A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

9
votes
2answers
3k views

Sharing Domain name between domain controller and webserver

In our network the name of the network domain is also the domain of the organisation's website (say, example.com). Externally people can enter example.com to visit our website but internally this ...
13
votes
3answers
8k views

What should the order of DNS servers be for an AD Domain Controller and Why?

This is a Canonical Question about Active Directory DNS Settings. Related: What is Active Directory and how does it work? Assuming an environment with multiple domain controllers ...
14
votes
1answer
14k views

What needs to be done after a Domain Controller crash?

Assuming that at least two domain controllers were present in the domain to start with, what steps need to be taken to make Active Directory healthy after a domain controller crash?
3
votes
2answers
1k views

things to check prior to moving all FSMO roles to a new domain controller before decommission original old domain controller

need to move a domain controller, the first in the forest that holds all the fsmo roles, to another location in a clients building. it will require turning off this dc, call it dc1 for this question. ...
3
votes
2answers
5k views

Domain Controller time is 7 minutes fast

I have a Server 2008 R2 domain controller running in VM on Hyper-V that is 7 minutes fast which I need to fix. I understand that this maybe down to the DC running in VM's. What I would like to know ...
6
votes
8answers
1k views

Renaming a windows 2003 domain?

we currently have an office server running on Windows 2003. The server hosts e-mail (exchange) and active directory. Also we have two client pc's which get their internet connection and their profiles ...
5
votes
8answers
40k views

How to tell what time a domain user logged in?

In the "Security" event log on a Windows 2003 domain controller, I see several entries of event 540 -- "Successful Network Logon" averaging a few minutes apart throughout the day. Is the first one of ...
4
votes
3answers
839 views

Domain computers with no specific user?

We have a Windows Server 2008R2 server which is running our domain. We have around 40 users and around 30 computers. Most of the users have their own dedicated workstation, however around 5 of the ...
3
votes
3answers
3k views

Windows Domain Controller: Create a test environment from a production environment

I need to create a working test environment of a domain we have. I need to have all the data from the production environment in the test environment. What is the best way to go about doing this? ...
1
vote
2answers
678 views

the context of local user of AD-joined machine? Is it of domain machine account or of local machine account?

I am developer and curious how Windows server machines are used. A) I believe that they show interactive login screen but run without any user had ever logged-in. Correct? In context of ...
0
votes
1answer
472 views

adding DKIM signature to email where dkim=pass

I am building a e-mailing app and I am using Amazon SES API to send emails and long with that I am adding the DKIM signature to the email which are being sent. Presently the app is in the testing ...
6
votes
2answers
6k views

Force Windows server to use specific Domain Controller

Is there a way I can set an OWA server in my DMZ to talk to a DC in the local site? The DMZ is located at the same (physical) site as a LAN with DCs on it. (There is no DC in the DMZ.) Can I force ...
1
vote
2answers
1k views

Windows 2003 DC to Windows 2008 R2 DC with same name and same IP

Environment = Windows 2003 native domain with 8 DCs I've got an old domain controller that is running 2003, CA Enterprise role, DHCP, DNS, a few GPO scripts that point to shares on it, and some other ...
0
votes
4answers
6k views

Can I create a DC without a DNS Server?

So as the title says, I need to promote a standalone Win2008R2 server to a Domain Controller, and I don't a DNS Server (I think), as there will be no clients connected to the domain, it will be only ...
0
votes
2answers
6k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
16
votes
3answers
588 views

“Peaky” CPU Usage on Domain Controllers

We have two Windows Server 2008 SP2 (sadly not 2008 R2) Domain Controllers in a small 150 client domain that are exhibiting very "peaky" CPU usage. The Domain Controllers both exhibit the same ...
4
votes
4answers
9k views

Internal and External DNS from Different Servers, Same Zone

I am either having trouble understanding how DNS works, or I am having trouble configuring my DNS correctly (either one isn't good). I am currently working with a domain, I'll call it webdomain.com, ...
5
votes
2answers
1k views

Use Google Apps/Cloud Services as a Domain Controller Replacement

This is a Canonical Question about Cloud Services replacing Active Directory. Is it possible to use Google Apps or another Cloud Service as a replacement for a Windows Domain Controller ...
4
votes
1answer
348 views

Replace 2000 domain controller

I have a pair of Windows 2000 domain controllers. The machine that currently hosts GC is getting tired and is pretty old as far as hardware. I want to replace it with a newer machine I have lying ...
6
votes
4answers
2k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
1
vote
5answers
329 views

Active Directory management tools for medium sized forest (less than 1000 users) [closed]

What are good AD management tools for AD forests with less than 1000 users and 3 domains across three locations? Specifically looking for: -Bulk users creation -Security groups management ...
4
votes
2answers
4k views

How do I migrate a Windows 2008 Domain Controller to another computer?

I have single server acting as a domain controller. It is running Windows 2008 Standard edition. What steps are required to migrate this domain to another computer running Windows 2008? I'd like a ...
3
votes
3answers
628 views

Multi-Role Domain Controllers for Small Offices (< 50 clients)

Warning: I'm a Linux/*NIX admin so this is all new to me. I understand that it's not considered a good idea to have only a single domain controller, and that it is also probably a good idea for a ...
2
votes
1answer
16k views

Event ID 4013: “The DNS server is waiting for Active Directory Domain Services (AD DS) to signal…"

We have an issue that only occurs after we rebooting our secondary DC and DNS server/DHCP server. It is a 2008r2 x64 server, DC and DNS/DHCP server. Our main DC is 2003. Event ID 4013: “The ...
1
vote
1answer
382 views

DC/DNS failover with global/common DNS roundrobin

I think I am getting lost in network failover land. I am trying to set up a Windows Domain Controller and DNS, while providing resilients and failover. I have two Domain Controllers and DNS servers. ...
1
vote
1answer
493 views

Low power, quiet and semi affordable domain controller for distributed environment use

I work in a distibuted environment, and I would like to setup a domain controller. I don't really want a full blown desktop running full time, just to handle requests from 1 client pc in my home ...
1
vote
1answer
915 views

Windows Server 2003 SP2 - JRNL_WRAP_ERROR (Sysvol)

SETUP: Windows Server 2003 SP2 with a replication error (this is the only DC in the domain) [image below]: Journal Wrap Error on sysvol share Is there a way to find out what is ...
4
votes
3answers
1k views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
4
votes
2answers
1k views

What are all the possible causes of the “An Active Directory Domain Controller (AD DC) for the domain …” error message?

Earlier I was having issues connecting one of my workstations (client) to my domain, and I thought it was because the domain was not in my possession yet (reference: this question). But, due to the ...
4
votes
1answer
993 views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
3
votes
4answers
7k views

No internet connection and forward-Lookup-Zone in my AD DNS?

We have an 2K3 R2 AD server. It is also serves as our DNS server. When I look at the DNS entries I see the following: do I really need all these entries? I currently have a problem that my AD can ...
3
votes
4answers
2k views

Requirements for a Windows domain server

What are the hardware, software and network requirements for a new Domain Server with Windows Server 2003 for 100 users?
3
votes
3answers
962 views

VM Host needs to join the domain in Virtual Machine

How to configure Windows Server 2008 R2 Datacenter to join a domain which is created by its child Virtual Machine ( which is the Domain Controller, given that the Virtual Machine starts at the startup ...
2
votes
1answer
97 views

Do I have to own my domain before attempting to connect to my domain controller?

I am in the process of purchasing a domain, but I do not own it yet. I setup my domain controller as internal.domain.com. The problem I'm running into is in connecting my workstations to my domain. ...
2
votes
2answers
153 views

Adding Internal DNS server in Host file

I have added Global DNS server ip address to one of my Desktop ( please see the Network configuration screenshot ). and after that i have added my both domain controller ip address in host file, and ...
2
votes
1answer
1k views

Slow starting Domain Controller after installing Enterprise Certificate Authority in Windows 2008 R2

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial. The Install went successful and after install I rebooted the DC. While ...
2
votes
1answer
478 views

Upgrade Domain Controller SKU from Server 2008 R2 Standard to Enterprise

Our MS partner licenses unfortunately no longer include Windows Server 2008 R2 Standard, so I am forced to upgrade all of our servers from Standard to Enterprise. All have gone without a hitch until ...
2
votes
4answers
17k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in [1]: "Domain Admins Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain ...
2
votes
1answer
2k views

SQL Server Windows Auth Login sees Domain as untrusted

I've had someone set up a domain controller on windows 2008 on one server, and sql server 2008 on another. The domain seems to be working fine, I'm logged on as a domain user on both servers, nothing ...
2
votes
4answers
3k views

cannot connect to internet from domain controller

I'm setting up an active directory/domain controller that is also doing DNS using Windows Server 2008 R2. The install went smoothly. I am able to add a computer to the domain, and can even connect ...
1
vote
4answers
1k views

How can I verify successful replication of two domain controllers

I have in my environment two redundant Windows Server 2012R2 domain controller. How can I verify successful replication of two domain controllers? On the domain controller are roles installed like AD ...
1
vote
3answers
116 views

Domain clients can't reach website with same name as domain

I know this is a very basic question but I need some help. I'm setting up a domain controller on Zentyal with the domain name example.com. But I need the domain users to be able to get to our company ...
1
vote
1answer
3k views

DCDIAG VerifyEnterpriseReferences test failed on PDC

I have two domain controllers both server 2008, and the domain function level has been raised to 2008. We migrated from a single dc running server 2008 previously. If I run : dcdiag /v /c /d /e ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
1
vote
2answers
402 views

How safe is it to run cygwin sshd on a windows 2003 domain controller

I have already installed cygwin (running sshd) on windows 2003 DC several times. But now another admin who is actually responsible for this domain asked my if this is really safe. Edit:: I changed ...
0
votes
2answers
1k views

How can I change dns name on domain controller?

I am in the process of trying to clean up after a domain rename gone bad. The rename was from xxx.com to hq.xxx.com My current problem is that I cannot login to the DC (only DC on network) Logging ...
0
votes
2answers
74 views

Simple check to confirm access to a Domain Controller

I'm preparing for a battery of resilience tests on a new network (which will be hosting a mission-critical application). As part of it, I ought to confirm the resilience of the domain controllers. We ...
0
votes
1answer
2k views

User profile service failed the logon - Accounts besides domain administrator cannot log on

Ok, Windows Server 2008 DC. Trying to log on as a user called BESadmin, I discovered an issue. No one but the domain administrator can log on locally or via terminal services. Users without log on ...
0
votes
4answers
3k views

Primary domain controller has crashed, secondary does not log in

I had a primary domain controller on machine A and a secondary one on machine B in my AD domain. Due to some hardware/software problems, I decided to migrate the role of primary domain controller to ...
0
votes
2answers
1k views

Domain controller in cloud, how do we set up local BDC

We have a domain controller (exchange box) hosted at our hosting provider. We need to set up a local domain controller so we do a VPN and local authentication tasks. I can make the PDC accept all ...