Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

Windows Server 2022, DC Promo - Server manager closes abruptly

I have Windows Server 2022 virtual machine (Hyper-V Host, same OS) on which I am trying to deploy a second domain controller. I successfully installed the AD Domain Services Role. But when I try to ...
Taha Rajabali's user avatar
-1 votes
1 answer
48 views

Active Directory Domain Admin and UAC Prompts not working

I have strange issue in Active Directory environment. Let me try to explain step by step; I have two DCs one of Primary second one is Additional. also repplication is work well between them. Imagine ...
Lacrymae's user avatar
1 vote
1 answer
81 views

Best Practices for Restricting Domain Administrator Access in Active Directory

I’m seeking insights on the best practices for securing Domain and Active Directory environments, specifically regarding limiting of Domain Administrator access privileges. The goal is to ensure that ...
IT Researcher143's user avatar
0 votes
1 answer
163 views

SYSTEM account of domain controller does not have permissions to change password of domain user

Have some software that runs as the SYSTEM account on the domain controller of an Active Directory. Part of what the software does is change passwords of select accounts at pre-determined intervals ...
Joseph Willcoxson's user avatar
0 votes
0 answers
27 views

What determines which server set-aduser connects to?

I was wondering this as I used it to create a user. Get-ADuser could see it straight after. Next I used Get-ADDomainController to presumably see what AD Set-ADuser created it on. However when I went ...
user66001's user avatar
  • 213
0 votes
0 answers
22 views

Using old roaming profiles after Domain controller change

Is it possible to keep the current network profiles on users' machines even if the domain changes? It is not necessary to migrate current users from the old server, but the local network profiles ...
Roger Wayne's user avatar
-1 votes
2 answers
236 views

How to resolve "Unable to obtain DNS hostname of Active Directory domain controller with ntdsa object name...."

It starts as a programming problem: Domain.GetCurrentDomain().DomainControllers triggers an exception: Unable to obtain DNS hostname of Active Directory domain controller with ntdsa object name &...
dragonspeed's user avatar
0 votes
1 answer
397 views

Domain Admin account unable to access AD server both locally and via RDP

I am experiencing an issue with our "Primary" domain admin account whereby I am unable to connect to the AD, using this account. I am aware that this is not best practice as we normally use ...
Dimzy97's user avatar
0 votes
0 answers
86 views

Unable to logon using RDP after domain migration

We have issues after migrating a DC to a new DC. When we attempt to RDP to some of our VMs using the DNS name, it fails. Using the IP address works. This issue only occurs on some VMs. It seems to be ...
Deggenau's user avatar
0 votes
1 answer
357 views

kpssvc service won't start on DC

I have a single domain with 2 sites, each site has it's own 2019 DC. On the (secondary) site I see an alert that the KPSSVC service (KDC Proxy Server Service) is not started. And it's startup type ...
TSG's user avatar
  • 1,852
0 votes
0 answers
166 views

Error demoting Server 2008 R2 domain controller

I have a domain that is at functional level 2008 R2 running on a 2008 R2 DC. joined a new 2019 server to the domain added AD services role to the 2019 server migrated FRS to DFSR on 2008 R2 promoted ...
Jerry Welliver's user avatar
1 vote
2 answers
288 views

Upgrading single Domain Controller server from 2008R2 to server 2019

We have a client with a very old active directory environment on Windows Server 2008 R2. We are going to replace it with a new server and would like to upgrade the existing server to keep all of the ...
Jerry Welliver's user avatar
-1 votes
1 answer
277 views

How to stop/break replication between 2 domain controllers that are in same domain? [closed]

So I was attempting to break replication between 2 domain controllers by editing objects in AD, since I cant just go to powershell and stop it with command, but it was unsuccessfully. I have to stop ...
user23337663's user avatar
-1 votes
1 answer
443 views

Members of "Remote Desktop Users" group cannot logon to Windows Server 2019 domain controller

I installed a Windows 2019 domain controller. I added a user to the Remote Desktop Users group. The user cannot logon to the server, unless I add them to the Administrators group. All I see in other ...
MC9000's user avatar
  • 129
0 votes
0 answers
183 views

DNS error 4011, unable to write, or update

I encountered one intriguing issue with DNS service on a pair of our domain controllers. Frequently, about every half an hour (sometimes skips or shows only on one), I get the error ID 4011. These ...
Pepper's user avatar
  • 1
-1 votes
3 answers
432 views

Installing Domain Controller and Hyper V Host in the same physical server 2023

I know there has been some articles pertaining to the concerns and it is a big NO NO. I'm wondering over the years with the latest OS versions and numerous patches by Microsoft, does this theory still ...
Nad's user avatar
  • 3
-2 votes
3 answers
416 views

I would like to use an ldap query for users with direct reports (aka all managers)

I am looking for an LDAP query that returns all users that have direct reports (aka all managers) could anyone help me out with that?
Anthony Good's user avatar
0 votes
0 answers
80 views

server 2012Rd backup domain controller not communicating with PDC

I have client with a server with four vm's One is primary dc and another backup dc. There was an error generated with windows time service. The recommendation was to add/ change the logon to ...
docs's user avatar
  • 1
1 vote
1 answer
436 views

An Active Directory Domain Controller (AD DC) for the domain could not be contacted

I have a PC with Windows 11 Home. I use Hyper-V to install 2019 server (Server) and 2 Windows 10 Enterprise virtual machines (VMs). I add two Enterprise VMs on Server as follows. I select MARVEL.local ...
jerseypizza's user avatar
0 votes
0 answers
196 views

Use Samba AD DC as Password Backend for Samba PDC

I've got the following situation: Old Samba-server data.company.com Version 4.6.7 Configured as a PDC with workgroup = COMPANY for a population of Windows hosts with the following configuration: [...
Tipsyeagle's user avatar
0 votes
1 answer
917 views

GPO - Missing "Manage updates offered from Windows Server Update Service"

in our Windows Server 2019 DC we are missing the following Administrative Template: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > ...
Duncan_McCloud's user avatar
0 votes
1 answer
2k views

Windows group policy settings are not replicating to other DC (windows 2019)

I have a scenario where group policy settings are not replicating from primary DC01 to backup DC02. Please see in the picture attached below showing the same exact GPO policy being viewed from both ...
jodlgc's user avatar
  • 25
-1 votes
2 answers
409 views

How can I automate joining a Linux container to a Samba Domain?

I have a Samba domain controller (also running in a container) and I would like to start a new container and have it become a member of the domain. The normal process for this is to enter the ...
M Conrad's user avatar
  • 131
0 votes
0 answers
44 views

Trouble Upgrading Secondary DC from 2008R2 -> 2012R2 without FSMO Roles Present

I am attempting to upgrade a recovered DC running 2008R2 to 2012R2. This DC is the secondary and the primary is still in production. When attempting the upgrade process, I run into an issue where the ...
techengineer09's user avatar
0 votes
2 answers
3k views

Change primary and secondary DNS on domain servers using GPO

Windows Server 2016. All Servers in domain obtain IP address automatically and DNS addresses are set manually: Primary DNS 172.16.0.1 Secondary DNS 172.16.0.2 I created a 3rd DC (172.16.0.3), and ...
Mrc89's user avatar
  • 1
2 votes
2 answers
3k views

Replacing Domain Controller with Server 2022

We have two Domain Controllers running 2012 R2. I have been given a project to replace these with 2022. I have just discovered that the Domain Functional Level is still 2008 R2. I have issues with FRS ...
shkm's user avatar
  • 21
1 vote
1 answer
1k views

Promoting a domain controller fails prerequisites

I'm replacing my domain controller with another domain controller with more efficient hardware and migrate from Server 2012 R2 to Windows Server 2019. The first step I joined the new server to the ...
Hassan Bosha's user avatar
0 votes
1 answer
1k views

Domain Controller Upgrade 2016 to 2022

There are 3 Domain Controllers in my environment, all running Windows Server 2016 Standard: Primary DC : On-prem (FSMO role) Secondary DC : On-prem Tertiary DC : Cloud I want to upgrade The domain ...
WilliamBusseyFTW AaFdFTL's user avatar
-1 votes
1 answer
246 views

Active directory server set up DNS resolution failure or VERY SLOW, can I route external DNS requests the traditional way, before the server existed?

I'm very new to the world of active directory, windows server etc., so I apologise if some of the questions I ask are a bit stupid, but I'll try and explain exactly what I want to do below, and my ...
Oliver Ricketts's user avatar
-2 votes
2 answers
62 views

Is it possible to delete 15 ad groups in one second without PS? [closed]

I deleted 2 user accounts in AD running on Windows 2016 (pdc), time stamp is around 1:05:00 pm, then the users report cannot access the share drive on a domain member file server. Then I found in ...
Calvin's user avatar
  • 1
0 votes
1 answer
403 views

How to create a GPO to audit start/stop of a service not running on the DC?

I'm trying to enable auditing of service start/stop events for a few specific services on a group of domain computers, and to make this change using Group Policy. I've seen this answer, however when I ...
zedworks's user avatar
3 votes
2 answers
485 views

How do Windows domain clients behave if the on site domain controller is/goes offline?

If I have Windows PCs that are joined to a domain and the DC on the same site goes offline, what kind of behavior can I expect on the clients a) when local DC is already offline when Windows boots? ...
404_username_not_found's user avatar
1 vote
1 answer
483 views

Windows Server Manager crashing when promoting to domain controller

I have a problem when promoting my Windows Server 2022 to a domain controller. So I installed the Active Directory Tools and then I wanted to promote the server to a domain controller. As soon as I ...
drop's user avatar
  • 11
0 votes
0 answers
437 views

Does a new Windows 2019 domain controller require Windows to be activated before it will function as a logon server?

I have set up a new domain controller. I believe I've done all the necessary things. DNS is synchronized, DHCP is transferred and working, and handing out the new server as DNS, also working. Is a ...
William's user avatar
  • 145
0 votes
4 answers
474 views

Can Standalone (online) CA + Subordinate Enterprise CA configuration issue valid intranet SSL certs?

The question is purely about whether this config is capable of issuing valid intranet SSL certs (i.e. SSL certs for internally facing sites), and not any other implications or concerns. (The focus of ...
kindzmarauli's user avatar
0 votes
1 answer
345 views

domain controller 2012r2 is not listening working on port 445 - how should I fix?

Checked SMB Service Status: Ensured that the Server service (LanmanServer) was running on the server where you're experiencing the issue. You can check this by opening the Services management console (...
Eric Nystrom's user avatar
1 vote
3 answers
345 views

Domain Controller Authorative Restore to a point in time where other domain controller(s) are not present

Day 1: Only one Domain Controller (DC1) is present. Windows Server Backup is configured on DC1 to save the system state. Delete an important user from AD. Day 2: Promote additional Domain Controller (...
David Trevor's user avatar
0 votes
0 answers
159 views

Which domain trusts to reset during forest recovery? Incoming, outgoing or both?

I understand the difference between an outgoing and an incoming trust I understand that the trust flow goes into one direction and the direction of access is the other way around I understand that ...
David Trevor's user avatar
0 votes
1 answer
1k views

Active Directory Sync - RPC Server Unavailable Error, but all services and network protocols are fine

Background: 4 Windows Server 2016 domain controllers at 4 different sites. Sites are connected by S2S IPSec connections. The one site moved and the server in this site broke down, so we had to restore ...
Francois Botha's user avatar
0 votes
0 answers
59 views

how does my laptop locate its domain controller if the DNS server is change

I have around 50 computers joined to DomainA in branch office A and will be move to a temporarily branch office B Branch office B has a different subnet and DNS servers which belong to a different ...
Noob's user avatar
  • 363
0 votes
1 answer
2k views

Change w32tm source to external server

We have an on-premises NTP server named NTPserver and adjust the w32tm source to time.windows.com. There is a domain controller server that the w32tm source is Local CMOS clock. I want to change the ...
Udemy Instructor's user avatar
0 votes
0 answers
2k views

Remote Group Policy Update failed (Access Denied) for Domain Admin

My first question in ServerFault heya :) In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
Lacrymae's user avatar
0 votes
0 answers
64 views

ADDC for domain could not be contacted, because there are two domains and DNS for second (new DC) used to be point to old domains DC

I feel like this is a pretty simple question but I'm still little new to DNS. So the company I work for had an old Domain setup on a vlan that just wasn't worth the effort of saving so I created a new ...
Bjohn's user avatar
  • 1
0 votes
0 answers
60 views

Passwords are not stored in any browser except Firefox

I have domain user accounts (Windows Active Directory) that they use the same (1-1) Windows 10 domain PC some years without problems about saving passwords to browsers. But if I use the same domain ...
nonlinear's user avatar
0 votes
0 answers
66 views

Company Servers Unable to Communicate Between One Another (On Same Network)

I want to make sure and provide as much detail as possible to try to get this resolved or at the very least, figured out. If you need more information, please let me know and I will happily provide it....
Leesa Moore's user avatar
0 votes
1 answer
84 views

Cannot Convert DC to single DC

Windows 2016 Server environment with 3 DCs, single domain. All DCs are also GCs. Server 1 holds all 5 FSMO roles. Now I want to export the VM of server 1 and put onto a different environment on a ...
nepdev2's user avatar
  • 11
0 votes
0 answers
159 views

Unable to change domain password from Windows 11 with samba4 domain controller

I've set up a samba dc on Ubuntu and connected successfully a blanc win 11 vm. Everything works fin so far, but when I try to change the password in that win11 vm using ctrl+alt+del, it does not work, ...
yano's user avatar
  • 1
1 vote
0 answers
267 views

Troubleshooting issues joining computers to a new'ish domain - meaning when built six months ago joining worked

I'll begin with a cold-start with some background at the end. While adding a computer to domain 'MyDomain.local' an error occurred: An Active Directory Domain Controller (AD DC) for the domain "...
TRS-80's user avatar
  • 11
0 votes
1 answer
1k views

$ in computer object SAMAccountName

In active directory all machine accounts '$' sign in end of the Sam Account Name. for ex 'samAccountName = client-1$' is there any reason behind it?
Sandy Santhosh's user avatar
2 votes
1 answer
1k views

Hybrid Azure AD Join - Not joining correctly

Another day, another Hybrid Azure AD Join issue. Having set up Hybrid Join, it looked like it was working.  The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
AngryDog's user avatar

1
2 3 4 5
33