A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

10
votes
2answers
3k views

Sharing Domain name between domain controller and webserver

In our network the name of the network domain is also the domain of the organisation's website (say, example.com). Externally people can enter example.com to visit our website but internally this ...
14
votes
3answers
13k views

What should the order of DNS servers be for an AD Domain Controller and Why?

This is a Canonical Question about Active Directory DNS Settings. Related: What is Active Directory and how does it work? Assuming an environment with multiple domain controllers ...
15
votes
1answer
16k views

What needs to be done after a Domain Controller crash?

Assuming that at least two domain controllers were present in the domain to start with, what steps need to be taken to make Active Directory healthy after a domain controller crash?
3
votes
2answers
2k views

things to check prior to moving all FSMO roles to a new domain controller before decommission original old domain controller

need to move a domain controller, the first in the forest that holds all the fsmo roles, to another location in a clients building. it will require turning off this dc, call it dc1 for this question. ...
3
votes
2answers
5k views

Domain Controller time is 7 minutes fast

I have a Server 2008 R2 domain controller running in VM on Hyper-V that is 7 minutes fast which I need to fix. I understand that this maybe down to the DC running in VM's. What I would like to know ...
6
votes
8answers
2k views

Renaming a windows 2003 domain?

we currently have an office server running on Windows 2003. The server hosts e-mail (exchange) and active directory. Also we have two client pc's which get their internet connection and their profiles ...
5
votes
8answers
44k views

How to tell what time a domain user logged in?

In the "Security" event log on a Windows 2003 domain controller, I see several entries of event 540 -- "Successful Network Logon" averaging a few minutes apart throughout the day. Is the first one of ...
4
votes
3answers
3k views

Windows Domain Controller: Create a test environment from a production environment

I need to create a working test environment of a domain we have. I need to have all the data from the production environment in the test environment. What is the best way to go about doing this? ...
4
votes
3answers
892 views

Domain computers with no specific user?

We have a Windows Server 2008R2 server which is running our domain. We have around 40 users and around 30 computers. Most of the users have their own dedicated workstation, however around 5 of the ...
1
vote
2answers
733 views

the context of local user of AD-joined machine? Is it of domain machine account or of local machine account?

I am developer and curious how Windows server machines are used. A) I believe that they show interactive login screen but run without any user had ever logged-in. Correct? In context of ...
0
votes
1answer
481 views

adding DKIM signature to email where dkim=pass

I am building a e-mailing app and I am using Amazon SES API to send emails and long with that I am adding the DKIM signature to the email which are being sent. Presently the app is in the testing ...
6
votes
2answers
8k views

Force Windows server to use specific Domain Controller

Is there a way I can set an OWA server in my DMZ to talk to a DC in the local site? The DMZ is located at the same (physical) site as a LAN with DCs on it. (There is no DC in the DMZ.) Can I force ...
1
vote
2answers
2k views

Windows 2003 DC to Windows 2008 R2 DC with same name and same IP

Environment = Windows 2003 native domain with 8 DCs I've got an old domain controller that is running 2003, CA Enterprise role, DHCP, DNS, a few GPO scripts that point to shares on it, and some other ...
0
votes
1answer
47 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
0
votes
4answers
7k views

Can I create a DC without a DNS Server?

So as the title says, I need to promote a standalone Win2008R2 server to a Domain Controller, and I don't a DNS Server (I think), as there will be no clients connected to the domain, it will be only ...
0
votes
2answers
7k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
19
votes
3answers
2k views

“Peaky” CPU Usage on Domain Controllers

We have two Windows Server 2008 SP2 (sadly not 2008 R2) Domain Controllers in a small 150 client domain that are exhibiting very "peaky" CPU usage. The Domain Controllers both exhibit the same ...
4
votes
4answers
10k views

Internal and External DNS from Different Servers, Same Zone

I am either having trouble understanding how DNS works, or I am having trouble configuring my DNS correctly (either one isn't good). I am currently working with a domain, I'll call it webdomain.com, ...
6
votes
2answers
1k views

Use Google Apps/Cloud Services as a Domain Controller Replacement

This is a Canonical Question about Cloud Services replacing Active Directory. Is it possible to use Google Apps or another Cloud Service as a replacement for a Windows Domain Controller ...
4
votes
1answer
349 views

Replace 2000 domain controller

I have a pair of Windows 2000 domain controllers. The machine that currently hosts GC is getting tired and is pretty old as far as hardware. I want to replace it with a newer machine I have lying ...
6
votes
4answers
2k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
1
vote
5answers
331 views

Active Directory management tools for medium sized forest (less than 1000 users) [closed]

What are good AD management tools for AD forests with less than 1000 users and 3 domains across three locations? Specifically looking for: -Bulk users creation -Security groups management ...
6
votes
3answers
2k views

Number of Domain Controllers needed?

In the process of migrating 7 school site network from Server 2003/XP to Server 2012/7 and wanted to get some feedback on how many domain controllers would be optimal. Currently we have 4 DCs. All 7 ...
4
votes
2answers
4k views

How do I migrate a Windows 2008 Domain Controller to another computer?

I have single server acting as a domain controller. It is running Windows 2008 Standard edition. What steps are required to migrate this domain to another computer running Windows 2008? I'd like a ...
3
votes
3answers
672 views

Multi-Role Domain Controllers for Small Offices (< 50 clients)

Warning: I'm a Linux/*NIX admin so this is all new to me. I understand that it's not considered a good idea to have only a single domain controller, and that it is also probably a good idea for a ...
3
votes
4answers
22k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in [1]: "Domain Admins Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain ...
2
votes
1answer
23k views

Event ID 4013: “The DNS server is waiting for Active Directory Domain Services (AD DS) to signal…"

We have an issue that only occurs after we rebooting our secondary DC and DNS server/DHCP server. It is a 2008r2 x64 server, DC and DNS/DHCP server. Our main DC is 2003. Event ID 4013: “The ...
1
vote
1answer
539 views

DC/DNS failover with global/common DNS roundrobin

I think I am getting lost in network failover land. I am trying to set up a Windows Domain Controller and DNS, while providing resilients and failover. I have two Domain Controllers and DNS servers. ...
1
vote
1answer
518 views

Low power, quiet and semi affordable domain controller for distributed environment use

I work in a distibuted environment, and I would like to setup a domain controller. I don't really want a full blown desktop running full time, just to handle requests from 1 client pc in my home ...
1
vote
1answer
1k views

Windows Server 2003 SP2 - JRNL_WRAP_ERROR (Sysvol)

SETUP: Windows Server 2003 SP2 with a replication error (this is the only DC in the domain) [image below]: Journal Wrap Error on sysvol share Is there a way to find out what is ...
4
votes
3answers
4k views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
4
votes
4answers
11k views

Hyper-V Time Sync for VM Domain Controller

We have 2 physical hyper-V servers running 8 VMs between them, each physical server has a Domain controller on it running in a VM and all servers are 2008R2 The VM PDC is set to NTP and to sync with ...
4
votes
2answers
1k views

What are all the possible causes of the “An Active Directory Domain Controller (AD DC) for the domain …” error message?

Earlier I was having issues connecting one of my workstations (client) to my domain, and I thought it was because the domain was not in my possession yet (reference: this question). But, due to the ...
4
votes
1answer
1k views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
3
votes
4answers
8k views

No internet connection and forward-Lookup-Zone in my AD DNS?

We have an 2K3 R2 AD server. It is also serves as our DNS server. When I look at the DNS entries I see the following: do I really need all these entries? I currently have a problem that my AD can ...
3
votes
4answers
3k views

Requirements for a Windows domain server

What are the hardware, software and network requirements for a new Domain Server with Windows Server 2003 for 100 users?
3
votes
3answers
1k views

VM Host needs to join the domain in Virtual Machine

How to configure Windows Server 2008 R2 Datacenter to join a domain which is created by its child Virtual Machine ( which is the Domain Controller, given that the Virtual Machine starts at the startup ...
2
votes
1answer
98 views

Do I have to own my domain before attempting to connect to my domain controller?

I am in the process of purchasing a domain, but I do not own it yet. I setup my domain controller as internal.domain.com. The problem I'm running into is in connecting my workstations to my domain. ...
2
votes
1answer
1k views

Slow starting Domain Controller after installing Enterprise Certificate Authority in Windows 2008 R2

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial. The Install went successful and after install I rebooted the DC. While ...
2
votes
1answer
568 views

Upgrade Domain Controller SKU from Server 2008 R2 Standard to Enterprise

Our MS partner licenses unfortunately no longer include Windows Server 2008 R2 Standard, so I am forced to upgrade all of our servers from Standard to Enterprise. All have gone without a hitch until ...
2
votes
1answer
2k views

SQL Server Windows Auth Login sees Domain as untrusted

I've had someone set up a domain controller on windows 2008 on one server, and sql server 2008 on another. The domain seems to be working fine, I'm logged on as a domain user on both servers, nothing ...
2
votes
4answers
4k views

cannot connect to internet from domain controller

I'm setting up an active directory/domain controller that is also doing DNS using Windows Server 2008 R2. The install went smoothly. I am able to add a computer to the domain, and can even connect ...
1
vote
4answers
5k views

How can I verify successful replication of two domain controllers

I have in my environment two redundant Windows Server 2012R2 domain controller. How can I verify successful replication of two domain controllers? On the domain controller are roles installed like AD ...
1
vote
1answer
4k views

DCDIAG VerifyEnterpriseReferences test failed on PDC

I have two domain controllers both server 2008, and the domain function level has been raised to 2008. We migrated from a single dc running server 2008 previously. If I run : dcdiag /v /c /d /e ...
1
vote
3answers
2k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
1
vote
2answers
463 views

How safe is it to run cygwin sshd on a windows 2003 domain controller

I have already installed cygwin (running sshd) on windows 2003 DC several times. But now another admin who is actually responsible for this domain asked my if this is really safe. Edit:: I changed ...
0
votes
2answers
3k views

How can I change dns name on domain controller?

I am in the process of trying to clean up after a domain rename gone bad. The rename was from xxx.com to hq.xxx.com My current problem is that I cannot login to the DC (only DC on network) Logging ...
0
votes
3answers
186 views

Domain clients can't reach website with same name as domain

I know this is a very basic question but I need some help. I'm setting up a domain controller on Zentyal with the domain name example.com. But I need the domain users to be able to get to our company ...
0
votes
2answers
89 views

Simple check to confirm access to a Domain Controller

I'm preparing for a battery of resilience tests on a new network (which will be hosting a mission-critical application). As part of it, I ought to confirm the resilience of the domain controllers. We ...
0
votes
2answers
172 views

Adding Internal DNS server in Host file

I have added Global DNS server ip address to one of my Desktop ( please see the Network configuration screenshot ). and after that i have added my both domain controller ip address in host file, and ...