New answers tagged domain-controller
2
a) In order for the users to be able to perform these actions from their workstations, is there any other method other than installing the Remote Server and Administration Tools? Could I install only the 'Active Directory Users and Computers' snap-in somehow?
ADUC is part of RSAT. They need that installed unless they want to use the commandline net use ...
3
Authenticated Users have READ permissions (along with a few other permissions) at the domain root by design. These permissions are inherited by all child objects in the domain (AFAIK) and are related to the operation of Active Directory, it's functions and it's objects. These permissions aren't directly related to Delegation of Authority.
0
Am I correct in assuming that this will mean somehow preventing the
2012 box from being a domain controller? If so, how can I do that?
Server 2012 Essentials is essentially the re-branded Small Business Server. This means that it must be the only DC on the network. You can usually only migrate from an SBS server to another SBS server, not add SBS to ...
0
You could modify your hosts file the unfortunate downside here is the hosts file is relatively stupid. You have to define records for each individual host (no wildcards).
You could also set you WINS record via DHCP (or manual on your laptop) to your server that way Microsoft netbios resolution would work: \\server\stuff granted its a legacy protocol you ...
0
DNS clients by default are supposed to reset their DNS Server priority at set intervals (by default, in Windows, I believe it is every 15 minutes). This means that if the highest priority DNS server goes offline, the client resolver will start sending queries to the alternate/secondary DNS server. All queries after this will be sent to this secondary DNS ...
0
Look into DirectAccess, which works as a SSL-VPN client on the computer layer. I don't think you can run your directaccess server on Azure though, as Azure is TCP only.
The point though, is this: If you need to be able to manage computers outside your datacenter, I'd argue that placing a DC in Azure is a bad deal. It's becoming popular to deploy a DC ...
1
I've had similar issues, here's what I usually do:
open a command prompt from the workstation you are using to connect to the server.
run the net use command to see if a connection for that share already exists, if it does, delete it.
manually run the net use command to connect to the server, i.e net use \\server\share /user:domainname\username
This should ...
1
Two things come to mind:
1 - Make sure when it prompts that you are using DOMAIN\username and not simply username.
2 - Make sure there aren't any existing connections to that server with different credentials (although typically the error is different when this is the case). You can verify this at a command prompt by typing net use and looking at the ...
0
I found this thread, which enlightened me to the /force parameter. The command that ultimately worked was:
netdom remove /d:DomainThatNoLongerExist.COM HYPERVComputerName /FORCE
5
It is definitely feasible and supported to run a domain controller in Azure. It depends on what you're looking to achieve as to whether that's the best option. If you're primarily looking to manage client PC policy and provide authentication, then you generally want a DC close to the machines it services. If most of the users are in an office and you have ...
2
To deploy KB2779562 on your computers, you can use WSUS or any other methods (in WSUS you can set the deadline for the update to some time in the past to force the update to be applied immediately).
Changing the time zone is done differently depending on the OS version:
On Windows 7 or Server 2008 R2 you can use tzutil /S "<New Time Zone>". This ...
0
Ok, so heres what i did to get around it, which i guess was the obvious answer however took quite a lot of time.
First i installed a copy of windows server 2012 standard with GUI on a different server i wasn't using.
Next i copied the VM files and VHD file to the new server, in directories with the same name.
Then i created a new VM in the new server, i ...
0
You can use gpresult remotely with the /s option. With a list of computer names you want to query, you could theoretically script this, using the return status of ping to filter out hosts that aren't on the network, and do it periodically.
Another thing you can do is create a login script which calls gpresult and does whatever you want with the result. ...
1
The classical solution to this is to set up a VPN that a computer can use without a user login; the mechanism used is similar to the one from ancient days when someone might dial an internet connection to connect to their domain. Setting this up can be somewhat of a chore because you have to define the VPN connection in such a way that it can actually be ...
0
I found something that finally stopped it.
I entered the Rackspace unique username that they have on record for our system. You have to contact them to get this list. I put this unique username in Windows credential manager for Outlook instead of my email address and did not change the password. So instead of "johnny.hendricks@mydomain.com" for the user, I ...
1
How can i know, from where my Server is synchronizing time with?
Open a command prompt as an Administrator and run:
w32tm /query /configuration
Look at the NTP source.
0
The default service in Windows which typically synchronises time is the W32Time service, whose configuration parameters are situated in the registry at HKLM\SYSTEM\CurrentControlSet\Services\W32Time. That will give you some insight into how time synchronisation is taking place if the native Windows mechanism is in use.
Additionally, you can also look for ...
Top 50 recent answers are included
