0

I have created a Virtual Private Cloud(VPC) on AWS. I have created two Windows Server R2 machines. One of them I have added Active Directory role and promoted it to a Domain Controller. I want to add the second machine to the domain. The following are the IP configurations:

Domain Controller

DHCP Enabled: Yes
IPv4 Address: 10.0.0.163
IPv4 Subnet Mask: 255.255.255.0
IPv4 Default Gateway: 10.0.0.1
IPv4 DHCP Server: 10.0.0.1
IPv4 DNS Server: 10.0.0.163

Second Machine:

DHCP Enabled: Yes
IPv4 Address: 10.0.0.143
IPv4 Subnet Mask: 255.255.255.0
IPv4 Default Gateway: 10.0.0.1
IPv4 DHCP Server: 10.0.0.1
IPv4 DNS Server: 10.0.0.163

When I try to join, I get an error stating that the domain does not exist. I tried pinging one server machine from the other and even that timed out. Is there anything else I need to do(specific to AWS) so that I can join the domain?

0

does the domain actually exist publicly, or is it a private domain? If (as I suspect) your domain is not public, then you should add the DNS role to your domain controller, and configure the second machine to use your domain controller as DNS server. You can configure your VPC so that every instance spawned within this VPC will use this server as DNS, using dhcp options sets (you can also provide a list of DNS if you need more than this one)

| improve this answer | |
  • Both the machines have a public IP address associated to them. I have set the Primary DNS Server of the second server to be the Private IP address of the DC. – user300564 Aug 19 '15 at 10:07
  • I am not able to ping one VM from the other. Is that relevant? – user300564 Aug 19 '15 at 10:23
  • did you allow ping in the security group assigned to the DC? – David Yenglin Aug 19 '15 at 11:16
  • also in security groups, did you open port 53 for DNS? I recommend to open all traffic between your instances during the debug, and to harden later on when you will have identified the root cause – Tom Aug 19 '15 at 11:32
  • Port 53 is open. Have opened all ports actually and have also enabled ICMP in the security group – user300564 Aug 19 '15 at 11:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.