New answers tagged

0

When I create a Group Policy Object, I cannot link it to the container as it is a group and not an OU. Security Groups and Organizational Units are not the same thing. GPOs are linked to OUs not Security Groups. So link the GPO to the OU that has the computers in it. If the computers are in the same Security Group but not OU then link the GPO to the top ...


5

A forest is a security boundary. A domain is a management boundary. With modern delegation, fine-grained password policies, and item-level targeting in GPO, its entirely possible to create management boundaries within a single domain as well. There's no "right" answer. Evaluate your situation and choose whichever is most appropriate based on your ...


2

You assign a full address (/128) in a quad-A record. The /64 is a range of addresses for you to allocate from. For example: 2604:4301:a:103/64 is my range, and I can use any address between 2604:4301:a:103:: (the :: is shorthand for all-zeros) and 2604:4301:a:103:FFFF:FFFF:FFFF:FFFF.


1

How do you propose that you would assign a subnet to an AAAA record? :) Per the RFC: The AAAA resource record type is a record specific to the Internet class that stores a single IPv6 address.


1

The procedure seems to be on the client pc leave the domain delete the client pc from the server dashboard remove the connector software from the client (I don't know how to do this) re-run the connector https://server/connect This does make the back up and Launchpad work again It doesn't make the server correctly see the client computer - OS type / ...


0

If ovh didn't set nameservers that your vps will use, you can do two things. First is to set nameserver on your own on your vps. Second option is to create dns zone on existing nameservers that domain is using (what you've tried to do). What to do: Create dns zone for your doman on existing nameservers (name cheap ones in this case) and point that domain ...


1

You need to look at your file permissions and SFTP server (ssh) configuration. Consider Using ssh to do it using vi. I have no idea what cpanel has to do with domain names. Can you please clarify your question. It depends what you're trying to achieve. You need to describe what you're trying to achieve more carefully and precisely. If all you're trying to ...


0

Given your information, I assume you don't have (and don't plan to) connectivity between Branch A and Branch B. Also, please be aware that there's nothing such as a "main DC": that was a Windows NT 3.5 thing, but it was gone with Windows 2000 Server. It was replaced with FSMO roles, and all those roles need to be accessible by all the DCs. The next point ...


0

The local group guest is done for that. Any member of that group on the server/computer will got a temporary profile even if a local profile is already on the machine. Thus that setting ignore local profile and give everyone a new temporary profile


0

You can use the Set roaming profile path for all users logging onto this computer policy value in computer configuration on a GPO targeting only that one PC. If you set the path to something invalid, any user will always be logged on with a temporary profile.


2

Sounds like the workstations are logging in with cached credentials when the new server is offline. When you recreated the domain it will have generated new UUID's and as you've installed from fresh, you will have had to recreate all of the user and computer accounts generating new UUID's there also. Without a good backup you are looking at a lot of work ...


0

You need to make Wordpress generate URLs that don't include port numbers. Web servers cannot do this task, since they cannot understand the HTML code well enough to reliably convert the URLs.


2

Moving comments to answer so as to avoid extended discussion via comments. Run these two commands: Foreach ($NC In (Get-ADRootDSE).namingContexts) { Get-ADObject "CN=Infrastructure,$NC" -Properties fSMORoleOwner } And Foreach ($NC In (Get-ADRootDSE).namingContexts) { Get-ADObject $NC -Properties fSMORoleOwner } You need the Active Directory module for ...


1

No, in general you need DNS entries (at least one wildcard entry as per your comment) so that the clients know where to look when they call the domain name. Only for strictly local dev purposes, you might get away with defining entries in your hosts file on the client. This would need to be done on every client and usually don't work on mobile devices ...


0

On top of joeqwerty's answer I would add something; In roaming's profile, windows copy all the data to the local computer minus redirected's folder before the login, but you can use another product that stream the user profile (Citrix Profile Manager), thus it copy only the needed file for the login. Profile Streaming: With profile streaming, users' ...


2

Using Folder Redirection to redirect the users folders (Documents, etc.) to a network share would mitigate the need to copy their files from workstation to workstation. Using roaming profiles would mitigate the time it takes to build a user profile on a new workstation. With roaming profiles the profile (including application settings) would be built once ...


0

It can take up to 48 hours for a domain to propagate entirely, but usually not more than 24 hours. I always use this site to check if it's fully propagated or not: https://www.whatsmydns.net/


0

Check your DNS nameservers, eg. using google's one, 8.8.8.8. Assuming a linux console: host -t NS $YOURDOMAIN 8.8.8.8 So you get the authoritative nameservers for you'r domain Do the same with other open DNS servers (OpenDNS, web sites, as @Law29 suggested) If the replies you get match your new DNS servers you should be ok.


1

If your website has been available off and on after your changes, then yes, something is wrong. Switching one good DNS to another good DNS does not result in any downtime at all. You can use dig or a number of free online tools to analyze your DNS setup (googling for analyze DNS setup online returned five different tools as the first five results, the ...


1

In the GPO's console: Computer Configuration\Administrative Templates\System\Windows Time Service\Time Providers\Enable Enable Windows NTP Client and Enable Windows NTP Server. Double Click Configure Windows NTP Client settings, type NTP server Name In case the GPO does not apply, you can enter it by script or by hand that way : w32tm /config /...


1

Invoke WMIC with the /USER and /PASSWORD options.Due to the problem you describe, you need to provide a local account on that computer (not a domain user).


0

I can ping everything both ways using fqdn, however replication for AD and DNS is not working - If AD replication used ICMP then that would be great, but since it doesn't then I'd suggest you stop using Ping as an AD replication troubleshooting tool. It's great that Ping tells you there's connectivity between the two DC's but beyond that Ping is pretty ...


0

My laptop is joined to a DOMAIN1. I can perfectly manage DOMAIN2 with this command. I did not have to create any local account. DOMAIN1 and DOMAIN2 are completely different controllers. No trust relationship exists. The command is: runas /u:DOMAIN2\Administrator /netonly "mmc %windir%\system32\dsa.msc /server=DOMAIN2" You will be prompted for ...


0

The samba4 packages that ship with both CentOS 6 and 7 do not have domain controller functionality. If you look inside, eg, samba-dc-4.2.3-10.el7.x86_64.rpm, you'll find it contains exactly one file, /usr/share/doc/samba-dc-4.2.3/README.dc. This file reads as follows: MIT Kerberos 5 Support Fedora is using MIT Kerberos implementation as its ...



Top 50 recent answers are included