Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
1 vote
0 answers
16 views

Hybrid Azure AD Join - Not joining correctly

Another day, another Hybrid Azure AD Join issue. Having set up Hybrid Join, it looked like it was working.  The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
AngryDog's user avatar
0 votes
0 answers
22 views

Two Enterprise Root CA's on same domain

I am currently replacing 4 2012 domain controllers with 4 new 2022 domain controllers. I have run into an issue with the certificate authority as there were two enterprise root CA's installed on the ...
Tom Gordon's user avatar
0 votes
0 answers
22 views

LDAPS, Certificate Authority, and Domain Controllers

I have a domain environment with 4 2012 Domain Controllers that I am working on replacing with 4 new 2022 domain controllers. I have some questions regarding how the CA works when issuing certificates ...
Tom Gordon's user avatar
0 votes
1 answer
24 views

Both LOCAL SERVICE and SYSTEM users are changing server time on DC

Odd one for you, our DC's time keeps changing by an hour, but it doesn't just go down by an hour it also go up. I've been monitoring the event logs and I can see that there are usually two entries ...
RobC_CTL's user avatar
0 votes
0 answers
19 views

Establish Trust Between Two Active Directory Domains with a Common Root

In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
Christopher King's user avatar
0 votes
0 answers
39 views

bad password count in different sites

What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count? Account lockout threshold value is 3 for eg i have 3 sites - Site ...
Sandy Santhosh's user avatar
-1 votes
0 answers
24 views

Some questions about AD

I'm studying AD and i have some questions, i can't find the answers just googling.. can you please help me? 1 is a linux DC the same of a windows one? Or has it less potential? And in case of a Linux ...
jagghy's user avatar
  • 1
-1 votes
0 answers
23 views

Migrating Windows Server 2012r2 DC to 2019 DC with new domain name

Background: My project is to setup new DC using Windows Server 2019, with same configurations as my old DC, which is 2012r2. I need to keep both DCs running for 2 months in seperate network. I have ...
Cody Hung's user avatar
-1 votes
0 answers
44 views

Kerberos Ticket Issue - Event KDC_ERR_S_PRINCIPAL_UNKNOWN

I started seeing this entry in several systems and can't seem to figure out why. Assume a domain name of corp.com In the event log for server name it shows cifs/corp.com target name = cifs/corp.com@...
Jessie's user avatar
  • 180
0 votes
0 answers
28 views

Exchanging AD user groups with an external -not trusted- server for authentication and authorization

I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google. We have a Microsoft AD domain and are currently planning to use ...
PJ87's user avatar
  • 1
0 votes
0 answers
20 views

Adding users from DC to remote desktop users

How to add a user from DC to allowed remote desktop users for certain PC? It lets me choose only users on local machine, although I am connected with a user defined in DC server. A domain user. Even ...
SandShriner's user avatar
-1 votes
1 answer
79 views

why active directory computer object has machine password?

The active directory computer object (ie machine object) also have password , as far as i know only the user's logon name and users password is used when logging into the domain joined computer ? But ...
ironmanAJ's user avatar
0 votes
0 answers
45 views

Server loses domain connection when promoting to domain controller

I am trying to stand up a new domain controller and add it to an existing domain. The two servers are in two separate cloud zones. Before promoting the new server I was able to contact the existing ...
Tony's user avatar
  • 457
0 votes
0 answers
150 views

Windows asks to install printer driver over and over

I have over 400 users on a 2012 DC, and a Win2019 server configured as a print server, which serves about 279 printers of varying make/model. Some users are receiving driver install messages when ...
AaplMike's user avatar
  • 167
0 votes
1 answer
103 views

Kerberos settings in GPO never seem to apply in spite of the GPO otherwise working

Server 2019 Domain Environment. Issue is related to the DCs themselves. I've a self-created GPO on my DC OU that sets a bunch of things, several of which are Kerberos settings: Curiously, while ...
The ITea Guy's user avatar
0 votes
1 answer
182 views

Handling GPO Policies between different domains

I have a handful of changes in a policy that I'd like to apply to other domains. I am wanting to copy this policy to these other domains so I do not have to create them for every dc. Most of what I've ...
ErocM's user avatar
  • 226
1 vote
0 answers
74 views

looking for "access denied" server log entries on network shared print jobs (Windows) after removing the 'Everyone' group

In an effort to try to remove the ability for users to print directly to an MFP shared printer, relegating the users to use their badge ID for more secure printing while in the office... Currently ...
Feed-Jake's user avatar
0 votes
0 answers
142 views

Unable to join to domain

I have deployed two EC2 instances on AWS with one as a DC role and the other as a sql server which I intend to join to the domain. However when I try to join it I am getting the following error. ...
Vinay Joseph's user avatar
0 votes
0 answers
26 views

Can connect but not bind using ldp when creating new Domain Controller

I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server) .....but when I attempt to bind ...
Mick8695's user avatar
  • 103
0 votes
0 answers
31 views

Can't bind to ldaps when creating new Domain Controller

I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server) .....but when I attempt to bind ...
Mick8695's user avatar
  • 103
0 votes
0 answers
31 views

Member servers pull Group Policy from only 1 (of 2) domain controllers?

Environment overview: AWS DC1 = Win2k12 instance in region1 - AZ1 DC2 = Win2k12 instance in region1 - AZ2 ~ 60 Member servers = all within region1 Replication set up between the two DCs for GPO, DNS, ...
celeryauthor's user avatar
0 votes
0 answers
32 views

Log-in Failures after Endpoint Computers Name Change

We have a Windows Server 2016 on a VMware virtual machine, with about 30 end stations connected to the server DC. Recently, a day after we changed several of the names of the computers of the end ...
SandShriner's user avatar
-1 votes
1 answer
56 views

What happens if the only DC fails?

I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company. Lets say, I am running ...
Borkhuu Enkhjargal's user avatar
-1 votes
1 answer
131 views

Local user login on a domain machine, receiving System error 5 occurred Access is denied error

We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user. ...
MrPeachyPenguin's user avatar
-1 votes
1 answer
88 views

Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]

I am new to this domain controller and new to the company. all the below domain controller are in windows 2008. we got two parent controller parent-DC1-2008.example.com parent-DC2-2008.example.com ...
David NG's user avatar
0 votes
1 answer
45 views

SQL Server - Windows Active Directory users

I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
Roman DotNetDev's user avatar
4 votes
2 answers
704 views

Windows Server 2019 randomly changes time and date to incorrect values

In the last two months, we have got quite a few issues with the server time and date occasionally changing to some absolute random values. Sometimes it is a few days in the future or past, sometimes - ...
MyUserName's user avatar
0 votes
0 answers
226 views

Error promoting Windows Server 2022 to Domain Controller

I have a virtual Windows 2022 Server in a VMWare ESXi environment, and a WS2019 virtual in another host, which is my Active Directory Domain Controller. I've been trying to promote the WS2022 to ...
Erik's user avatar
  • 1
2 votes
0 answers
304 views

Using Linux tools to allow a user in a domain to access only certain computers

I ran samba-ad-dc domain controller on Debian Bullseye. No problem to create users and groups, organizational units, etc and to join windows or Linux computers to domain. But there is other task: On ...
Mikhail Kulikov's user avatar
0 votes
0 answers
321 views

Deleting all dynamic DNS records from AD-Integrated DNS server? What can go wrong?

[1 Forest, 1 Domain, 2 DCs and nothing more - nothing special] Is it OK, to remove all dynamic records from DNS. If I decide to do so, should I do the same on the second Domain Controller? Beside one ...
v.doro2's user avatar
0 votes
0 answers
12 views

ADO on premise recovery scenario (domain controller, app tier + db tier)

We are thinking about disaster recovery scenarios of one of our services and I am currently lacking some knowledge or sources to further investigate. We have an Azure DevOps On Premise server that has ...
Samuel's user avatar
  • 103
0 votes
0 answers
45 views

I can't PING to my Cisco router when I try to access the domain server

I have this network image I tried to connect the pc1 to the domain (in Windows Server 2012). To do that I tried to PING from pc1 to the server and that works. After that I go the pc1(Windows 7) and I ...
user84999's user avatar
  • 109
0 votes
0 answers
332 views

Kerberos Errors in Azure Event ID 5

Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors. The Kerberos client ...
cybernull's user avatar
0 votes
1 answer
115 views

How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?

I'm a cybersecurity researcher, studying netflow patterns to learn about reflective DDoS events that leverage CLDAP as a UDP reflection vector. I need to be able to distinguish between a windows ...
chad's user avatar
  • 439
5 votes
3 answers
2k views

Domain computer account trust relationship failed after connecting system with old hard drive to network

Our server is Windows 2016. I set up a new install of Windows 10 on a new hard drive. I named the computer on the new install the same as the old one. I kept the old hard drive as-is and didn't make ...
spencerja8's user avatar
0 votes
0 answers
257 views

Domain Controller Upgrade 2019 to 2022

I have 3 Domain controller in my environment Windows Server 2019 Standard. Primary DC : On-prem (FSMO role) Secondary DC : On-prem Tertiary DC : Cloud I want to upgrade my domain environment to ...
DinushaMadusanka's user avatar
-1 votes
1 answer
796 views

How to Restrict network shares access for a specific domain user in all computer except a one specific computer in a Domain Environment?

I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules: Block access to network drives (network ...
IT Researcher143's user avatar
0 votes
1 answer
146 views

Readonly Domain Controller for Remote Office

We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
user1913559's user avatar
-1 votes
2 answers
161 views

Range of Normal Usage for Domain Controller's LDAP Ping

I'm a security research studying CLDAP as a vector for UDP reflection attacks, a from of Denial of Service. I'm not a MS Server expert, so I want to sure up my understanding of the context of the ...
chad's user avatar
  • 439
0 votes
1 answer
436 views

Firewall Ports Domain Controller to Clients

I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in ...
Mia's user avatar
  • 3
0 votes
0 answers
113 views

Leaving Windows Servers out of a domain

I'm not much used to running Windows Servers and need ground to either defend or withdraw from this idea and have found nothing on Google. The company I work for recently suffered a ransomware attack. ...
Leonardo Pessoa's user avatar
1 vote
1 answer
74 views

feedback on HDD speeds for a HP Proliant ML110 Gen10 server

I have a RAID 1+0 array in a HP Proliant ML110 Gen10 server with 4 x 7200RPM 2.5" 6Gbps SATA drives. The power management is set to Static High Performance Mode. I ran a CrystalDiskMark benchmark ...
Kamal's user avatar
  • 145
1 vote
1 answer
166 views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
Prox's user avatar
  • 111
1 vote
1 answer
4k views

Kerberos failures with accountname "host"

Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist). Event Viewer shows those failures as ID ...
Panki's user avatar
  • 163
0 votes
0 answers
78 views

retrieve computer name on domain controller

Good morning. I currently have a domain controller (Windows server 2019) where there are approximately 500 users and computers. when a computer x is damaged, it reinstalls the operating system. The ...
Norcarde's user avatar
0 votes
0 answers
82 views

Domain Controller isn't logging events enabled in subcategories

I have an environment with 3 domain controllers, one on 2019, one on 2016, and one on 2012R2. A GPO is set on the Domain Controllers OU that has the following enabled Audit: Force audit policy ...
Josh 's user avatar
3 votes
2 answers
720 views

Why are logon types on Domain Controller and Workstation different

When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the ...
Amin Mirzanejad's user avatar
1 vote
1 answer
1k views

Is it safe to mix 2016/2022 as domain controllers?

We have a 2016 Server Essentials PDC, and now we'd like to add another DC for failover/backup purposes. Will it be OK to use 2022 Server Standard for this second DC? (Web searches are returning ...
InteXX's user avatar
  • 753
1 vote
1 answer
3k views

How can I remove a no longer existent child domain from my forest?

In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
stackprotector's user avatar
0 votes
2 answers
63 views

Changing an AD account password - what services will it break?

we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
user2463687's user avatar

1
2 3 4 5
32