Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
0 votes
2 answers
31 views

Changing an AD account password - what services will it break?

we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
user avatar
0 votes
1 answer
28 views

Domain Member Servers - Accessing Certificate Revocation List (CRL)

In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
user avatar
  • 578
0 votes
0 answers
24 views

Cause of Master Key Backup Failure and Consequences of Workaround

I had a workstation afflicted with the issue described here: https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/dpapi-masterkey-backup-failures Basically, in older versions of ...
user avatar
0 votes
0 answers
8 views

domain controller B cannot use domain services once domain controller A is shut down (same domain)

So I have two different domain controllers on the same domain that reside on their own subnets. Domain controller A is the PDC with all the FSMO roles and Domain Controller B is on the other subnet (...
user avatar
0 votes
0 answers
8 views

Repeating errors on my domain controllers - "Network Connectivity Assistant" is rejecting some unknown request

Going through my system logs today I discovered that both my Server 2019 Virtual Domain Controllers seem to have this error firing off every 2 minutes or so: == The Network Connectivity Assistant ...
user avatar
0 votes
0 answers
12 views

Can Zerologon affect all domain controllers in a network?

If a network has a parent domain with multiple child domains each with a domain controller, but only one of the domain controllers is vulnerable to Zerologon, would that also affect the parent domain ...
user avatar
0 votes
1 answer
35 views

How to correctly sync time of an Hyper-V host which is member of a domain?

There are many posts concerning issues when dealing with time synchronisation over a domain which holds virtualised PDC Emulators (see this article). As a result our PDC Emulator time (and domain time)...
user avatar
  • 253
3 votes
1 answer
176 views

Interpreting LastLogon vs. LastLogonTimestamp

To get the time of last logon of an account in an Active Directory of a Windows domain im querying the LastLogon attribute on every Domain Controller and the LastLogonTimestamp on one domain ...
user avatar
0 votes
1 answer
20 views

PDCe time won't sync

I'm encountering a very strange situation where the time on my VM-hosted PDCe is reported as synced, but the actual time doesn't sync. The server's running about an hour fast. Here's what I've got: I'...
user avatar
  • 703
1 vote
1 answer
148 views

How to Update ADMX Files - Different Server OS Versions in Domain

My clients domain has various 2012R2, 2016 and 2019 Windows Server versions. Two of the four domain controllers are running Windows 2012R2 and the ADMX files haven't been updated in years. The other ...
user avatar
  • 578
0 votes
1 answer
26 views

what to be carefull when rebuilding primary AD domain controller?

I just did some search such as this one and this to avoid asking a question which already has answer. However, I'm not sure whether the information fully match my question or not. The situation is, I'...
user avatar
0 votes
1 answer
39 views

Unable to Transfer FSMO Role to Specific Domain Controller

I currently have two Windows 2012 R2 domain controllers - serverA and serverB. I have two Windows 2019 instances that were promoted to domain controllers with DNS roles - serverC and serverD. I was ...
user avatar
  • 578
0 votes
1 answer
155 views

Windows NTP Server Registry Configuration

I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
user avatar
  • 578
0 votes
1 answer
58 views

Is it possible to remove NICs from a domain controller in DNS?

I have the following situation and I'm not sure what its implications are. On a barebone server with 4 network interfaces, I'm running one of two DCs to my domain. Now, in spite of 4 network ...
user avatar
  • 963
0 votes
1 answer
153 views

Not typical "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" issue

I have the "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" problem. But it is not that simple. When I added a new user as a domain user, automatically the ...
user avatar
  • 1
0 votes
0 answers
12 views

Additional Bind caching nameserver next to domain controllers

In an environment where I already have two domain controllers acting as name servers I would like to run the Bind cache server installed on Ubuntu 20.04.3 LTS to act as nameserver for specific hosts. ...
user avatar
  • 1
0 votes
2 answers
97 views

Creating DNS A Record for 3 domain controllers

I have setup a new domain on our network consisting of 2 domain controllers, dc1, dc2. I can see the A records for the 2 controllers. But I need to do load balancing so that I can refer to the 2 dcs ...
user avatar
  • 3
0 votes
1 answer
278 views

How to Properly Migrate Active Directory Certificate Services

I have Active Directory Certificate Services installed on a Windows 2016 domain controller. We plan on spinning up Windows 2019 instances to replace our 2016 domain controllers. We have one DC with ...
user avatar
  • 578
1 vote
3 answers
40 views

Can I setup a new W2019 domain on a fresh Server 2019 using KMS for licensing if the KMS isn't available yet?

I'm tasked with setting up a Windows 2019 AD environment (new domain) from scratch. Normally we obtain our server licenses/activation from the company KMS system and we need to do that in this case as ...
user avatar
  • 6,242
0 votes
0 answers
26 views

The domain could not be found because the specified domain either not exist or could not be contacted

I have 2 Server Main Win 2016 server as Controller also DNS server the other is 2008 R2 after last update the 2008 can not find the main AD and does not log in, and on the main says the domain doesn't ...
user avatar
-2 votes
1 answer
37 views

Mount usb device as existing network drive

I tried to find an answer to my issue but haven't been successful so far. Maybe I couldn't find the right search terms, so please apologize, if the question has already been answered and I was just ...
user avatar
  • 1
3 votes
1 answer
260 views

Domain Controller autoenrollment - changing issuing CA

We are cleaning up our Windows PKI/CA environment and replacing our root CA with a new server. The current root CA has been issuing the following certificate templates for years now (in addition to ...
user avatar
  • 32.2k
0 votes
0 answers
98 views

Turn off password protected sharing for a Domain Controlled Pc

I am learning how to build and manage server 2019 I have added a computer in my domain network, and after doing so, the option from advanced network and sharing to turn off Password Protected Sharing ...
user avatar
1 vote
0 answers
75 views

Installing Graylog with Nxlog collector on a Windows DC: no service installed

I'm trying to install a NxLog collector on a Graylog client machine. The Graylog and associated infra (elastic and mongodb) is running just fine. The install client is a Windows Server 2019 DC ("...
user avatar
0 votes
0 answers
103 views

Samba not authenticating after upgrade

I just upgraded my Proxmox host, which also doubles as a storage server from buster to bullseye, which must have upgraded Samba as well. After this, I am unable to mount any Samba shares. The host ...
user avatar
0 votes
0 answers
61 views

Domain Controller Communication Timeout Limit

THE DOMAIN I have a domain setup with a parent/child schema. All servers are Microsoft Windows 2019 Standard. There are 2 top level DCs and the 2 child domains each have their own 2 DCs. The issue I ...
user avatar
  • 761
1 vote
0 answers
20 views

Single User Can't Access RDP by DNS, only by IP

I have three domain controllers, dc01.ad.exmaple.com (10.83.78.10), dc02.ad.example.com (10.23.20.15) and dc03.ad.example.com (10.24.20.15). They are all in the standard Domain Controllers OU. dc01 is ...
user avatar
  • 1,203
0 votes
0 answers
36 views

Migrating 2012 R2 Domain Controllers to Windows 2019 - Missing Group Policy Setting

I currently have two Windows 2012R2 Domain Controllers. I recently stood up two Windows Server 2019 instances and promoted them to Domain Controllers. The plan is to eventually demote/retire the ...
user avatar
  • 578
0 votes
0 answers
72 views

Warning: The server has IP addresses with conflicting site associations

There's a related post here, but it doesn't seem to match what I have going on. We've been having strange DFS issues related to users being pushed the wrong DFS server, or their mapped drives being ...
user avatar
  • 13
1 vote
1 answer
122 views

Is it OK to rename server name after configuring the domain controller in it?

I have Windows Server 2012 R2 and there is domain controller inside of it. Now I need to rename the server name, is it OK rename it directly ?
user avatar
0 votes
1 answer
44 views

How to properly and completely remove a Windows domain controller?

I have a single forest/domain with 2 DCs, SERVER2 and SERVER3. SERVER2 holds the FSMO roles. Both are healthy. I now wish to remove SERVER2 for a clean reinstall. Based on my research for the project, ...
user avatar
  • 703
0 votes
0 answers
24 views

Can't remove old DC from Sites and Services

I have introduced 2 new Win2019 DC's into my domain, and removed the old ones properly (demoted then removed from domain). I confirmed from the Users and Computers app that my old DC's are no longer ...
user avatar
  • 1,604
0 votes
1 answer
40 views

How to add users and computers back to server 2012

I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
user avatar
  • 1
0 votes
1 answer
47 views

Two PDCs, two ADs, two domains - how to replicate one domain/AD to the other?

Here's the history: SERVER2 was a 2016 Essentials Edition server, standalone with no other DCs. The OS became corrupted in a few areas, and so a decision was made to replace it. A standalone clean ...
user avatar
  • 703
0 votes
3 answers
98 views

How to check DNS in present in the Domain Controller or Not?

I want to check whether the DNS is present in the Domain Controller or not? or is there a way to filter out domain controllers without the DNS?
user avatar
0 votes
1 answer
119 views

Best way to deploy 2nd domain controller on cloud?

I'm looking for my best way to prevent single point of failure on my hybrid environment. I work for a small 100 users company and looking for a best way to deploy my second domain controller on cloud (...
user avatar
0 votes
1 answer
34 views

Do I need second domain controller when we use AzureAD hybrid setup?

The subject wraps up my story pretty straight - Do I need second domain controller when we use AzureAD hybrid setup? We have one domain with only one domain controller what is on-prem, and its AD is ...
user avatar
0 votes
0 answers
29 views

SAMBA server restore

Last week I ran into some hardware issues with my SAMBA DC server. I was able to recover the hard disk, but the other hardware seems to be nonfunctioning. I have a spare server and would like to ...
user avatar
  • 1
0 votes
0 answers
26 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
user avatar
  • 1
0 votes
2 answers
59 views

Can a Hyper-V VM made from a Server 2012 R2 domain controller backup be used to replace the physical domain controller if it fails?

We have a Dell PER520 with Server 2012 R2 running 5 servers; AD DS, DHCP, DNS and WDS. We created a Hyper-V VM on another server using a bare metal backup created with Windows Server Backup. The VM ...
user avatar
  • 1
0 votes
0 answers
300 views

Samba: INTERNAL ERROR: Signal 11 in pid (4.10.16)

Have searched and read around for hours without success. Maybe it's a known issue or easy to give a hint by someone with experience. This is a fully updated Centos7, kernel-3.10.0-1160.45.1.el7.x86_64,...
user avatar
0 votes
0 answers
21 views

Unable to join Azure Windows Server VM to local domain

I'm trying to get my Azure Windows Server VM to connect to my local AD. I've already created a Site to Site VPN Gateway and connected both the DC (172.16.1.5) and VM (172.16.1.4) and I've confirmed ...
user avatar
  • 101
0 votes
0 answers
34 views

Alternate DNS server outside of domain

I'm managing a small network that only has a single DC, which is running DNS. When I'm doing maintenance in the server in order for users to keep internet connectivity I have to configure a alternate ...
user avatar
0 votes
0 answers
16 views

How to create a new windows domain with an existing domain

We currently have an existing windows domain that uses ip range 192.168.2.X. The main internet router has an internal ip for this domain. We've just purchased new server hardware and want to setup a ...
user avatar
  • 121
0 votes
1 answer
750 views

Parent domain vs Child domain

As far as I know, a child domain's fully-qualified domain name (FQDN) must be a subdomain of the parent domain's FQDN. Also an implicit trust (two way - transitive) is established between them. Are ...
user avatar
  • 5
0 votes
1 answer
43 views

Can I add a child domain to an existing child domain?

Under a root domain i have 2 child domains. What I want to do is to create a child domain using an existing child domain as its parent domain, but it's currently giving me credential errors. Do I need ...
user avatar
0 votes
0 answers
155 views

Ansible get authentification timeout when using a domain account on a server running winbind

I installed a new domain controller hosted by Samba 4.11 on Ubuntu 20.04 (using ubuntu packages). I configured the system authentication to use AD credentials with the use of winbind. On others (...
user avatar
0 votes
1 answer
76 views

ERROR_NO_SUCH_DOMAIN When 2 of 3 DCs are down

I have 3 DCs on my domain, (2 on local office, 1 in Amazon AWS), and I would like to move to Amazon and cut off the 2 local DCs. I have shut down the 2 local DCs, to test if the AmazonDC is working ...
user avatar
0 votes
0 answers
562 views

Unable to join a dc I just created with samba ad dc

I followed these instructions: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller These instructions didn't work exactly as they read. There was one step I ...
user avatar
0 votes
1 answer
59 views

Unable to Log In to Domain Computers with Spoiled Domain Controller

The domain controller in our domain network is completely down and we don't plan to repair it. We couldn't log in to the computers because of that. Worst case, we even forgot the local admin password....
user avatar
  • 171

1
2 3 4 5
31