A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

24
votes
3answers
46k views

What should the order of DNS servers be for an AD Domain Controller and Why?

This is a Canonical Question about Active Directory DNS Settings. Related: What is Active Directory and how does it work? Assuming an environment with multiple domain controllers (...
17
votes
1answer
23k views

What needs to be done after a Domain Controller crash?

Assuming that at least two domain controllers were present in the domain to start with, what steps need to be taken to make Active Directory healthy after a domain controller crash?
3
votes
2answers
3k views

things to check prior to moving all FSMO roles to a new domain controller before decommission original old domain controller

need to move a domain controller, the first in the forest that holds all the fsmo roles, to another location in a clients building. it will require turning off this dc, call it dc1 for this question. ...
16
votes
6answers
44k views

Domain Controller thinks its on a Public Network

We have a Server 2008 R2 Primary Domain Controller that seems to have amnesia when it comes to working out what kind of network it is on. The (only) network connection is identified at startup as a '...
3
votes
2answers
8k views

Domain Controller time is 7 minutes fast

I have a Server 2008 R2 domain controller running in VM on Hyper-V that is 7 minutes fast which I need to fix. I understand that this maybe down to the DC running in VM's. What I would like to know ...
6
votes
8answers
2k views

Renaming a windows 2003 domain?

we currently have an office server running on Windows 2003. The server hosts e-mail (exchange) and active directory. Also we have two client pc's which get their internet connection and their profiles ...
10
votes
1answer
586 views

In a multi-domain forest, what EXACTLY happens when some, but not all, of the Infrastructure Masters are on Global Catalogs?

There are plenty of TechNet articles, like this one that say that phantom object don't get updated if an Infrastructure Master is also a Global Catalog, but other than that there isn't a lot of in ...
7
votes
8answers
67k views

How to tell what time a domain user logged in?

In the "Security" event log on a Windows 2003 domain controller, I see several entries of event 540 -- "Successful Network Logon" averaging a few minutes apart throughout the day. Is the first one of ...
4
votes
4answers
54k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in [1]: "Domain Admins Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain ...
8
votes
2answers
16k views

Force Windows server to use specific Domain Controller

Is there a way I can set an OWA server in my DMZ to talk to a DC in the local site? The DMZ is located at the same (physical) site as a LAN with DCs on it. (There is no DC in the DMZ.) Can I force ...
4
votes
3answers
1k views

Domain computers with no specific user?

We have a Windows Server 2008R2 server which is running our domain. We have around 40 users and around 30 computers. Most of the users have their own dedicated workstation, however around 5 of the ...
2
votes
1answer
49k views

Event ID 4013: “The DNS server is waiting for Active Directory Domain Services (AD DS) to signal…"

We have an issue that only occurs after we rebooting our secondary DC and DNS server/DHCP server. It is a 2008r2 x64 server, DC and DNS/DHCP server. Our main DC is 2003. Event ID 4013: “The ...
1
vote
2answers
4k views

Windows 2003 DC to Windows 2008 R2 DC with same name and same IP

Environment = Windows 2003 native domain with 8 DCs I've got an old domain controller that is running 2003, CA Enterprise role, DHCP, DNS, a few GPO scripts that point to shares on it, and some other ...
1
vote
4answers
18k views

Can I create a DC without a DNS Server?

So as the title says, I need to promote a standalone Win2008R2 server to a Domain Controller, and I don't a DNS Server (I think), as there will be no clients connected to the domain, it will be only ...
3
votes
1answer
601 views

What's the downtime limit of a domain controller (DC)?

On my VMware ESXi environment there are 10 VMs running. One of the VMs is the domain controller (Windows Server 2008 R2). The other VMs are configured with a static DHCP and DNS IP address in their ...
1
vote
2answers
13k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
1
vote
1answer
49 views

what are the implications of running a FQDN as internal AD domain and point A-record for website to different host?

The MSP for a law firm office that has just joined our company is using a FQDN as an internal AD Domain and has been doing so for sometime apparently. They have this issue in that they have a website ...
1
vote
1answer
1k views

How do I confirm what my PDC is using for it's time source and how do I setup an external time source?

Server 2012 R2, Hyper-V I am trying to finalize setting up my first primary domain controller. One of the warnings that always comes up after first promoting the DC is Event ID 12 along with other ...
-2
votes
1answer
75 views

Issue when promoting a second server as domain on R2 2008 [closed]

I'm in an odd situation here. I've upgraded my network to a 2008 domain from a 2003 with out any issue, this works fine and all the FSMO are in one DC, I was about to install a second domain on a ...
30
votes
7answers
15k views

Is it best practices to have separate login for a domain for domain admins?

I typically like to set up separate logins for myself, one with regular user permissions, and a separate one for administrative tasks. For example, if the domain was XXXX, I'd set up a XXXX\bpeikes ...
22
votes
4answers
9k views

“Peaky” CPU Usage on Domain Controllers

We have two Windows Server 2008 SP2 (sadly not 2008 R2) Domain Controllers in a small 150 client domain that are exhibiting very "peaky" CPU usage. The Domain Controllers both exhibit the same ...
4
votes
1answer
359 views

Replace 2000 domain controller

I have a pair of Windows 2000 domain controllers. The machine that currently hosts GC is getting tired and is pretty old as far as hardware. I want to replace it with a newer machine I have lying ...
7
votes
4answers
3k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
6
votes
4answers
3k views

Risks of having only one domain controller

Are there any risks besides downtimes, if there is only a single domain controller for a small company? I did some research and everyone recommends at least two domain controllers, but I can't find a ...
1
vote
4answers
346 views

Active Directory management tools for medium sized forest (less than 1000 users) [closed]

What are good AD management tools for AD forests with less than 1000 users and 3 domains across three locations? Specifically looking for: -Bulk users creation -Security groups management -...
6
votes
3answers
4k views

Number of Domain Controllers needed?

In the process of migrating 7 school site network from Server 2003/XP to Server 2012/7 and wanted to get some feedback on how many domain controllers would be optimal. Currently we have 4 DCs. All 7 ...
5
votes
4answers
45k views

How can I verify successful replication of two domain controllers

I have in my environment two redundant Windows Server 2012R2 domain controller. How can I verify successful replication of two domain controllers? On the domain controller are roles installed like AD ...
4
votes
5answers
3k views

How to bring another DC up with all roles when first DC is no longer available

I am so upset of this as i am not getting a proper answer anywhere. Let me make it clear the same scenario again. I have a DC named DC-1 & another DC named DC-2. both DC-1 and DC-2 are the name ...
4
votes
2answers
5k views

How do I migrate a Windows 2008 Domain Controller to another computer?

I have single server acting as a domain controller. It is running Windows 2008 Standard edition. What steps are required to migrate this domain to another computer running Windows 2008? I'd like a ...
3
votes
3answers
928 views

Multi-Role Domain Controllers for Small Offices (< 50 clients)

Warning: I'm a Linux/*NIX admin so this is all new to me. I understand that it's not considered a good idea to have only a single domain controller, and that it is also probably a good idea for a ...
1
vote
1answer
3k views

Replication of domain controllers - JRNL_WRAP_ERROR - EventID: 13568

I noticed a problem when setting up GPOs that some settings were copied to the local computer's registry, while some didn't. Although they are in the very same GPO. So I checked the EventViewer and ...
1
vote
1answer
928 views

DC/DNS failover with global/common DNS roundrobin

I think I am getting lost in network failover land. I am trying to set up a Windows Domain Controller and DNS, while providing resilients and failover. I have two Domain Controllers and DNS servers. ...
1
vote
2answers
1k views

the context of local user of AD-joined machine? Is it of domain machine account or of local machine account?

I am developer and curious how Windows server machines are used. A) I believe that they show interactive login screen but run without any user had ever logged-in. Correct? In context of ...
1
vote
1answer
2k views

Windows Server 2003 SP2 - JRNL_WRAP_ERROR (Sysvol)

SETUP: Windows Server 2003 SP2 with a replication error (this is the only DC in the domain) [image below]: Journal Wrap Error on sysvol share Is there a way to find out what is broken/corrupt/...
1
vote
2answers
1k views

Domain controller in cloud, how do we set up local BDC

We have a domain controller (exchange box) hosted at our hosting provider. We need to set up a local domain controller so we do a VPN and local authentication tasks. I can make the PDC accept all ...
1
vote
4answers
7k views

New Primary Domain Controller won't start Active Directory unless Old DC is booted

I'm no Active Directory Wizard. Here's what I did: Old W2003 R2 PDC needed to be replaced with a new server Rolled out W2008R2 and used DC Promo to add it the domain Due to some DNS issues, had a ...
6
votes
2answers
12k views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
6
votes
1answer
4k views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
5
votes
1answer
2k views

Better to share File Services role with Active Directory DC role OR with the RDS Terminal Server role?

We are a small business setting up a new server... budget is limited of course. I have ~500GB of data to share that needs to be stored locally on the single server we have. Host Server: Dell ...
4
votes
2answers
2k views

What are all the possible causes of the “An Active Directory Domain Controller (AD DC) for the domain …” error message?

Earlier I was having issues connecting one of my workstations (client) to my domain, and I thought it was because the domain was not in my possession yet (reference: this question). But, due to the ...
3
votes
4answers
11k views

No internet connection and forward-Lookup-Zone in my AD DNS?

We have an 2K3 R2 AD server. It is also serves as our DNS server. When I look at the DNS entries I see the following: do I really need all these entries? I currently have a problem that my AD can ...
3
votes
3answers
2k views

VM Host needs to join the domain in Virtual Machine

How to configure Windows Server 2008 R2 Datacenter to join a domain which is created by its child Virtual Machine ( which is the Domain Controller, given that the Virtual Machine starts at the startup ...
2
votes
1answer
2k views

Slow starting Domain Controller after installing Enterprise Certificate Authority in Windows 2008 R2

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial. The Install went successful and after install I rebooted the DC. While ...
2
votes
2answers
577 views

Colossal Failure After Domain Rename

The backstory... I recently upgraded a MS Server from 03 to 2012. The server needed to be a domain controller and for simplicities sake I named it foo.com instead of naming it something different ...
2
votes
4answers
6k views

cannot connect to internet from domain controller

I'm setting up an active directory/domain controller that is also doing DNS using Windows Server 2008 R2. The install went smoothly. I am able to add a computer to the domain, and can even connect ...
2
votes
1answer
115 views

Do I have to own my domain before attempting to connect to my domain controller?

I am in the process of purchasing a domain, but I do not own it yet. I setup my domain controller as internal.domain.com. The problem I'm running into is in connecting my workstations to my domain. I'...
2
votes
1answer
59 views

Cannot promote Windows Server 2012 R2 to Domain Controller at a new site. “The wizard cannot gain access to the list of domains in the forest.”

I'm opening a new site (physical and logical) in my international Windows domain. The site is connected to the main office by a VPN over a slow connection (I'm using pfsense as my main router and ...
2
votes
2answers
2k views

How to create new domain w/ Hyper-V 2012 hosting the DC server?

I have a small business client that's being spun off to run independently from a larger organization. They want to start from scratch and will be on their own premises. I'll be setting up a new 2012 ...
2
votes
1answer
2k views

SQL Server Windows Auth Login sees Domain as untrusted

I've had someone set up a domain controller on windows 2008 on one server, and sql server 2008 on another. The domain seems to be working fine, I'm logged on as a domain user on both servers, nothing ...
2
votes
2answers
6k views

Authenticate client against specific Domain Controller

I am having an issue with an active directory account not running login scripts. The scripts run fine in one location and not in the other. Getting the following errors in the event logs: ...