
1answer
117 views

DHCP Warning Sign Icon On Windows Server

I have a Windows Server 2008 R2 SP1 Domain Controller. I have the roles AD, DHCP, and DNS installed on this server. I noticed today that there was a warning sign on my IPv4 setting, but not on my IPv6 ...
4
votes
2answers
449 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
6
votes
1answer
109 views

Active Directory Country capitals (letters)

Does someone know how to solve the problem of changing all country fields at once and probably why the country field is multiplied each time I select + apply a country change until the Object is being ...
0
votes
1answer
99 views

My first Domain Controller upgrade (2008R2 to redudant 2012), please help me, i need some tips

At the moment on our ESXi Server are 10 VMs running. One of the VM is the Domain Controller (Windows Server 2008 R2). On this Domain Controller are role like AD, DNS, DHCP and Wins installed. The hole ...
2
votes
1answer
67 views

Is this USN Rollback?

I have 6 Windows 2008 R2 Domain Controllers, all GCs, across multiple locations (2+2+2). On my main site I have a clone of one of our DCs done a few month ago, usually totally isolated from the ...
1
vote
2answers
153 views

What precautions should I take before demoting domain controllers?

I know how to demote a domain controller (done it before) but I need to do it for two physical old DCs on a much more 'important' and strictly controlled domain than that which I previously did it ...
2
votes
2answers
155 views

How to recover a Domain Controller after disabling and reenabling File and Printer Sharing?

In an attempt to improve the security of my Windows Server 2008 R2 with Exchange 2010 SP3, I decided to test if File and Printer Sharing was really important to allow Exchange to work (thats all I ...
2
votes
2answers
288 views

File Replication not working

Could somebody please help me identify an issue I suddenly started having with Replication between 2 of our DCs. I inherited this system which was working perfectly fine but the problem happened ...
1
vote
3answers
156 views

Upon failure of DC, force server to find Secondary DC

In this SF question, I asked how to determine which DC a server was talking to. We are doing some resilience testing and need to demonstrate to the client that if a DC fails, there are additional DCs ...
-4
votes
1answer
150 views

settings up active directory accessible from the internet [closed]

For my small company i want to setup a domain controller I want users to be able to access the domain controller from their laptops via the internet. I need the DC for policies & management of ...
0
votes
1answer
57 views

how to I enable remote desktop on specific domain machine only

I have created an Organization and assigned a GPO to it. I have 3 computers on this domain. The domain controller, the remote desktop computer, and the sql server. I only want to enable remote ...
0
votes
2answers
74 views

Simple check to confirm access to a Domain Controller

I'm preparing for a battery of resilience tests on a new network (which will be hosting a mission-critical application). As part of it, I ought to confirm the resilience of the domain controllers. We ...
8
votes
1answer
211 views

Why would a domain controller encouter a USN rollback after an unclean shutdown?

I have this Windows Server 2008 R2 domain controller running on a physical Dell server, model PowerEdge R510. There are some electrical problems around here, thus a black-out is, unfortunately, quite ...
1
vote
2answers
297 views

How Transfer All the OU, User and Computer Accounts from Window Server 2008 R2 to Windows Server 2012 Standard

I have a situation here that requires me to transfer all the OU, User and Computer Accounts to another domain, which is from Windows Server 2008 R2 to Windows Server 2012 Standard. How to do this ...
1
vote
2answers
1k views

Migrating existing domain to a new domain controller and keeping the server name

My current problem is the following migration scenario: Existing domain: Domain-Controller (Windows Server 2003 x86) named "W2003SRV" with domain DOMAIN.LOCAL Terminal-Server 1 (Windows Server 2008 ...
0
votes
2answers
692 views

Mutli-DC Environment DNS Error 4015

We recently added a new 2008 R2 DC to an existing 2003 forest with one 2003 DC. We haven't raised any functional levels. The 2003 DC was powered down (it hadn't been demoted yet, but all the FSMOs are ...
4
votes
2answers
645 views

Can I use Windows 8 clients with a Windows 2008 R2 Domain Controller?

I'm sure I can, but are there any incompatibilities or problems to be aware of? We have a domain controller with a few Windows 7 clients already. It is working fine. I had the idea to install ...
0
votes
0answers
56 views

Why do all my 'Forwarders' tabs only list the domain's domain controllers?

I have recently created two new domain controllers in my network, running Windows Server 2008R2. There were two domain controllers already on the network (Windows Server 2003) In the new domain ...
1
vote
2answers
84 views

Adding second Windows Server to domain

I have a Windows Server 2008 R2 Server (Server A) running as a domain controller with Active Directory, Group Policy, and DNS services. I set up a second Windows Server 2008 R2 server (Server B), ...
3
votes
3answers
216 views

Active Directory delegation best practices

I am in the process of delegating some Active Directory tasks to a group of users. These users do not have domain administration rights and will only perform tasks such as creating/disabling accounts ...
1
vote
0answers
1k views

AD Replication Errors / KCC - Between two Domain Controllers

I'm having quite an issue that began a few days ago. Let me just lay out exactly what happened - also I've inherited this environment, please keep that in mind. 1st Domain Controller - Windows ...
2
votes
1answer
2k views

DCPROMO on new remote Domain Controller fails because “the RPC server is unavailable”

I'm helping a (devops) client move their technology stack (VMware, Windows AD, Ubuntu Linux) from their old co-location facility to a new environment. Rather than move the hardware and systems ...
1
vote
2answers
2k views

Cannot create a new domain in an existing active directory forest

I have a domain controller setup on Windows Server 2008 R2 (Forest) and I have another Windows Server 2008 R2 (New Domain) and I want to create a new domain in an existing forest. I get the following ...
1
vote
1answer
369 views

DC/DNS failover with global/common DNS roundrobin

I think I am getting lost in network failover land. I am trying to set up a Windows Domain Controller and DNS, while providing resilients and failover. I have two Domain Controllers and DNS servers. ...
0
votes
1answer
73 views

caches domain user on local PC

We have a fully working domain in UK and around the world we have user who use VPN ( checkpoint) to connect to or domain. One of the user in USA has a laptop which he never logged on to before ( it ...
1
vote
0answers
2k views

Windows Server 2008 R2 DC can't ping to other computers except other DC

I have been trying to troubleshoot this problem since 20 hours ago, and still can't find a solution. I brought down (orderly shutdown) a Domain Controller yesterday. No problem at all connecting to ...
-2
votes
1answer
380 views

Windows 7 PC refuses to join domain [closed]

So, we're wiping clean all PCs at our office and migrating them to a new server cluster and a new domain. Last night I tested on PC and it mostly worked except it refuses to join to the domain. Now, ...
2
votes
2answers
801 views

RDP add domain users broken

I have 3 Windows Server 2008 R2 instances, all of which are virtual machines hosted on a single VMware ESX server: Domain controller with DNS services DHCP/RRAS File server All three servers are ...
0
votes
1answer
365 views

Setup a new domain controller over a temporary VPN, but now Windows delays startup?

I'm migrating servers from colo locations to Amazon's VPC EC2 instances. If anyone hasn't worked with Amazon VPC before, VPN is a pain in the arse! Anyways, I setup a new server that acts as the ...
2
votes
2answers
408 views

Why do clients on Branch Sites insist on accessing SYSVOL on the HQ DC instead of the branches' RODC?

I'm still scratching my head over this situation... You see, we have 3 RW DCs in the HQ, and 1 RODC on every branch sites (50+ locations). During startup, a script will pull in some files from ...
3
votes
1answer
7k views

Which firewall ports do I need to open in order for a domain trust to work?

I have two Active Directory domains in two different forests; each domain has two DCs (all of them Windows Server 2008 R2). The domains are also in different networks, with a firewall connecting them. ...
-1
votes
2answers
226 views

allow client to change registry [closed]

How can I grant user to write to win7 registry. He is in domain win2008 R2. What I must change in group policy to allow access? He is trying to run some portable aplication and without this cant run ...
0
votes
4answers
318 views

Windows Server Connected to Domain Without Being Domain Controller

Can a Windows Server be connected to an Active Directory domain without being a domain controller? Here's the scenario: I want to use Windows Server 2012 to run several virtual machines for testing ...
1
vote
1answer
856 views

Transfer a Domain Controller role with its global catalog to another server? [duplicate]

Possible Duplicate: things to check prior to moving all FSMO roles to a new domain controller before decommission original old domain controller I'm trying to looking for a post in Technet ...