Tag Info

Hot answers tagged

16

One rationale for retaining one physical DC per domain is if there is a major incident that affects the host or trashes the frame storage for the virtualized DC's, you would have at least one physical DC with local storage to perform recovery and maintain continuity. Microsoft continues to perform this check and make this recommendation during Active ...


7

I too wouldn't make the Hyper-V host a DC. As for whether or not you should have a physical DC, my opinion is that with the changes Microsoft has implemented regarding virtualized Domain Controllers in general and DC-less cluster bootstrapping specifically, I don't personally see the need for, nor do I advocate having a physical DC. Maintaining a physical ...


6

It depends on how your configured your Virtual machines. If you have your VMs configured to 'Turn OFF', then shutting down the host OS would be close to equivalent to pulling the power from the VMs. If your VMs are configured this way, and you want them to safely shutdown, then you need to shut them down first. You could also use the other options like ...


6

Not quite. Every DC/DNS server hosting AD-integrated zones should contain '127.0.0.1' in its list of DNS servers, but only as the last entry. Ideally, you want the "Preferred DNS" to be a different DC in the same site, followed by a different DC in a different site if possible, and then localhost at the end of the list. In your case where you only have 1 ...


5

SQL Server will hold on to the RAM it allocates, so since it doesn't seem to go above 6-7 GB, I would allocate 8GB for SQL and keep 2-4 GB extra for the OS in this case (SQL always does some tasks outside the memory it allocates for sqlserver.exe. It would be a good idea to put this value (8 GB) in the min memory settings for your sql server instance. This ...


5

You can specify the managedBy attribute, and check the box for "Manager can update membership list". (This grants write permission for the Member attribute.) The person(s) who need to edit the group may be able to do it with the DSQuery widget, for which you can create the following shortcut: rundll32 dsquery,OpenQueryWindow They can search for the ...


5

I feel like you're looking for a one line answer, so here it is: You should have a physical DC if you do not trust your virtual environment's ability to withstand failure. We could wax on about the peculiarities and exceptions with each scenario, but I think this strikes the root of the question.


4

One notable difference in Windows Server 2012 R2 is the performance optimization of complex LDAP queries, however this has been back ported to Windows 2008 R2. You can read about it here: https://technet.microsoft.com/library/dn535775.aspx#BKMK_LDAPQuery There are Directory Service Event Log id's 1633/1644 for logging LDAP query performance, and you ...


3

You can find a list of the new Active Directory features in Windows Server 2012 here; and here is a corresponding list for Windows Server 2012 R2.


3

It seems you are using Passive mode. Passive mode uses TCP ports from 1024 to 65534 for Data channel. Make sure no Firewall is blocking this port range. Else, switch to active mode to only use TCP/20 for Data channel. EDIT : Also, FTPS can operate in two distinct mode : implicit or explicit. Explicit will use standards ports (for Active mode) : TCP/21 ...


3

As was noted in another answer, none of the Microsoft tools for MSDNS (dnsmgmt.msc, dnscmd, Add-DnsServerResourceRecord) appear to have any ability to add an SSHFP record. Additionally, these tools also don't appear to have the ability to add records of arbitrary types using the standardized generic opaque record format (ie, type<typeno> # ...


3

Let's take clusters out the equation and focus on the one line in your question that makes me shudder. Should I still be considering having a physical DC along-side my single, non-clustered 2012/2012R2 Hyper-V host that has a single virtualised DC on it? Why, why, why, would you want a single DC? In any given environment we try to avoid having single ...


2

If you are using the internal DNS then you are NOT using any external DNS servers. Your server contains an IP based list of root name servers which are first contacted for unknown domains. This in effect turning you machine into a resolver for domains other then ones it is a primary for.


2

Take the new machine. Install 2012 R2 as DC. Wipe one of the old DC, install 2012 R2 and make it a DC Wipe other old DC, install 2012 R2 and make it a DC Demote new machine (possibly reinstall it) and use it as web server. Remember to upgrade the domain functional levels. Done, without ever having only a single DC.


2

While I've never seen that on our hyper-v servers before, I have read of something that sounds similar. You might be looking at numa spanning happening. Your physical host does not have enough memory in his NUMA nodes to accommodate your 112GB (keeping in mind the way NUMA nodes and memory works) As such it is splitting up your 2 processors across 3 ...


2

Open Server Manager, click on Add roles and features click next until you get to Features and then uncheck Windows Search Service and complete the wizard. You might be best of sharing the issue you are having as well, is it a performance issue due to this service?


2

I'm assuming, since you say the server is prompting for passwords and because the server is in a domain that the users in question are not part of the domain. If the users are part of the domain, look at the NTFS file permissions inside the share and make sure that everyone you want to have access does, in fact, have access. You have to set the ...


2

You had to use/configure Windows Firewall, here. Simply modify the incoming RDP rules to allow connection only from the desired interface.


2

As you're using Windows Server 2012 R2 RC4 is disabled by default. Citation: Does this update apply to Windows 8.1, Windows Server 2012 R2, or Windows RT 8.1? No. This update does not apply to Windows 8.1, Windows Server 2012 R2, or Windows RT 8.1 because these operating systems already include the functionality to restrict the use of RC4. Technet ...


2

I thought I recognized those DNS IP numbers. You have DNS set to use Comcast's DNS, not the DNS that knows anything about sheptock.local. Change the workstation's DNS server to one that knows about steptock.local, including the DC for sheptock.local, and that should help. You can probably do this in your aforementioned wireless router if you're using it ...


2

Configure the DNS server on your domain controller to use the public Comcast IP addresses as forwarders only, or allow your DC to use the root hints. All other devices on your network should point to the DNS server on your DC. Your DCs should then point to itself in the network properties. Once this is all squared, the client that you're trying to add ...


2

First of all, you mention that you are using the Switch Dependent configuration / Hyper-V Port distribution policy. You might consider trying out the Switch dependent / Dynamic distribution policy, though. According to Microsoft's Windows Server 2012 R2 NIC Teaming (LBFO) Deployment and Management document, the latter is the first recommendation in all ...


2

Robocopy can copy the files, folders, permissions, etc. but not the Share information. You'll need to export the Shares from the registry on the source server and import them into the registry on the destination server.


2

Shortly: SSHFP is currently not available and I am waiting for it, too. Explanation: Windows DNS Server has very limited options for RRType to prevent you adding incompatible data. While the GUI has specific fields for every part of the record, some of them as drop down menus, also dnscmd /RecordAdd and PowerShell Cmdlet Add-DnsServerResourceRecord has the ...


2

Save yourself some headache and find an SSH server that was designed to run on Windows instead of an SSH server that was designed to run on *nix and hacked to run on Windows via a compatibility layer like Cygwin. There are some excellent choices highlighted in this previous answer: What is a good SSH server to use on Windows?


2

I've replicated this way before. It's just a zone transfer, really. I had to do it as part of a migration to new 2008 DC's in preparation for raising the functional level and replacing old hardware. The issue I had with 2003 was ad-integrated DNS not playing nicely. May have simply been because this domain had been an upgrade from NT 4.0 -> win2k -> ...


2

Edit: Please note the below only transfers A records and no other so you would still need to manually input remaining. I've never done the above, but another alternative would be to: export your A records and zones from 2003. Save it - c:\dnsrecords.txt re-importing into Server 2012. Replicate other 2003 settings on 2012 that covers external lookups. ...


1

I believe this has been covered in several places, but the Balanced power plan can cause excessive transitions between performance states. This results in exceptionally poor performance, and affects both physicals and virtuals. Change the power plan to High Performance to use the hardware to its limits. Slow Performance on Windows Server 2008 R2 when ...


1

One of the ways you could accomplish this without writing a Powershell script is with a monitoring service. Do you have any type of monitoring currently setup? Most monitoring services will notify that the server is unreachable and then also send a "all clear" email when the server is back up. A few of the free & open source tools I have used are Zabbix ...


1

You can deploy powershell profiles using group policy: 1. Prepare the profile.ps1 file 2. Copy it to a shared folder 3. then go to group policy --> User Configuration --> Preferences --> Windows Settings --> Files see this Technet Blog entry for more details



Only top voted, non community-wiki answers of a minimum length are eligible