A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

learn more… | top users | synonyms (1)

6
votes
0answers
202 views

AD Replica DC Promotion Stall

I recently inherited infrastructure duties for a small startup I am working with. My traditional role has been development, so bear with me... I was hoping to start off on the right foot, and get ...
4
votes
0answers
126 views

Samba4 internal DNS and isc-dhcp zone update

Could anybody explain, how to solve this problem with internal samba4 DNS and dynamic zone updates from isc-dhcp? In the logs I have: dhcpd: Unable to add reverse map from ...
4
votes
0answers
303 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
3
votes
0answers
77 views

How do I fix the Event ID 10154 regarding SPNs?

Server 2012 R2, Hyper-V VM-PDC w/ AD DS, DNS (single DC still; 2nd will be created shortly) The Event ID 10154 General comments state: The WinRM service failed to create the following SPNs: ...
3
votes
0answers
56 views

Exchange 2013 and AD/GC issues

I have Exchange 2013 (minimal install and all roles are on a single server) on-premises running on a Windows 2012 R2 server (both Windows and Exchange are patched and up-to-date). Basically this ...
2
votes
0answers
290 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
2
votes
0answers
28 views

Consolidating Domains from 2 UPN's to 1

We currently have 1 domain (no children) at corp.domain.com. We have an alternate UPN so that users can have their UPN as username@domain.com (no corp). Many of our earlier users however have the ...
2
votes
0answers
4k views

AD Replication Errors / KCC - Between two Domain Controllers

I'm having quite an issue that began a few days ago. Let me just lay out exactly what happened - also I've inherited this environment, please keep that in mind. 1st Domain Controller - Windows ...
2
votes
0answers
3k views

NERR_DCNotFound when attempting to join Windows Server 2010 domain using PBIS

I have a RHEL 6.3 Amazon Web Service instance I'm trying to join to a Windows Server 2012 AD domain through PowerBroker Identity Services Open (ie: not enterprise). The Server 2012 instance is in the ...
2
votes
0answers
277 views

Session limit exceeded on domain controller?

I have a Server 2003 machine that runs a number of scheduled tasks as a particular domain user. Every couple of weeks, the user seems to lose its home directory (normally C:\documents and ...
2
votes
0answers
2k views

Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC

Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
1
vote
0answers
30 views

Certain GPO settings are not taking effect on Clients

I've been trying to deploy a printer with Print Management on Server 2012 however it never appears on any of the clients after deployment. And this is not only the case with printers, the same thing ...
1
vote
0answers
37 views

SMB server's behavior under NT Domain and Active Directory Domain

(1) If SMB server joined to the NT Domain, does the SMB server itself executes a user authentication by communicating to a Domain Controller? To do it, does SMB client need to send a Type3Message ...
1
vote
0answers
17 views

Domain Controller Roles not properly configured

I added a W2008R2 domain controller to a domain which previously had two W2003 domain controllers. I want to demote and remove the W2003 server that held the primary roles. I successfully ...
1
vote
0answers
26 views

Windows domain controller errors

I got the following errors when enquiring two domain controllers. Cannot open security log for DC DC2.org - The interface is unknown. and OpenEventLog failed for DC DC2.org(10.126.2.6) - ...
1
vote
0answers
82 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
1
vote
0answers
156 views

Domain time drifting with VM DCs / host domain members

I'm following the advice given in this article: ...
1
vote
0answers
139 views

Sysvol Replication issue

I have read a lot about this recently and must say it is doing my head in. now what I did was 6 months ago we did a upgrade of our infrastructure. We had a 2008 R2 server for domain controller now I ...
1
vote
0answers
30 views

Will the timezone be converted across geographical areas?

I'm using Active directory in Windows server 2008 R2. My domain is in a particular timezone and my client say X is in another timezone. Now I have implemented certain restrictions that X cannot logon ...
1
vote
0answers
93 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
1
vote
0answers
1k views

Mysterious kinit-failure on Debian Jessie

I have a machine with the Samba 4 AD and the second as a client. After two days of good operation, suddenly the kinit stopped working on the client-side. The reason is quite mysterious. It cannot ...
1
vote
0answers
297 views

Windows XP cannot join (samba) domain

I've a setup with Samba 3.4.7 on Ubuntu 10.04 running as Primary Domain Controller for the network. [Almost] everything works fine, except for a single Windows XP computer which cannot join the ...
1
vote
0answers
141 views

Limiting users to logging onto Samba domain only from specific machines

I have Samba setup and running nicely as a primary domain controller with roaming profiles. Currently users can log on to the domain controller from any machine in the network. However, I want to ...
1
vote
0answers
83 views

Install DC again after removing on exchange server

I had a DC and Exchange 2010 installed on the same machine. I removed the DC role, and Exchange server went crazy. I tried to install the DC role again to fix the problem but ran into this error when ...
1
vote
0answers
111 views

Websites (IIS 7.0) unavailable from Internet upon rebooting 1 out of 4 DCs

What happened: We had to reboot one of our Domain Controller (DC), located on the VLAN 1 for maintenance purpose. We have a total of 4 DCs on 3 VLANs, so we thought that wouldn't affect our ...
1
vote
0answers
682 views

Install Forefront Threat Management Gateway on Domain controller

I have a problem on installing Forefront Threat Management Gateway on Domain Controller. After googling about this, I found that only TMG SP1 can be installed on a DC, but I do not have Forefront SP1. ...
1
vote
0answers
4k views

Windows Server 2008 R2 DC can't ping to other computers except other DC

I have been trying to troubleshoot this problem since 20 hours ago, and still can't find a solution. I brought down (orderly shutdown) a Domain Controller yesterday. No problem at all connecting to ...
1
vote
0answers
388 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
1
vote
0answers
2k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
1
vote
0answers
257 views

Merge two samba PDC and do master slave keeping data on two servers

I need to do a very difficult thing. I have this situation: 1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
1
vote
0answers
879 views

unable to logon because of account restriction on Domain Controller

I have a Domain Controller which had installed RSA SecurID software Few months ago we switched from RSA SecurID to Gemalto smart cards. This DC was the last machine with RSA software installed ...
0
votes
0answers
29 views

Sync NT4 SAM setting with Samba4 - possible?

I've got a Samba4 installation set up as a backup domain controller: james@photon:~$ testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum ...
0
votes
0answers
26 views

Changing Active Directory Root Domain / Forest Domain Name

I have created an AD Network where the root / forest domain is chicago.mydomain.com. I realized that it should have been best to make the root / forest domain mydomain.com and then create the ...
0
votes
0answers
17 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
0
votes
0answers
43 views

Deployment of Base-Node via iSCSI in Server 2012R2 HPC cluster fails (can not join domain)

We are currently evaluating Server 2012R2 with HPC Pack for an upcoming project. Sadly we are stuck at deploying the base node. The node boots via PXE (iPXE) and connects to iSCSI, installs Windows ...
0
votes
0answers
103 views

Promoting Windows Server 2012 to DC, cannot create DNS delegation because SBS 2003 DNS server is not found

I'm promoting our new Windows Server 2012 Essentials box (ASH) to Domain Controller so that I can then deprecate and demote our failing Windows SBS 2003 box (PINE), which is the only current DC. ...
0
votes
0answers
19 views

several domain controller logon

I've got two domain controllers. The master is DC01 and slave Fil01. I got that problem, that some computers logon over the slave dc and not the master. How can I set the order or prevent them on ...
0
votes
0answers
91 views

System error 1314 : Samba and WIndows 7 client

I'm getting the following error when trying to log in a domain PC System error 1314 has occurred. A required privilege is not held by the client. This only occurs on this PC and it happens for all ...
0
votes
0answers
43 views

DFS Namespace is inaccessible when DC4 is up and running

DC1, DC2 and DC3 are at site A. DC4 and DFS server (2008 R2) are at Site B. DC4 is Server 2003 and not a Global Catalog. DC1, DC2 and DC3 all are Server 2003, FSMO role holders and a Global Catalog. ...
0
votes
0answers
47 views

How to set up internal dns to copy public dns plus additional entries?

I have a windows domain example.com and a public domain of the same name. How do I set up my company DNS to resolve all the subdomains like the public DNS does, and more? Do I have to copy the entries ...
0
votes
0answers
27 views

Domain attached file server not authenticating with DC

I have 2 servers: Domain controller (Windows server 2012 std) - 192.168.1.2 Name dcsrv01 File server (Windows server 2012 std) - 192.168.2.2 Name fsrv01 The file server is domain attached. The two ...
0
votes
0answers
82 views

SAMBA: wbinfo -r returning -1

I have a Clearos server acting as a PDC using SAMBA. I have set up an Ubuntu client then connected to the domain and authentication is working. On another Ubuntu client i get the following error su ...
0
votes
0answers
206 views

kinit won't connect to samba4 domain controller, cannot resolve hostname

i have set up a domain controller on my virtual machine. At first i will post all important configs, so you know what works already. Hostname: affenhirn2 Domain Name: example.affenhirn2.local (i am ...
0
votes
0answers
312 views

Domain Controller, Windows 2012, Computer policy could not be updated successfully

I have issue with DC cant update computer policy PS C:\Windows\system32> .\gpupdate.exe /force Updating policy... Computer policy could not be updated successfully. The following errors were ...
0
votes
0answers
43 views

Would a duplicate DC on same subnet be bad, if ALL auth is only internal to the server?

Here's a weird scenario I'm looking for some guidance on. I have a VM that is a purpose-built "self-contained" demo environment. It has an application stack installed, as well as Active Directory, ...
0
votes
0answers
2k views

Applying user settings on a Windows Server 2008r2 server slow from external computers

I have 2 almost indentical environments consisting of a Windows 2008r2 server host running hyper-v and on each host I have 2 Windows Server 2008r2 guests. One of them acts as Domain Controller and 1 ...
0
votes
0answers
181 views

Local group policy taking precedence over Default domain controller policy

Modified Default domain controller policy to disable and rename the Guest account name using below settings Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> ...
0
votes
0answers
171 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
0
votes
0answers
96 views

Exchange 2007 SCR Setup Error finding Domain Controller?

just setting up my SCR enviroment however when running the Enable-StorageGroupCopy command its returning with an error stating that my exchange server object could not be found on my domain ...
0
votes
0answers
68 views

nslookup gives timeout based on request - what gives?

I have the following strange problem with the DNS lookups in our Windows domain (dns service runs on the domain controller): from machine 'A': dns request for machines in the same network zone ...