Tag Info

Hot answers tagged

6

If it's only Active Directory that you want to move then one possible solution can be is to install a secondary Domain Controller(DC) in your VM, transfer all FSMO Roles to the VM and then demote your older DC. Check the following links for step-by-step process Adding a 2012 Domain Controller to an existing Domain Demoting a 2012 Domain Controller


2

Sounds like the DNS configuration is incorrect. If you only have 1 domain controller, set the DNS server on its network adapter to 127.0.0.1. If you're using more than one, set the primary DNS server to the IP of the other DNS/AD server, and the secondary to 127.0.0.1.


1

$NameResult = Get-ADComputer -Filter * This query will return all computers in AD, and its result will never be empty; you should query for the actual computer name you are trying to find: $NameResult = Get-ADComputer $_.Name Also, the names in the DHCP log files will likely be FQDNs (such as computer.domain.local); if this is the case, you need to ...


1

Use the Credential Manager / Vault (search for it in start) to add a Windows credential for the AD server. Be sure to specify the username as DOMAIN\User. This worked for me just now. [This thread was a top search result but did not have a working answer for me, so I posted despite it being many years old...]


1

Active Directory doesn't emulate an LDAP server, it is an LDAP server, with some Microsoft extensions. Yes, some services simply use the provided credentials to do an LDAP bind, and authenticates the user if it succeeds. There are half a dozen ways you can authenticate SAMBA access against AD - a quick google search should bring up step by step ...


1

One way to accomplish this goal would be through the use of AppLocker. An excerpt from the link above: AppLocker helps administrators control how users can access and use files, such as executable files, packaged apps, scripts, Windows Installer files, and DLLs. Using AppLocker, you can: ... Create exceptions to rules. For example, you can ...


1

No this won't work. For permissions in AD to properly propagate, the members of a security group have to be security principals. Meaning that each object requires an active SID that can then be used to chain the permissions from one member to the next. Because a distribution group has an SID that is not active, it breaks the chain.


1

You could fix your physical machine, boot it from CD and reinstall Windows. Install AD & add it to your existing domain/forest as a second DC. That'll keep AD sorted out, and take the pressure off while you're working on migrating the rest of the data back - treat the other data as any server migration. SQL files can be taken offline and moved using ...



Only top voted, non community-wiki answers of a minimum length are eligible