I have a single Windows Server 2012 R2 Active Directory Domain Controller for domain
MYDOMAIN. I want to perform remote administration of the Active Directory from a workstation that is not joined to the domain. To achieve this, I'm running the Active Directory Users and Computers tool using
runas /netonly user:MYDOMAIN\Adrian.Hofman.
Once in Active Directory Users and Computers, I connect to
MYDOMAIN by entering the IP address of the domain controller in the
Change Domain Controller... dialog.
This works fine. However, when I do certain operations (for example, creating a new user, or going to the
Member Of tab of a users
Properties dialog), I get the following error dialog:
The specified domain either does not exist or could not be contacted.
The error dialog appears to be completely benign - after the dialog is dismissed, operation continues normally and successfully.
However, I'm deploying these tools to non-technical users, and I'm concerned the error messages will cause them to lose confidence in the system.
Any pointers on how I can make the error messages go away?
Edit: I've tried the following:
- I run
dcdiagon the domain controller; all tests passed; there didn't appear to be any useful information.
- I tried using Active Directory Users and Computers from a machine that is joined to the domain, and i don't get the error. I still need to be able to use AD U&C from a non-domain machine, though.