A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

2
votes
2answers
1k views

Windows Server 2008, rejoining domain fails

I have two windows 2008 servers, which have been unjoined from the domain for a long time. I tried to rejoin them to previous domain and one of the servers could rejoin successfully, but the other ...
2
votes
1answer
27 views

New Domain DC Adds FQDN (including forest) to DNS - Cant Resolve

I added a new domain recently to our AD. It was added using the option to add a new domain to an existing forest. So now we have the original domain.local which is in the forest also called ...
-3
votes
2answers
31 views

Demoted the Domain Controller and would like to promote again

I have demoted the active Directory server "dc01"--running Windows server 2012 r2--and would like to promote it again. I also didn't make a note of what FSMO roles it held before I demoted it. How ...
0
votes
1answer
48 views

An Active Directory Domain Controller to the domain … could not be contacted [on hold]

I got this error: Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has ...
6
votes
0answers
202 views

AD Replica DC Promotion Stall

I recently inherited infrastructure duties for a small startup I am working with. My traditional role has been development, so bear with me... I was hoping to start off on the right foot, and get ...
2
votes
1answer
1k views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
0
votes
0answers
29 views

Sync NT4 SAM setting with Samba4 - possible?

I've got a Samba4 installation set up as a backup domain controller: james@photon:~$ testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum ...
0
votes
1answer
15 views

sssd using remote ad servers instead of local ad servers

I am using sssd to join Redhat servers to a windows server 2008 r2 domain. Most of the time things work fine but I have noticed that sssd is trying to reach remote domain servers instead of being ...
1
vote
1answer
89 views

DC1 Can't See DC2 Nor Network Machines Can't See Domain

Using Windows Server 2008 R2 Found an issue with my Domain Controller 1. Setup is basic and the main domain controller is hosting AD and DNS. The secondary cannot find the primary. dcgetdcname ...
5
votes
4answers
23k views

Hyper-V Time Sync for VM Domain Controller

We have 2 physical hyper-V servers running 8 VMs between them, each physical server has a Domain controller on it running in a VM and all servers are 2008R2 The VM PDC is set to NTP and to sync with ...
3
votes
4answers
4k views

Active Directory - List ISP DNS servers as Forwarders?

Background: I have a relatively small Active Directory domain (Windows 2003 Functional level) with two domain controllers, both running DNS servers. They are the primary and secondary DNS servers ...
3
votes
1answer
65 views

How do I prepare local domain controller for uplink outage

My site will be losing connectivity to the rest of the network for a few days up to a week. When we've had outages before I find we get delays browsing local shares and very long delays logging in. ...
0
votes
2answers
6k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
1
vote
4answers
58 views

Windows Server 2012 - Can't join computer to the domain

This was supposed to be an easy one but I ran into an issue here. I set up the domain and a static IP on the server. The server is connected to a router/AP (which obviously functions as a switch) as ...
3
votes
2answers
7k views

Permissions for Scheduled Tasks on a Domain Controller

I'm trying to run a Scheduled Task on a 2008 R2 Domain Controller and all was well until I set it into the production environment. I'm running the task as a Domain User that's defined in the "Log on ...
1
vote
2answers
42 views

Must the root domain name be registered when creating a new forest in Active Directory?

When creating a new forest in Active Directory on my domain controller running Windows Server 2012 R2, I was prompted to specify a root domain name. Must the domain name be registered and owned by me? ...
0
votes
0answers
26 views

Changing Active Directory Root Domain / Forest Domain Name

I have created an AD Network where the root / forest domain is chicago.mydomain.com. I realized that it should have been best to make the root / forest domain mydomain.com and then create the ...
4
votes
3answers
99 views

Should i disable DNS recursion?

I have two Domain Controller, both are DNS server and i have set Forwarder for both ( as per below Print-screen ) but i have not disable recursion on both server ( please see below print-screen ) ...
2
votes
2answers
42 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
2
votes
1answer
55 views

Cleaning up after demoting old DC

I recently added a new Server 2012 DC and took the previous 2003 DC offline. The Server 2012 DC is now the only DC on the network. I also added an alias (CNAME) so that the new server can be accessed ...
2
votes
1answer
106 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
1
vote
2answers
553 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
3
votes
1answer
1k views

Linux Client Active Directory Authentication stops working when failover

I have an issue with Linux clients trying to AD authentication by targeting a DNS name (corp.example.com). I have 2 Domain Controller servers DC1(10.0.0.3/24), DC2(10.1.0.3/24) both domain controllers ...
3
votes
3answers
4k views

Tracking file permissions changes on a Windows server

Some-thing or Some-one is changing file permissions occasionally on files on my Windows Server 2003 Domain Controller. I'd like to track these changes. Initially I thought one could do this with ...
0
votes
1answer
31 views

How can I create a filter in Active Directory to show only 'Enabled' Computer Accounts

Please note: I am referring to COMPUTER accounts. Not USER accounts. In Active Directory, it is easy to create a filter to show only Disabled Computer Accounts by ticking the box "Disabled Accounts" ...
0
votes
1answer
38 views

What actually happens when a computer is deleted from Active Directory? [closed]

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
1
vote
5answers
369 views

How to establish trust relationship when logging in with the old password and network disabled?

I have two computers in the same domain that I use, recently I changed the domain password on one of them. When I tried to login with the same account on the other machine I get: The trust ...
13
votes
4answers
16k views

Domain Controller thinks its on a Public Network

We have a Server 2008 R2 Primary Domain Controller that seems to have amnesia when it comes to working out what kind of network it is on. The (only) network connection is identified at startup as a ...
0
votes
1answer
48 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
1
vote
1answer
43 views

Fax Server on a Domain Controller

So I have this Fax number attached to a modem inside a Windows 2012 R2 DC. I followed the steps on: https://technet.microsoft.com/en-us/library/jj134193.aspx to install and configure the Fax Service. ...
1
vote
2answers
48 views

After a DC loads the DNS zone does it ever have to contact the DNS server again?

I have a DC in a branch office. The DC is pointed to another DNS server in a central office (which is also a DC) for its primary DNS. So let me make sure I understand how this works: When the DC ...
0
votes
1answer
25 views

Is there a way to manage machines which are off-domain centrally?

We have a number of three tier setups here which are mostly Windows Server 2008 boxes. They tend to consist of 1 web server, 1 application/web services server, 1 db server. As this is a three tier ...
0
votes
1answer
25 views

Upgrade Server 2012 Standard Evaluation member server to Standard

I've been running a Server 2012 Standard evaluation as a member server for a while - it has been a remote site AD server that connects to our existing Essentials domain ("PDC"). The server has been ...
0
votes
0answers
17 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
0
votes
0answers
44 views

Deployment of Base-Node via iSCSI in Server 2012R2 HPC cluster fails (can not join domain)

We are currently evaluating Server 2012R2 with HPC Pack for an upcoming project. Sadly we are stuck at deploying the base node. The node boots via PXE (iPXE) and connects to iSCSI, installs Windows ...
1
vote
1answer
105 views

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly ...
1
vote
0answers
30 views

Certain GPO settings are not taking effect on Clients

I've been trying to deploy a printer with Print Management on Server 2012 however it never appears on any of the clients after deployment. And this is not only the case with printers, the same thing ...
3
votes
2answers
49 views

After setting PDC to external time source, do I have to perform a similar action for every pc/server to sync with PDC?

Server 2012 R2 as PDC, Hyper-V servers and Win 7/8 workstations I have my PDC synchronized to an external time source. What is my next step in getting my domain synchronized with regard to the PDC's ...
2
votes
3answers
2k views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
3
votes
0answers
77 views

How do I fix the Event ID 10154 regarding SPNs?

Server 2012 R2, Hyper-V VM-PDC w/ AD DS, DNS (single DC still; 2nd will be created shortly) The Event ID 10154 General comments state: The WinRM service failed to create the following SPNs: ...
1
vote
1answer
40 views

How do I manually check if Time Service is advertising or not?

Server 2012 R2, Hyper-V VM-PDC w/AD DS, DNS I originally had an Event ID 12 and successfully setup the time service as covered in this post. The Event ID 12 no longer shows up during startups. ...
0
votes
2answers
48 views

Should integration services always be installed on a Hyper-V VM?

Server 2012 R2, Hyper-V In researching my PDC time synchronization problems (noted in this serverfault post) I came across this Microsoft guidance at this link: "For virtual machines that are ...
1
vote
1answer
57 views

How do I confirm what my PDC is using for it's time source and how do I setup an external time source?

Server 2012 R2, Hyper-V I am trying to finalize setting up my first primary domain controller. One of the warnings that always comes up after first promoting the DC is Event ID 12 along with other ...
1
vote
1answer
40 views

Creating Offline Test environment

So I'm trying to create a test environment that hosts a copy of one of the domain controllers in production and I was wondering if anyone has some insight on the best way to perform the "copying" of ...
5
votes
1answer
99 views

Cannot transfer controller operations master role or demote a domain controller

Server 2012 R2, Server 2012, Domain Controller role After experiencing some permissions problems on my domain I noticed that my 2nd domain controller appears to be corrupted in some way (I'm sorry ...
1
vote
1answer
5k views

ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial. At "prerequisites step", the window is supposed to look like: but ...
0
votes
1answer
134 views

The configuration information describing this enterprise is not available - Error I receive

I have Windows Server 2012 R2 installed and when I navigate to 'AD DS' and try to go to 'Active Directory Domains and Trust' the error I receive is "The configuration information describing this ...
0
votes
0answers
104 views

Promoting Windows Server 2012 to DC, cannot create DNS delegation because SBS 2003 DNS server is not found

I'm promoting our new Windows Server 2012 Essentials box (ASH) to Domain Controller so that I can then deprecate and demote our failing Windows SBS 2003 box (PINE), which is the only current DC. ...
2
votes
3answers
1k views

The requested operation requires elevation

We have about 15 PCs on our network. I can make changes to all the PCs except one. I keep getting the message "The requested operation requires elevation". When I try to run a program as an admin, ...
0
votes
1answer
1k views

Domain controller is registering 2 IP addresses with DNS

Recently a DC was promoted and the IP was used from the old DC which was demoted and shutdown.How tostop this DC from registering 2 IP addresses with DNS? Please let me know if any questions.