A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

0
votes
0answers
30 views

Power User with Elevated Access on Domain Network

We have new IT Helpdesk staff joined our firm and we'd like to provide them with an account with power user privileges in such they can only elevate access on user computers to install, uninstall ...
0
votes
3answers
71 views

Can I use my 2 domain controllers also as my 2 node file server cluster?

I already have 2 domain controllers running Windows Server 2012 R2. This network doesn't have any file servers or SANs. It hardly needs any. But, I have one small need for a shared file folder and ...
0
votes
1answer
50 views

Configuring Windows Times Service for non-PDC emulator

Not to get to deep into the weeds, here's the gist. A SysAdmin of ours created GPOs on the Domain Controllers Policy (DCP) and we've been having time issues ever since. Neither he nor I know if the ...
1
vote
0answers
35 views

DC's on separate sites, VPN connection, gateway change - can't see each other

Ok I had a working setup and I know what the issue is but just asking if simple way to fix. Two offices each with DC on different IP ranges, 160.0.1.x and 160.0.2.x. The VPN goes to a router ...
0
votes
0answers
28 views

Lexmark X795 color printer

Issue I have this issue with Lexmark X795 color printer. It's defaulting to Tray 3, when printing, for every single user. Even if I make Tray 1 a default tray, it'll still print to tray one. ...
-1
votes
1answer
83 views

active directory domain resolution - public DNS? [closed]

I am not sure how all these are being link up , but right now , my PC is joined to my company AD domain at "whatever.local" I am pretty sure that "whatever.local" is not resolvable in the public ...
0
votes
1answer
85 views

Migration and Domain Rename

We are migrating away from an old Windows 2003 domain controller, and moving to a Windows 2012 R2 domain controller. However, there are a few issues I need to clear up due to the configuration of the ...
1
vote
1answer
55 views

DNS Active Directory Zone Replication Scope (Forest vs Domain)

When I create a new Domain Controller with dcpromo then the wizard will also add a DNS Role to the server because the first domain controller must be the global catalog server for the forest. After ...
0
votes
1answer
67 views

active directory domain vs dns domain - are they the same? [duplicate]

I am new to windows environment and am trying to set up an AD and Domain controller Are an Active Directory domain and a DNS domain technically referring to the same thing? Must they be the same at ...
2
votes
1answer
54 views

Logging in locally to Domain controller - Windows AD [duplicate]

After enabling my AD role in my Windows Server 2012 R2 and promoting it as a Domain Controller, I am no longer able to login locally onto the Windows Server itself. Specifying my ...
0
votes
1answer
27 views

DC Promo With DNS Windows 2008R2 Resulting In Weird Network Error

I am preparing for DC domain migration in which I am encounter some error that I had never encounter in my VM testing environment. Note: This is the first time I am setting up an active DC with DNS. ...
-1
votes
4answers
103 views

Domain Controller as EC2 instance

We've successfully extended our on-premises active directory to AWS, creating domain controllers as EC2 micro instances, we loosely based our setup on the Amazon White Paper: Implementing Active ...
0
votes
0answers
26 views

Log off local active directory user (force) [duplicate]

How do I force logoff from my windows server 2008 on a locally logged in active directory user that is logged in to a physical computer (no terminal services) I need this for emergency cases if ...
13
votes
4answers
2k views

How bad is it to run Exchange 2016 on a Windows 2012 R2 domain controller for a small organization with assuredly fewer than 25 users?

I know that it has been officially unsupported forever and yet I have seen or heard about many small business installations of a single host running AD DS and Exchange simultaneously. For a ...
0
votes
0answers
38 views

Accidently stopped sharing netlogon share

As the title suggests, I accidentally stopped sharing the netlogon share. I understand the importance of it and have since shared it out again to the default groups (everyone with read-only & ...
2
votes
0answers
43 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
2
votes
1answer
154 views

Preferred vs alternate DNS, DNS failover with Active Directory

Question. I have a Windows AD Domain with two DCs. I find that name resolution becomes very unreliable when my "primary" Domain server is offline. How can I fix this? I am running two Windows Server ...
1
vote
2answers
150 views

general questions about DNS routing

Question. I have a Windows AD Domain and there is one part that is a mystery to me: how is the Windows Domain / DNS Server doing lookups for domains outside of the Windows domain? In a simple home ...
0
votes
1answer
75 views

IP Switch between 2 domain controllers

I have several domain controllers in my domain and I need to switch the IP between 2 of them ( one with Windows Server 2k8 R2 and one with Windows Server 2k12 R2 ) I did the following steps until ...
0
votes
0answers
56 views

Rebuilding Domain From Scratch. How to Use Old Netbios Domain Name on new DC?

I have a client that I am currently in the process of upgrading from Windows Server 2003 to Windows Server 2012R2. They are a small business, working off of a single server. The decision was made to ...
1
vote
2answers
98 views

best practice for deploying file shares in Remote Desktop Services

We are setting up a new virtual Remote Desktop Services deployment for 10 users in Azure, with 2 domain controllers and 2 RDS servers. Our requirement is to have resilient and fast file system for ...
1
vote
2answers
151 views

can't promote server to domain controller

Long story short, I had a DC running perfectly but it was on Server 2012 R2 Standard Evaluation. In order to change from Eval. to Full, I had to create a 2nd DC server, transfer Operational Masters, ...
0
votes
0answers
159 views

Samba 3.6 doesn't accept force user / force group with domain name user

I had a samba 3.5.x install (CentOS 6), joined to an AD domain named EXAMPLE. I also have a local user/group on a linux boxes example:example. This is an example share: [app] ...
0
votes
1answer
33 views

Different local hostname and CN on domain controller

is there a way to name a server locally "LocalOwnServer" but with a different name on a Domain Controller (ie. "DomainOwnServer")? so, I would like to exec cmd command hostname and to get the result ...
2
votes
3answers
66 views

Server with GC, CA, WSUS replication passed tombstone period

To cut a long story short, we have inadvertently ended up with a Windows Server 2003 DC that has now passed the 60 day tombstone period for replication. As well as a DC it is also a Global Catalogue, ...
1
vote
3answers
160 views

Is it “OK” to use the windows firewall for a DC with a public ip?

I currently have several dedicated Windows web servers which are hosted in different regions. Until now, I have been managing them without Active Directory, but I feels that it adds a lot of ...
0
votes
0answers
76 views

Enforcing domain based policies on a mixed Mac OSX/Windows network

We have a primarily Mac based network of around 120 computers, split about 90% Mac and 10% PC. Right now, all management is largely ad hoc with no central provisioning. We're well passed the point ...
1
vote
1answer
161 views

Demoting SBS 2008 to be a member server

I have migrated a domain from SBS 2008 to Server 2012 R2, transferring FSMO roles, DHCP, DNS etc. The 2012 server is now a domain controller. Exchange has already been decommissioned with mail ...
1
vote
0answers
470 views

Send message to all logged in clients in active directory from windows server 2008

Hello I'm wondering how i can notify ALL my users that is currently logged in on their client computers that there will be a maintainance and such? the msg command does not work for me i've tried. ...
-1
votes
1answer
39 views

Failed physical DC restored to VM. How to go back? [closed]

I've a DC (no secondary in thie environment) with the raid controller failed. I've retored it temporary on a VM using the backup (ShadowProtect). On the system partition I have 2 SQL Express DBs used ...
1
vote
0answers
72 views

samba authentication issue for one specific user account

I'm facing a pretty annoying issue with Samba. Here is my setup: Windows Server 2003 + Active Directory (users authentication) NAS Server (Ubuntu 12.04 + PBIS Open Broker so this NAS is registered ...
0
votes
1answer
87 views

What we do when a Domain Controller crash?(Windows) [closed]

Assuming that we have only one domain controllers were present in network, what steps need to be taken to restore the network after a domain controller crash? Configuring RODC is a good way to ...
0
votes
1answer
28 views

setting up a domain server using windows server 2012 r2 VM [closed]

I am getting ready to setup a server with 2012 r2 VM and im thinking about changing our network over to a domain. I have done some research but have not found a really good tutorial. The questions i ...
3
votes
0answers
159 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
2
votes
1answer
82 views

New Domain DC Adds FQDN (including forest) to DNS - Cant Resolve

I added a new domain recently to our AD. It was added using the option to add a new domain to an existing forest. So now we have the original domain.local which is in the forest also called ...
-3
votes
2answers
120 views

Demoted the Domain Controller and would like to promote again

I have demoted the active Directory server "dc01"--running Windows server 2012 r2--and would like to promote it again. I also didn't make a note of what FSMO roles it held before I demoted it. How ...
0
votes
0answers
161 views

Sync NT4 SAM setting with Samba4 - possible?

I've got a Samba4 installation set up as a backup domain controller: james@photon:~$ testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum ...
0
votes
1answer
57 views

sssd using remote ad servers instead of local ad servers

I am using sssd to join Redhat servers to a windows server 2008 r2 domain. Most of the time things work fine but I have noticed that sssd is trying to reach remote domain servers instead of being ...
1
vote
1answer
150 views

DC1 Can't See DC2 Nor Network Machines Can't See Domain

Using Windows Server 2008 R2 Found an issue with my Domain Controller 1. Setup is basic and the main domain controller is hosting AD and DNS. The secondary cannot find the primary. dcgetdcname ...
3
votes
1answer
91 views

How do I prepare local domain controller for uplink outage

My site will be losing connectivity to the rest of the network for a few days up to a week. When we've had outages before I find we get delays browsing local shares and very long delays logging in. ...
0
votes
1answer
144 views

An Active Directory Domain Controller to the domain … could not be contacted [closed]

I got this error: Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has ...
1
vote
4answers
1k views

Windows Server 2012 - Can't join computer to the domain

This was supposed to be an easy one but I ran into an issue here. I set up the domain and a static IP on the server. The server is connected to a router/AP (which obviously functions as a switch) as ...
1
vote
2answers
686 views

Must the root domain name be registered when creating a new forest in Active Directory?

When creating a new forest in Active Directory on my domain controller running Windows Server 2012 R2, I was prompted to specify a root domain name. Must the domain name be registered and owned by me? ...
0
votes
0answers
189 views

Changing Active Directory Root Domain / Forest Domain Name

I have created an AD Network where the root / forest domain is chicago.mydomain.com. I realized that it should have been best to make the root / forest domain mydomain.com and then create the ...
4
votes
3answers
174 views

Should i disable DNS recursion?

I have two Domain Controller, both are DNS server and i have set Forwarder for both ( as per below Print-screen ) but i have not disable recursion on both server ( please see below print-screen ) ...
2
votes
1answer
137 views

Cleaning up after demoting old DC

I recently added a new Server 2012 DC and took the previous 2003 DC offline. The Server 2012 DC is now the only DC on the network. I also added an alias (CNAME) so that the new server can be accessed ...
0
votes
1answer
125 views

How can I create a filter in Active Directory to show only 'Enabled' Computer Accounts

Please note: I am referring to COMPUTER accounts. Not USER accounts. In Active Directory, it is easy to create a filter to show only Disabled Computer Accounts by ticking the box "Disabled Accounts" ...
0
votes
1answer
46 views

What actually happens when a computer is deleted from Active Directory? [closed]

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
2
votes
3answers
277 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
1
vote
5answers
544 views

How to establish trust relationship when logging in with the old password and network disabled?

I have two computers in the same domain that I use, recently I changed the domain password on one of them. When I tried to login with the same account on the other machine I get: The trust ...