Questions tagged [rodc]
The rodc tag has no usage guidance.
40
questions
0
votes
1
answer
283
views
Readonly Domain Controller for Remote Office
We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
- 111k
1
vote
1
answer
1k
views
Group Managed Service Accounts (GMSA) and Read-Only Domain Controllers (RODC)
We have RODC in a DMZ site and we would like to use GMSA, but the problem is that since domain controllers are read-only, it seems that I have to set a password at the creation of a new account such ...
- 26
1
vote
1
answer
2k
views
assign an OU to a certain RODC
I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and its content will be replicated to all DCs within the domain.
So I want to know can we assign an OU to a ...
- 145
2
votes
1
answer
3k
views
Trust relationship failure with RODC
I have numerous servers that sit in a DMZ which has an RODC in it as well. As you probably know, the machine passwords will change after a certain amount of time. After which I have to disjoin-rejoin ...
CommunityBot
- 1
2
votes
2
answers
4k
views
How to logon with local account? RODC "There are no logon servers to process your request"
I have a site-to-site VPN, writeable DC in the main office, Read-only DC in a branch office.
Today the VPN went down, but I couldn't log in to the read-only DC - the error message came up There are ...
- 5,436
9
votes
2
answers
2k
views
Win7 clients failing with cached credentials on samba4 RODC
I'm setting up a test environment for a customer about to deploy samba4 into 1400 remote sites and I'm running into a problem. It's my job, after all, to run into problems and then solve them.
Active ...
CommunityBot
- 1
0
votes
1
answer
910
views
Adding a rodc to an existing domain failed
I want to add a new RODC to an existing domain.
The new RODC is a Server 2012R2 and the existing domain is a 2008R2 domain.
The firewall on both sites is offline and both can reach each other per ...
- 4,573
0
votes
1
answer
28
views
Creating transportable servers (Windows Server 2008 R2)
Question:
What would be the best way to achieve the desired situation? RODC's?
Current situation:
We have two domain controllers both with OS in RAID1 and DATA in RAID5.
We also have two extra HP ...
- 23
1
vote
2
answers
4k
views
How do I get Samba to use a specific domain controller?
Currently, I have Samba on Ubunut Linux 16.04 connecting to a domain controller. When I joined, I joined to ad-1.example.com; however, after two weeks, it found read-only-adc.example.com on its own ...
- 511
1
vote
0
answers
3k
views
80090308: LdapErr: DSID-0C0903D9, comment: AcceptSecurityContext error, data 0, v2580
Trying to fastbind against an RODC and I'm getting the following error:
80090308: LdapErr: DSID-0C0903D9, comment: AcceptSecurityContext error, data 0, v2580
I have googled around and don't have ...
- 11
2
votes
1
answer
292
views
AD Forest/Domain Functionnal Rollback with DirSync/ADFS in place
At our main site we are running at 2012R2 (forest/domain) functional level and we currently have migrated our mailboxes to Office 365 using an exchange hybrid configuration with ADFS and Dirsync.
We ...
- 2,888
-1
votes
1
answer
40
views
RODC and domain database [closed]
Supposed I have 1 domain (in 1 tree 1 forest), say, computer.local.
And 4 DCs:
DC01, holds all 5 FSMOs
DC02,
DC03,
DC04, RODC.
All of them connected each other.
Suppose I log on to DC02, and run [...
2
votes
1
answer
2k
views
Why can I create objects on my read only domain controller?
I have a Windows Server 2012 Domain Controller. I have configured another Server 2012 machine as a Read-Only Domain Controller. When I log in with domain administrator credential on my RODC I can ...
CommunityBot
- 1
1
vote
1
answer
2k
views
Windows RODC/DMZ connection to trusted AD issue
I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
CommunityBot
- 1
0
votes
1
answer
392
views
Error in creating RODC
I have a win server 2012 r2 server named ws7. from my other windows 2012 server that is currently our primary active directory server named ws4 I am trying to create a RODC for a remote office with ...
- 15.6k
3
votes
1
answer
2k
views
Restoring read only domain controller from VM checkpoint
I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
- 622
2
votes
4
answers
241
views
RODC deployment
Is it useful to enhance security by implementing RODC in the same site, which RWDC exist also? Pointing the site user the RODC instead of the RWDC.
Thanks.
- 622
0
votes
2
answers
272
views
RODC password replication and A/D sites and subnets
I work at a school district with about 30 school sites.
Windows 2008 A/D setup - all central at the district office.
In A/D, all is under one site, and no subnets defined.
One A/D forest and only one ...
- 622
8
votes
2
answers
939
views
Is there a difference in bandwidth consumption between a RODC and RWDC?
My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
- 36.8k
0
votes
2
answers
4k
views
Installing Exchange in a RODC Site
I'm trying to install Exchange 2010 to a server in a site that uses an RODC. It tells me that "No domain controllers for the domain DOMAIN and the site SITE are available"
I'm going to be moving the ...
- 54k
4
votes
2
answers
2k
views
Joining a NetApp to a domain on a Read Only Domain Controller
I have an isolated network, into which I've built a vfiler. The point of this network is that it's a non routed 'test' network.
However, there's a need for LDAP/Kerberos and CIFS access to the filer,...
- 3,767
1
vote
1
answer
659
views
active directory rodc or sub site for New branch office
This may sound silly but I am no ad expert.
We have setup a new branch office and 2 users will be moving to that office to man a point of sales system, the internet connectivity is poor so ...
- 1,247
3
votes
1
answer
2k
views
Synchronizing RODCs to NTP servers?
I've read this nice article from Gareth Hooper regarding Domain Controller syncing to external time sources. In essence, he wrote that although Microsoft don't actually condone the practice, it's a ...
- 32.8k
5
votes
2
answers
5k
views
Is it generally acceptable to expose LDAP in read only mode to the Internet?
I need to support Mac clients who need to access a LDAP server to locate SMIME keys.
Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
- 115k
1
vote
0
answers
329
views
Wrong time on RODC after dcpromo
My team has been experiencing this strange problem: After doing dcpromo (followed by reboot), the time on the newly promoted RODC rolls back to the year 2011.
Before dcpromo, the time is correct.
...
- 5,138
1
vote
0
answers
100
views
Oracle Identity Manager and Microsoft Read-Only Domain Controllers
Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC)
My setup has OID importing users from AD RODC. Is this configuration supported?...
- 12.7k
2
votes
3
answers
504
views
Alternatives to the Cisco "Windows Server on WAAS appliance" for satellite office usage [closed]
We need to deploy RODCs to many small satellite offices where we may want additional lightweight infrastructure there too (file, print, dhcp)
Are there any networking devices that include RODC ...
- 4,514
3
votes
1
answer
1k
views
passwordless AD domain join
I remember back in the olden days of Windows NT you could create "blank" computer accounts so that anyone could join a computer of that name to the domain.
I would like to do the same thing with ...
- 248k
3
votes
1
answer
1k
views
Possible to upgrade a Windows 2008R2 RODC Core Domain Controller to 2012 w/GUI
We have some W2K8R2 DCs that are installed in Core or Core/Read only mode.
We would like to upgrade to Windows 2012.
Our goal is to also remove the "read only" attribute, and add the GUI.
Would ...
- 24.8k
1
vote
2
answers
2k
views
AD Replication to RODC; Failover to RODC when DC is Unavailable
I have successfully setup a Router on a Stick and have two subnets:
10.0/16
10.1/16
My Router's sub interfaces are set to 10.0.0.1 and 10.1.0.1, respectively.
My primary domain controller, running ...
CommunityBot
- 1
2
votes
1
answer
247
views
Can't deploy branch RODC
I am trying to deploy a branch office RODC and am getting an error about extending the domain and forest schema. I know I have already done this in the past but I went ahead and tried from the main ...
- 54k
2
votes
1
answer
2k
views
Best way to back up a domain controller before upgrading it from 2003 to 2008 OS?
I am trying to convert a DC from a 2003 DC to a 2008 RODC. Before I can do that, I must have a writable 2008 DC in my domain. I have a Windows 2003R2 x86 DC that I would like to upgrade to Windows ...
- 80.6k
2
votes
1
answer
6k
views
SYSVOL not replicating to some RODC
I'm stumped.
I was trying to replicate a file (corporate wallpaper) to branch offices via SYSVOL (so that workstations in branch offices don't have to pull the file from HO). However, the replication ...
- 8,753
2
votes
1
answer
163
views
Windows 2008R2 RODC
Quick and easy one for the return after Easter;)
I upgraded a clients domain a few months ago from a 2003DC to a 2008R2 Domain. All went OK, few issues we solved along the way but all good now. ...
- 2,968
0
votes
1
answer
235
views
Read only active directory option is greyd out
I want to deploy a RODC sever in an existing domain.I fulfilled all pre-requisite for RODC.There are two DCs in the domain both 2008 r2.When i try to install third DC in same forest,the Read only ...
- 1,825
0
votes
1
answer
2k
views
SharePoint Server 2010 change Domain Controller to RODC
i'm struggeling with the SharePoint Server 2010.
I moved my SPS 2010 into a DMZ within the same site as my RODC.
The SPS 2010 should get AD information from the RODC, but however, it dosen't, since it ...
CommunityBot
- 1
7
votes
1
answer
2k
views
RODC and remote site
I have a two-site domain (call them Local and Remote). Site Local has our main IT infrastructure, including two Active Directory Domain Controllers (2008R2). We're trying to set up an RODC at site ...
- 2,739
6
votes
1
answer
1k
views
Can Read-Only Domain Controller in External location work when VPN tunnel is down?
I have client which has multiple sites all over the world. They have 2 domain controllers in main location and every other location connects thru to main site with vpn tunnel. Currently the network is ...
- 39k
0
votes
1
answer
15k
views
Computers not authenticating to RODC in their site
I've got an RODC in our local site and a PDC in our co-location facility. I run SET on any of the computers in our local site and they all say LOGONSERVER='PDC'. They should all be authenticating to ...
- 134k
1
vote
1
answer
1k
views
Windows Server 2008 R2 RODC shows no installed updates, won't install updates, won't run DCPROMO to allow demotion
I have a Windoer 2008 R2 RODC. It runs AD DS and DNS and that's it. The install is less than a day old.
Windows update hangs at "downloading updates" indefinitely, Server Manager errors on refresh ...
- 101k