A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

4
votes
0answers
84 views

Netlogon - Domain Trust Secure Channel issues - Only on some DCs

We have a 2 domain environment. We were having issues with slow connections, authentication failures, and hung resources only during OFF-PEAK hours when there were very few users logged on. The ...
4
votes
0answers
197 views

Samba4 internal DNS and isc-dhcp zone update

Could anybody explain, how to solve this problem with internal samba4 DNS and dynamic zone updates from isc-dhcp? In the logs I have: dhcpd: Unable to add reverse map from ...
4
votes
0answers
674 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
3
votes
0answers
160 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
3
votes
0answers
198 views

Exchange 2013 and AD/GC issues

I have Exchange 2013 (minimal install and all roles are on a single server) on-premises running on a Windows 2012 R2 server (both Windows and Exchange are patched and up-to-date). Basically this ...
3
votes
0answers
33 views

Consolidating Domains from 2 UPN's to 1

We currently have 1 domain (no children) at corp.domain.com. We have an alternate UPN so that users can have their UPN as username@domain.com (no corp). Many of our earlier users however have the ...
2
votes
0answers
44 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
2
votes
0answers
556 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
2
votes
0answers
4k views

AD Replication Errors / KCC - Between two Domain Controllers

I'm having quite an issue that began a few days ago. Let me just lay out exactly what happened - also I've inherited this environment, please keep that in mind. 1st Domain Controller - Windows ...
2
votes
0answers
3k views

NERR_DCNotFound when attempting to join Windows Server 2010 domain using PBIS

I have a RHEL 6.3 Amazon Web Service instance I'm trying to join to a Windows Server 2012 AD domain through PowerBroker Identity Services Open (ie: not enterprise). The Server 2012 instance is in the ...
2
votes
0answers
285 views

Session limit exceeded on domain controller?

I have a Server 2003 machine that runs a number of scheduled tasks as a particular domain user. Every couple of weeks, the user seems to lose its home directory (normally C:\documents and ...
2
votes
0answers
2k views

Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC

Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
1
vote
0answers
35 views

DC's on separate sites, VPN connection, gateway change - can't see each other

Ok I had a working setup and I know what the issue is but just asking if simple way to fix. Two offices each with DC on different IP ranges, 160.0.1.x and 160.0.2.x. The VPN goes to a router ...
1
vote
0answers
488 views

Send message to all logged in clients in active directory from windows server 2008

Hello I'm wondering how i can notify ALL my users that is currently logged in on their client computers that there will be a maintainance and such? the msg command does not work for me i've tried. ...
1
vote
0answers
74 views

samba authentication issue for one specific user account

I'm facing a pretty annoying issue with Samba. Here is my setup: Windows Server 2003 + Active Directory (users authentication) NAS Server (Ubuntu 12.04 + PBIS Open Broker so this NAS is registered ...
1
vote
0answers
51 views

SMB server's behavior under NT Domain and Active Directory Domain

(1) If SMB server joined to the NT Domain, does the SMB server itself executes a user authentication by communicating to a Domain Controller? To do it, does SMB client need to send a Type3Message ...
1
vote
0answers
17 views

Domain Controller Roles not properly configured

I added a W2008R2 domain controller to a domain which previously had two W2003 domain controllers. I want to demote and remove the W2003 server that held the primary roles. I successfully ...
1
vote
0answers
31 views

Windows domain controller errors

I got the following errors when enquiring two domain controllers. Cannot open security log for DC DC2.org - The interface is unknown. and OpenEventLog failed for DC DC2.org(10.126.2.6) - ...
1
vote
0answers
150 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
1
vote
0answers
182 views

Domain time drifting with VM DCs / host domain members

I'm following the advice given in this article: ...
1
vote
0answers
197 views

Sysvol Replication issue

I have read a lot about this recently and must say it is doing my head in. now what I did was 6 months ago we did a upgrade of our infrastructure. We had a 2008 R2 server for domain controller now I ...
1
vote
0answers
30 views

Will the timezone be converted across geographical areas?

I'm using Active directory in Windows server 2008 R2. My domain is in a particular timezone and my client say X is in another timezone. Now I have implemented certain restrictions that X cannot logon ...
1
vote
0answers
102 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
1
vote
0answers
1k views

Mysterious kinit-failure on Debian Jessie

I have a machine with the Samba 4 AD and the second as a client. After two days of good operation, suddenly the kinit stopped working on the client-side. The reason is quite mysterious. It cannot ...
1
vote
0answers
397 views

Windows XP cannot join (samba) domain

I've a setup with Samba 3.4.7 on Ubuntu 10.04 running as Primary Domain Controller for the network. [Almost] everything works fine, except for a single Windows XP computer which cannot join the ...
1
vote
0answers
143 views

Limiting users to logging onto Samba domain only from specific machines

I have Samba setup and running nicely as a primary domain controller with roaming profiles. Currently users can log on to the domain controller from any machine in the network. However, I want to ...
1
vote
0answers
89 views

Install DC again after removing on exchange server

I had a DC and Exchange 2010 installed on the same machine. I removed the DC role, and Exchange server went crazy. I tried to install the DC role again to fix the problem but ran into this error when ...
1
vote
0answers
122 views

Websites (IIS 7.0) unavailable from Internet upon rebooting 1 out of 4 DCs

What happened: We had to reboot one of our Domain Controller (DC), located on the VLAN 1 for maintenance purpose. We have a total of 4 DCs on 3 VLANs, so we thought that wouldn't affect our ...
1
vote
0answers
788 views

Install Forefront Threat Management Gateway on Domain controller

I have a problem on installing Forefront Threat Management Gateway on Domain Controller. After googling about this, I found that only TMG SP1 can be installed on a DC, but I do not have Forefront SP1. ...
1
vote
0answers
4k views

Windows Server 2008 R2 DC can't ping to other computers except other DC

I have been trying to troubleshoot this problem since 20 hours ago, and still can't find a solution. I brought down (orderly shutdown) a Domain Controller yesterday. No problem at all connecting to ...
1
vote
0answers
420 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
1
vote
0answers
3k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
1
vote
0answers
270 views

Merge two samba PDC and do master slave keeping data on two servers

I need to do a very difficult thing. I have this situation: 1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
1
vote
0answers
937 views

unable to logon because of account restriction on Domain Controller

I have a Domain Controller which had installed RSA SecurID software Few months ago we switched from RSA SecurID to Gemalto smart cards. This DC was the last machine with RSA software installed ...
0
votes
0answers
1 view

Symlinked files in shares not showing for clients

I have a bunch of shares that contains symlinks to files and folders. But the files don't show up when viewed by clients. Let's assume I have Ubuntu set up as a Samba Domain Controller and I add a ...
0
votes
0answers
15 views

Samba on Simply Mepis 1.5G can't join Active Directory domain

As a proof of concept I have Simply Mepis 1.5G (the Linux Box) running on an Oracle VirtualBox. Also on the Network I have a Windows Vista for Business Laptop and a Windows 7 Professional Laptop. I ...
0
votes
0answers
16 views

2008r2 Domain: net view error 6118 on one site

Situation: Domain Level 2008r2, all DCs 2008r2 Site A: 3 DCs, no WINS, Computerbrowser Service not active - net view works (on clients and DCs) Site B: 2 DCs, no WINS, Computerbrowser Server not ...
0
votes
0answers
16 views

Error after restore DC

Yesterday , 1 DC in small brach can't boot in Windows . I tried many methods but still can't boot . So i decided restore partition C from 1 week ago-backup version.I restored system state ( not full) ...
0
votes
0answers
35 views

windows server domain controller has two names

I changed my domain controller to something else and now all the computers in the network see two computers for the same server (one with previous name and one with current name). Both of the hosts ...
0
votes
0answers
76 views

Sometime unable to login with domain account although username and password are correct

Every morning , when I try to login to my computer I can't login and the message appears User name or password are incorrect, although username and password are correct. Once I login with the ...
0
votes
0answers
26 views

Active Directory computer description sync to computers

may I know if there is a way to sync the Computer description on the Domain controller (Win 2012r2) to the local machines ? In the past (till now), I created an excel sheet that contains hostnames, ...
0
votes
0answers
16 views

Separate domain admin accounts - are password tokens stored for run-as?

I am considering separating our domain admin accounts as suggested in this previous thread. However, are password tokens stored for "run as" instances? If so, running MMC and other tools with "run ...
0
votes
0answers
43 views

Sub-OUs created in the domain controllers OU

I recently discovered an admin, some time ago, reorganized the Domain Controllers OU creating sub-OUs for various locations and moving DCs into them. While I don't have the authority to reverse this ...
0
votes
0answers
30 views

Power User with Elevated Access on Domain Network

We have new IT Helpdesk staff joined our firm and we'd like to provide them with an account with power user privileges in such they can only elevate access on user computers to install, uninstall ...
0
votes
0answers
28 views

Lexmark X795 color printer

Issue I have this issue with Lexmark X795 color printer. It's defaulting to Tray 3, when printing, for every single user. Even if I make Tray 1 a default tray, it'll still print to tray one. ...
0
votes
0answers
39 views

Accidently stopped sharing netlogon share

As the title suggests, I accidentally stopped sharing the netlogon share. I understand the importance of it and have since shared it out again to the default groups (everyone with read-only & ...
0
votes
0answers
56 views

Rebuilding Domain From Scratch. How to Use Old Netbios Domain Name on new DC?

I have a client that I am currently in the process of upgrading from Windows Server 2003 to Windows Server 2012R2. They are a small business, working off of a single server. The decision was made to ...
0
votes
0answers
163 views

Samba 3.6 doesn't accept force user / force group with domain name user

I had a samba 3.5.x install (CentOS 6), joined to an AD domain named EXAMPLE. I also have a local user/group on a linux boxes example:example. This is an example share: [app] ...
0
votes
0answers
77 views

Enforcing domain based policies on a mixed Mac OSX/Windows network

We have a primarily Mac based network of around 120 computers, split about 90% Mac and 10% PC. Right now, all management is largely ad hoc with no central provisioning. We're well passed the point ...
0
votes
0answers
163 views

Sync NT4 SAM setting with Samba4 - possible?

I've got a Samba4 installation set up as a backup domain controller: james@photon:~$ testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum ...