Tag Info

Hot answers tagged

8

How would this be setup connection wise without forcing all traffic through the domain controller? With site to site VPNs. You'd set up your cloud assets as a site, and then establish a site-to-site VPN between your cloud site and each of your physical sites. An alternate option, that Microsoft uses, but is generally ill-advised (unless you really, ...


7

Run dcdiag and check replication to ensure that your AD is healthy Safely migrate all FSMO roles to other servers Ensure that at least one other DC is also a GC Run dcdiag and check replication to ensure that your AD is healthy again Assuming you don't have any other applications on the DC, particularly non-AD-integrated DNS, you should be good to ...


5

When you boot a domain controller into Directory Services Restore Mode (DSRM,) Active Directory is offline on that DC. That is why you cannot load Active Directory Users and Computers on that DC. Assuming you are not using full disk encryption such as Bitlocker, this simple trick will get you back in the game: Boot the domain controller from alternate ...


3

Scary the situation you're in, but not impossible, and can be solved easily by enabling "SMTP matching", which is a process of transferring the source of authority from your Office 365 to your local active directory. this can be achieved by matching the SMTP address of your Office 365 accounts to the SMTP address of your Active Directory accounts, and using ...


2

It appears that there's a firewall between the client and server that is blocking the communication required for the client to join the domain. My suggestion would be that if the firewall is relevant only to these two instances that you unblock (allow) all traffic through the firewall between these two instances.


2

It seems that the DNS record for the DC could not have been found. Have you tried adding the DC's IP to the preferred DNS servers under the computers IPv4 settings?


2

RFC 4120 has your answer deep on page 74 and 75. It reads: kdc-options This field appears in the KRB_AS_REQ and KRB_TGS_REQ requests to the KDC and indicates the flags that the client wants set on the tickets as well as other information that is to modify the behavior of the KDC. Where appropriate, the name of an option ...


1

You'll need both the Domain Functional Level and the Forest Functional Level to be 2008 R2. To understand the differences, consult this page from Microsoft: http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels%28v=ws.10%29.aspx You'll note that there's no difference between 2008 R2 and 2012 R2 FFL - so that should be ...


1

Please restart Dnscache services. Go to services.msc --> Click on DNS Client and than restart.



Only top voted, non community-wiki answers of a minimum length are eligible