Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

0
votes
1answer
19 views

Attempting to reconfigured DC that was tombstoned and is offline - 'Delete Domain' in dcpromo?

We have a DC (BDC2) that a former SysAdmin was trying to set up so we could decommission an older DC. This DC was mostly set up, and then abandoned (IE, it was sitting shelved on a VM that was turned ...
-1
votes
0answers
11 views

Logs of the active directory domain services configuration wizard

Is the "active directory domain services configuration wizard" producing any logs? If so, what is the path to their location? I have run the prerequisites check a number of times, and I'd like to ...
0
votes
0answers
17 views

IIS: Change Default Domain Controller For Windows Authentication

Please bear with me, I am a software developer and know little of Active Directory and Windows Server domains. I am running a .NET MVC intranet application on IIS (Windows Server 2016 Standard) that ...
0
votes
1answer
33 views

Global catalog server and primary domain controller

I have a domain, and a child domain. The child domains domain controller is a Global Catalog server. I know i can use queries to access the partial attribute set inside the global catalog server, and ...
3
votes
0answers
33 views

Why did w32tm /resync cause it to correct itself, then overshoot?

Background: My LAN's Windows Server 2012 R2 Domain Controller had been running without any external time server for a few years and I finally synchronized it now. It had been running about 2 minutes ...
0
votes
2answers
46 views

Why does Samba4 fail with NT_STATUS_INTERNAL_ERROR on Ubuntu 18.04

I am having trouble setting up Samba as an AD DC. At present I have 1 Ubuntu box which I’d like to use to share files with other computers in my home network. At present the same machine which servers ...
0
votes
0answers
18 views

Backup and deployment of GPO from one server to another

Hi I am using LGPO to backup the policy and deploy it to another computer with the same administrator name. So I tried using LGPO /b pathname. Successfully backedup. Then I went to the other computer ...
0
votes
0answers
20 views

Multiple domains on network - problems with DFS

I've inherited a setup that we've been running with for a number of years that I've finally decided to sort out. We have two offices connected via a VPN tunnel. Office A uses domain.net and office B ...
0
votes
2answers
49 views

Best practice for Domain Controller [closed]

I have a main DC on Microsoft Azure VM and an on-premise DC. Both domain networks are connected with site-to-site VPN. The purpose of setting up the DC on cloud was to get rid of the old on-premise ...
0
votes
0answers
76 views

Samba ADS: Cannot contact any KDC for requested realm

I followed this Setting up Samba as an Active Directory Domain Controller - wiki and all seems fine (kinit,klist,net ads user,net ads group work). Adding users without password also works, but if I ...
1
vote
2answers
70 views

How to prohibit users from installing specific software in windows system in an AD

I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
37 views

Multiple different LM hashes per NT hash

i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods 1. dcsync 2. WPR (a windows software) in both cases i see ...
0
votes
1answer
65 views

Sync of SYSVOL content between Windows 2016 Domain Controllers

I have the following setup: Two Domain Controllers in different sites (both Windows Server 2016) -The sites are permanently connected via a VPN (so the servers can directly reach each other) The ...
0
votes
0answers
49 views

Configure Windows Service user account based on Domain Controller check

We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain ...
0
votes
0answers
29 views

SBS 2011 domain computers shown as “Unknown – No DNS entry”

I have a SBS 2011 server which had no issues. Recently I applied some updates and since then, the domain joined computers show as "Unknown – No DNS entry" in the Server Console. The DNS seems ok to ...
1
vote
1answer
17 views

Make domain controller automatically register IP of a replacement domain member

I have 3 VM servers in a domain. One of them is the domain controller with active directory and DNS installed. Another server is an application server. One of the requirements for that application ...
1
vote
2answers
50 views

Remove 2nd DC role from Exchange 2016

I have an Exchange 2016 server with the DC role installed (server 2016). This DC is the 2d DC. Now a want to remove de DC role from the Exchange 2016 server. I have already installed an 3th DC. Are ...
0
votes
0answers
218 views

How to login locally to Windows Server 2016 with a domain user account?

I have an instance of Windows Server 2016 which is setup as a Domain Controller. An application running on this server requires a domain user account that is permitted to login locally. I have updated ...
1
vote
0answers
51 views

DHCP Server: Missing Addresses and how to free them

Our DHCP Server, running on a Windows Server 2012 R2 Data Center, shows that we have 241 addresses total with 220 (91%) in use, 21 available. If I go to the Address Leases node and count all IP ...
1
vote
1answer
41 views

Find the source of a DNS query on Windows Server

I have a machine running Windows Server 2012 R2 that is generating invalid DNS queries. The server's only IP address is 192.168.1.20/24 and is configured statically. It is configured for a single DNS ...
1
vote
1answer
245 views

Windows 10 Hello on domain-joined computer - Credentials could not be verified

I am on a Lenovo X1 6th Gen laptop with Windows 10 Pro Build 1803 and connecting to my work domain. I have all GPO's correctly configured for Windows Hello. I am able to login to my domain account ...
0
votes
0answers
28 views

File server for two windows domain

We have 2 distinct windows domain with 50 users. Gradually every user and computer of domain A (windows 2003) will be migrated (or re created) on domain B (windows 2012). A trust between the domains ...
6
votes
1answer
155 views

Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?

I have 2 DC's that are both Windows Server 2016. We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode. Our Domain Functional Level is at ...
0
votes
0answers
33 views

GPO - SYSVOL permissions reset

We currently have two (2012 and 2012 R2) DC but SYSVOL seems to be corrupted as we cannot apply GPOs due to permissions complains (from either server). But we don't have a valid system backup so GPOs ...
1
vote
0answers
18 views

Server wont accept username or password

I have a server 2012 as my primary DC, for the past week some random issues are coming up. mainly: users get unauthenticated network error message on LAN Trust relationship breaks on random computers ...
-1
votes
1answer
54 views

Windows server as a domain controller but not DHCP and DNS server [closed]

I want to integrate domain in my company. My colleague says he don't want windows server because it must become everything (DC, DHCP and DNS server). My question is can you have Widows Server only as ...
0
votes
2answers
220 views

Uninstall application via Windows GPO

The company I work at is switching the applications they use in Operations due to a recent upgrade in hardware equipment. All user PCs at my office have what we will call Application 1 installed. ...
1
vote
0answers
23 views

Sync users on Debian with Active Directory

I would like to be able to dynamically manage accounts on a Debian box that I am building. For this I think a possible solution is to have the box on our Windows domain and sync with a user group on ...
0
votes
0answers
229 views

Server 2016 Tombstone Lifetime

Does anybody know what the default tombstone lifetime for Server 2016 is? Thanks in advance.
0
votes
0answers
15 views

How to grant permissions Access for domain users on local computer

I have domain server windows 2012 R2 with clients connected to it on each pc I need to install an oracle forms application which will need to use the TNS_NAMES.ORA file located on their local PC to ...
1
vote
0answers
30 views

How do I determine a “known-good” DC in preparation for detecting lingering objects?

Update I tried using the `Lingering Object Liquidator' tool, but am left with the same primary question (and changed the question). See comments for details I'm seeing Event Id 2042 in my Directory ...
0
votes
1answer
52 views

Build new domain server 2012 in parallel with existing windows domain server 2003

I have existing network with around 400 PCs on it working under windows xp professional and windows 7 professional too. Around 375 PCs are linked using static IP address and they are not connected to ...
0
votes
0answers
63 views

GPOs recurringly show as 'inaccessable'

Ok, So I have a windows server 2012 R2 environment and for the approximately the past 1-2 months we will randomly get GPOs that show up as inaccessable on various domain controllers while in GPMC. ...
1
vote
1answer
256 views

Does the SYSVOL and NETLOGON folder need to be in the same location on all domain controllers

I recently added a new domain controller to my domain. The past admins had the SYSVOL and NETLOGON folders on the C drive. I always thought it was best practice to have them on a separate drive so ...
0
votes
2answers
53 views

Windows 2012 DNS getting public ip instead of NIC IP

Win 2012 ADDC DNS Today PCs were unable to login to domain. We transfered the ADDC to a new server a few weeks ago. After all the troubleshooting I found out that DNS is not working correctly, ...
0
votes
0answers
81 views

Migration from DC in Windows Server 2008 R2 to Windows Server 2016

We are having a project to migrate a Windows 2008 R2 domain controller to Windows Server 2016, and I have some doubts: 1) While I am configuring and migrating user accounts to the new DC, can I keep ...
0
votes
0answers
104 views

In CentOS 7 how i can search Windows Domains ( DA ) users, using LDAP?

I am using LDAP authentication on my php pages on a CentOS 7 hosted machine, how can i search on the same network a user on a configured Windows Domain ( AD ) using LDAP ?
0
votes
2answers
299 views

Best practices - Replication/Mirroring DC with another DC (Exchange 2010 + AD on same server)

Please be sweet in your help, I'm begginner in Exchange/Windows Sever skills. Currently, I have one virtual server(VM) under Windows Server 2012 Standard with Exchange 2010 with role server AD. ( it'...
0
votes
1answer
100 views

Accounts are in Azure AD, we now have an on-premise server.

A little background of what I am trying to do, but am having no luck for various reasons: Windows 2016 Server on site domain join with Azure AD After receiving some feedback from my colleagues, I may ...
0
votes
1answer
27 views

I can't see AD Recycle Bin in new DC?

I've a Server 2012 DC which is some services became malfunctioned. I've created secondary DC and moved all FSMO role to new one but I can't see AD Recycle bin in new server, when I right click to ...
1
vote
1answer
133 views

Connecting to a DC with duplicate IP addresses

I have 3 Domain controllers in a Windows Server 2016 environment: A-serv01, A-serv02, and A-01. The only two that my team use and are aware of are the "serv" ones. However, one day I ran nltest for ...
1
vote
1answer
46 views

How to add a new pc to a domain with name of old pc

Some Background... A local small non-profit has recently lost their network guy (died unexpectedly) and I've been asked to help then install windows on some new pc's and set up wifi and printers ...
0
votes
1answer
57 views

Unusual Device Name In Windows Authentication Logs - JCIFS

I've seen a few articles with similar host names, however, I can not seem to find a definitive cause. We have seen some Windows security logs (from DC) linked to the lockout of an account; the host ...
0
votes
1answer
83 views

Domain Password Policy not working

I'm trying to enforce a password policy on my domain. I've tried setting the policy under The Default Domain Policy, Default Domain Controller Policy, as well as creating a new policy applied to the ...
0
votes
0answers
16 views

asymetric time of AD replication

I'm newbie to MS and AD. I got two domain controllers. First I've created DC1 and then joined to domain DC2 and promoted is as domain controller. When I make some changes on DC1 (DNS entry or new user ...
0
votes
1answer
75 views

DNS issue - Windows Domain Controller 2016 - Unable to resolve public and private hosts

I have configured a Domain Controller on a Windows Server 2016 (in AWS). Before setting up the AD I can able to browse the internet. But after configured the AD I can't able to ping the computers ...
0
votes
2answers
74 views

DNS Server on DC MS Server 2012 tries to reach gtld-servers.net

I have a Windows Server 2012 domain controller with DNS Server role installed. I configured several DNS servers as forwarders and that's working absolutely fine. All DNS requests are resolved. Now I ...
1
vote
0answers
158 views

When second domain controller is down, clients lose authentication

Our domain controller is on Windows Server 2008 R2. I recently set up another server to be our second domain controller. Whenever I take this second DC down, many of our client computers, some Win ...
4
votes
1answer
307 views

can I reset the clock on an expired password in AD?

I have a customer who's users all access the solution via RDP and whom are all set to 'password never expires' in AD. We're enforcing a password expiration policy and introducing a self-serve ...
0
votes
2answers
62 views

Server down - server on domain dcpromo

so here´s the problem. i have a small domain, controlled by a machine with the windows 2000 server. one of the pcs on the domain is another server, with windows 2008 server installed, where i run a ...