Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
0
votes
3answers
61 views
Hyper-v core 2016 can't login on domain controller
My windows hyper-v core 2016 was connected to my DC from begining. Suddenly i make update and then i lose connection to my DC. I checked my network config etc. ip and look like it should. I run ...
1
vote
0answers
21 views
Windows domain username formats? NETBDOMAIN\USERNAME and DNSDOMAIN.COM\Username?
I'm running into issues with authentication and mapped network drives across a VPN tunnel. Namely error messages related to not being able to find a domain controller. I suspect this is somehow ...
9
votes
2answers
763 views
Backing up DC for a catastrophic case
I've been setting up off-site backups for the most critical elements of the company I work at. One of these critical elements is the DC.
Now, the company is fairly small, so has only a single forest, ...
0
votes
0answers
27 views
How to configure domain trust and DNS to share content with an external domain?
I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
0
votes
0answers
28 views
Issue with DC on different sites not replicating
I have a topology with 2 sites (SiteA and SiteB).
Sites are connected thru a VPN (OpenVPN network to network), every traffic is playing well (Ping, SMB, RDP, SSH, Web etc.)
All DCs are running ...
1
vote
1answer
63 views
DFSR Event 2004 With Error: 5 Access Denied
I am running 2 domain controllers and the DC1 will not replicate GPOs to DC2. Upon looking in the logs the DFSR on DC2 is not showing Event 4604 which is the succssfull copy of SYSVOL of DC1. If I ...
0
votes
1answer
37 views
Change FQDN of domain controller (and other hosts)
Is there a way to change the fqdn of my Active Directory domain controller and other hosts in the domain?
Currently, my domain controller is called dc1.domain.com, and I'd like it to be dc1.site1....
0
votes
1answer
95 views
How do I force a domain controller to sync with the PDC?
DC2 (a VM) is not syncing to DC1 (a physical server). On DC2 I get:
PS C:\> w32tm /query /source
Local CMOS Clock
What must I do so that DC2 syncs to DC1 as its time source?
Background: I had ...
2
votes
1answer
33 views
Error promoting secondary DC (Windows Server 2012)
I am trying to promote second DC server. Primary and secondary servers are both Server 2012 R2.
I joined secondary server to domain, but when i try to promote it, I get the following error.
...
1
vote
1answer
47 views
Multiple Domain Controller
i need help on configuring this properly.
we have 5 domain controller which 4 of them are located in different country and the other one is which is located in locally.
Problem:
PC cannot join to ...
1
vote
1answer
67 views
Several Audit Failures Messages in the Event logs with Even ID 4625
We have 3 VM's (All win 2012 R2) deployed on Azure. Today i noticed that since Dec 9th, there have been several Logon Failures messages getting logged in the Security logs on all the servers. It ...
-5
votes
1answer
37 views
AD PDC and SDC domain [closed]
We have PDC and SDC on our network.
I need clarification if our PDC server fail due to server fault, how to make SDC as acting PDC. What is the purpose of two DC's on same network. If PDC fail SDC ...
0
votes
1answer
28 views
setting up ADFS without SSL certificate
I want to know if it's possible to set up ADFS on a domain controller without having to use an SSL certificate, and if you must use one, is it possible to have on created/validated for free?
1
vote
2answers
45 views
Windows Server Domain Controller without real domain
I'm setting up a local logon server, simply to handle user logons and enforce some group policies.
Ideally we could do with not pointing a genuine domain to the server. Is there any way of setting up ...
0
votes
1answer
42 views
How do I restore an Operations Master domain controller when the password was lost?
System:
A single hosting server using Hyper-V hosts all but one server.
A second stand-alone server acts as the Operations Master domain controller, DC1. A diagram is at the bottom of this post.
...
1
vote
0answers
15 views
How best to deal with networked device security certificate on domain?
When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
1
vote
1answer
42 views
Secondary Domain Controller no longer part of the domain
[before anyone corrects me I've used the terms secondary and primary colloquially and I understand the terminology]
I have a problem with my secondary DC, but not on any other server in the domain. ...
3
votes
1answer
51 views
Disc write cache on Windows domain controller | always disabled by default?
Is it true that on a Windows 2016 domain controller (bare metall installation), the disc write cache is turned off even if a battery-buffered RAID controller is installed and recognized by the system (...
2
votes
1answer
70 views
Why should the IP address of a Domain Controller map to the site it serves?
I have questions related to this specific event:
Index : 865
EntryType : Warning
InstanceId : 5802
Message : None of the IP addresses (192.168.254.17) of this ...
1
vote
0answers
22 views
Redirect Active Directory Authentication histories in MS SQL server?
Is there a way that I can redirect active directory authentication logs / histories to SQL DB?
I am trying to find a way to log all domain users authentication activities to a SQL database, Is this ...
0
votes
1answer
203 views
SSSD AD Integration - Clarification on Computer to join AD
Objective
Clarify Computer, Not User, when integrating a Linux box with a Windows Domain.
Background
Having confusion because most SSSD AD information focuses on User Authentication, however ...
3
votes
1answer
77 views
All DCs fail VerifyEnterpriseReferences and DNS RReg Test - Everything else works including replication to a brand new DC
So, we recently added a new DC to our domain (Win 2008 R2 Enterprise) with the idea to replace our Win 2008 R2 Standard DC with a second Enterprise one - which will give us the 2 DCs on 2008 R2 ...
1
vote
2answers
56 views
Attempting to reconfigured DC that was tombstoned and is offline - 'Delete Domain' in dcpromo?
We have a DC (BDC2) that a former SysAdmin was trying to set up so we could decommission an older DC. This DC was mostly set up, and then abandoned (IE, it was sitting shelved on a VM that was turned ...
0
votes
1answer
216 views
IIS: Change Default Domain Controller For Windows Authentication
Please bear with me, I am a software developer and know little of Active Directory and Windows Server domains.
I am running a .NET MVC intranet application on IIS (Windows Server 2016 Standard) that ...
0
votes
1answer
62 views
Global catalog server and primary domain controller
I have a domain, and a child domain. The child domains domain controller is a Global Catalog server. I know i can use queries to access the partial attribute set inside the global catalog server, and ...
4
votes
0answers
228 views
Why did w32tm /resync cause it to correct itself, then overshoot?
Background:
My LAN's Windows Server 2012 R2 Domain Controller had been running without any external time server for a few years and I finally synchronized it now. It had been running about 2 minutes ...
1
vote
2answers
255 views
Why does Samba4 fail with NT_STATUS_INTERNAL_ERROR on Ubuntu 18.04
I am having trouble setting up Samba as an AD DC. At present I have 1 Ubuntu box which I’d like to use to share files with other computers in my home network. At present the same machine which servers ...
0
votes
0answers
23 views
Backup and deployment of GPO from one server to another
Hi I am using LGPO to backup the policy and deploy it to another computer with the same administrator name.
So I tried using LGPO /b pathname. Successfully backedup.
Then I went to the other computer ...
0
votes
0answers
25 views
Multiple domains on network - problems with DFS
I've inherited a setup that we've been running with for a number of years that I've finally decided to sort out.
We have two offices connected via a VPN tunnel. Office A uses domain.net and office B ...
0
votes
2answers
51 views
Best practice for Domain Controller [closed]
I have a main DC on Microsoft Azure VM and an on-premise DC. Both domain networks are connected with site-to-site VPN.
The purpose of setting up the DC on cloud was to get rid of the old on-premise ...
0
votes
0answers
523 views
Samba ADS: Cannot contact any KDC for requested realm
I followed this Setting up Samba as an Active Directory Domain Controller - wiki and all seems fine (kinit,klist,net ads user,net ads group work).
Adding users without password also works, but if I ...
1
vote
2answers
147 views
How to prohibit users from installing specific software in windows system in an AD
I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
45 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
1answer
266 views
Sync of SYSVOL content between Windows 2016 Domain Controllers
I have the following setup:
Two Domain Controllers in different sites (both Windows Server 2016)
-The sites are permanently connected via a VPN (so the servers can directly reach each other)
The ...
0
votes
0answers
54 views
Configure Windows Service user account based on Domain Controller check
We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain ...
1
vote
1answer
22 views
Make domain controller automatically register IP of a replacement domain member
I have 3 VM servers in a domain. One of them is the domain controller with active directory and DNS installed. Another server is an application server. One of the requirements for that application ...
1
vote
2answers
64 views
Remove 2nd DC role from Exchange 2016
I have an Exchange 2016 server with the DC role installed (server 2016).
This DC is the 2d DC.
Now a want to remove de DC role from the Exchange 2016 server.
I have already installed an 3th DC.
Are ...
0
votes
0answers
916 views
How to login locally to Windows Server 2016 with a domain user account?
I have an instance of Windows Server 2016 which is setup as a Domain Controller. An application running on this server requires a domain user account that is permitted to login locally. I have updated ...
1
vote
0answers
245 views
DHCP Server: Missing Addresses and how to free them
Our DHCP Server, running on a Windows Server 2012 R2 Data Center, shows that we have 241 addresses total with 220 (91%) in use, 21 available. If I go to the Address Leases node and count all IP ...
1
vote
1answer
103 views
Find the source of a DNS query on Windows Server
I have a machine running Windows Server 2012 R2 that is generating invalid DNS queries.
The server's only IP address is 192.168.1.20/24 and is configured statically. It is configured for a single DNS ...
1
vote
1answer
900 views
Windows 10 Hello on domain-joined computer - Credentials could not be verified
I am on a Lenovo X1 6th Gen laptop with Windows 10 Pro Build 1803 and connecting to my work domain. I have all GPO's correctly configured for Windows Hello. I am able to login to my domain account ...
0
votes
0answers
29 views
File server for two windows domain
We have 2 distinct windows domain with 50 users. Gradually every user and computer of domain A (windows 2003) will be migrated (or re created) on domain B (windows 2012). A trust between the domains ...
6
votes
1answer
200 views
Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?
I have 2 DC's that are both Windows Server 2016.
We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode.
Our Domain Functional Level is at ...
0
votes
0answers
105 views
GPO - SYSVOL permissions reset
We currently have two (2012 and 2012 R2) DC but SYSVOL seems to be corrupted as we cannot apply GPOs due to permissions complains (from either server). But we don't have a valid system backup so GPOs ...
1
vote
0answers
19 views
Server wont accept username or password
I have a server 2012 as my primary DC, for the past week some random issues are coming up. mainly:
users get unauthenticated network error message on LAN
Trust relationship breaks on random computers
...
-1
votes
1answer
133 views
Windows server as a domain controller but not DHCP and DNS server [closed]
I want to integrate domain in my company. My colleague says he don't want windows server because it must become everything (DC, DHCP and DNS server). My question is can you have Widows Server only as ...
0
votes
2answers
471 views
Uninstall application via Windows GPO
The company I work at is switching the applications they use in Operations due to a recent upgrade in hardware equipment. All user PCs at my office have what we will call Application 1 installed. ...
1
vote
0answers
33 views
Sync users on Debian with Active Directory
I would like to be able to dynamically manage accounts on a Debian box that I am building. For this I think a possible solution is to have the box on our Windows domain and sync with a user group on ...
0
votes
1answer
720 views
Server 2016 Tombstone Lifetime
Does anybody know what the default tombstone lifetime for Server 2016 is?
Thanks in advance.
0
votes
0answers
19 views
How to grant permissions Access for domain users on local computer
I have domain server windows 2012 R2 with clients connected to it
on each pc I need to install an oracle forms application which will need to use the TNS_NAMES.ORA file located on their local PC to ...
