Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
0
votes
1answer
24 views

Windows domain joined Linux server tries to authenticate to multiple AD controllers

i have set up a Debian Server and let i join our domain. Our company has multiple domain controllers around europe. I have installed Winbind, Samba, Kerberos5, PAM and Open SSL on this machine. ...
1
vote
3answers
82 views

DC's storming me with issues

Hi I have 2 DC's (server 2019) (1 physical, 1 Virtual) was working good, but last month I did notice some issues like I couldn't connect from dc2 to dc1. so I opened Event Viewer to find muliple ...
0
votes
1answer
21 views

Sharing a UPN between root and child AD domains

Is it possible to share a UPN between a root and child AD domains? We're considering our options around how to structure an Active Directory domain with the option of splitting off the child domain ...
0
votes
1answer
25 views

Demoting 2008 domain controllers in a multi-DC environment

This seems like a silly question, but I've looked everywhere and cannot find the answer in any videos. I am assuming that demoting a DC in AD in a multi DC environment is exactly the same process ...
0
votes
0answers
27 views

KrbException: KDC has no support for encryption type

we are trying to connect SQL Server from Ubuntu by Windows authentication. But got a issue KrbException: KDC has no support for encryption type (14). we have checked support AES 128, support AES 256, ...
-1
votes
0answers
60 views

Why can my Windows Server 2016 domain controller not register its records on an external BIND DNS server?

Background For lab only purposes, I've set up a Windows Server 2016 domain controller on my network in a new forest. My goal is to use a BIND9 DNS server for all of its DNS needs rather than using ...
1
vote
0answers
40 views

Why has my domain controller remembered its dns/dhcp settings from before a reinstall?

Recently due to a hardware upgrade/replacement we powered down the whole domain (this is a small office so it's all on one server (ADDS, DNS & DHCP)) but when we powered up the network couldn't ...
0
votes
0answers
16 views

Get-BpaModel Powershell cmdlet fails on “Microsoft/Windows/DirectoryServices” with index out of range error

Get-BpaModel enumerates through all available bpa models. I run it from one of our dc with domain admin privileges. It started to fail today on fourth model (it enumerates ADRMS, CertificateServices ...
0
votes
1answer
49 views

Cannot modify Audit Policy

I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
4
votes
3answers
123 views

What device is used for a Domain Controller?

I hear that this website can offer some assistance with IT-related questions so I figured I could give it a shot. I'm learning about Active Directory and often in textbooks I see symbols like this ...
0
votes
1answer
59 views

Azure VM cannot join domain controller

I have setup a VM that is configured to be a Domain Controller and a second VM that I want to join to this Domain Controller. Both VM's are in the same Vnet with an Azure Private DNS Zone connected to ...
0
votes
1answer
28 views

linking G Suite and Windows Domain Controller for user management

I manage a small business and use G Suite for user management of all google apps as well as authentication for as many third party services as possible (like slack, atlassin and so on). Then we also ...
0
votes
0answers
37 views

nslookup domain does not return RODC

i have a subnet which contains an RODC, however a prejoined domain-server cant authenticate inside the subnet. Running a "nslookup domain.com" does return a list of every DC except the RODC. I found ...
1
vote
0answers
20 views

Can't get primary DC up after restore

Recently I have become the administrator of a Windows-server environment. Due to an error on the PDC, I decided to restore it from an old backup (a bit over a month old) - yeah I know now and I'm ...
-1
votes
1answer
20 views

Slow domain user logon after promotion of ADC to DC

I had DC and ADC server of Windows 2016 R2 in a domain environment. The DC crashed and I promoted ADC to DC and shifted all five FSMO roles to new DC. After the crashed DC was removed from the ...
0
votes
0answers
54 views

Win10 1909 in Samba 4.3.11 domain: RPC server unavailable (5719)

We've a Samba 4 domain (no AD, just DC) with LDAP backend on Ubuntu 14.04. We have purchased a new Lenovo laptop with Win10 which joined the domain without problems, but we cannot login with a domain ...
1
vote
1answer
15 views

Different last login dates and times coming from different web servers

I am trying to determine the last time a active directory user was logged in by doing a ldap query and using the property lastLogon. This code runs on two web servers. Each server is connecting to a ...
2
votes
0answers
23 views

Why is a AD Domain controller object set to “unconstrained delegation”? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all ...
0
votes
0answers
24 views

Disable IPv6 on all tunnel interface

Microsoft recommends to disable ipv6 on all tunnel interface. To implement this settings i have to set value 1 or less in registry under this path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
1
vote
1answer
259 views

How to tell domain controllers to not enroll a “Kerberos Authentication” certificate?

As per this question, I have an environment where certificates based on the "Kerberos Authentication" template cannot be issued (there are remote sites without direct connectivity to the CA, ...
5
votes
2answers
446 views

Error enrolling “Kerberos Authentication” certificate in a sparse network

I'm currently working on implementing an Enterprise Certification Authority for a customer whose network is not fully connected; it spans several geographical sites, and some of them don't have ...
0
votes
0answers
15 views

RDP Issue in Azure VM DC RRS

I'm running a Windows Server 2008 R2 DC in Azure IaaS VM (Classic). I created a new, addition VM of Windows Server 2012 R2 on Azure ARM on a separate VNet but on the same Resource Group as the Server ...
0
votes
1answer
71 views

Password Synchronization between two forests or in one forest; using replication or using MIM to synchronize?

So we have got a domain (e.g. contoso.local) which is replicated over 4 DCs. All DCs are in the same Subnet. All users reside in the same OU in this one domain. All Workstations are in their own OU as ...
0
votes
0answers
44 views

Secondary domain controller preparation failed

I am getting the following error while creating a secondary domain controller. My current domain controller is in Windows server 2012 and the functional level is 2003. My new secondary Domain ...
0
votes
0answers
15 views

Restoring GCP instance with failed domain controller

This took a good long while to figure out. The story is the DC on our small domain on google cloud failed. Backups were all worthless due to the nature of the failure involving windows update - it ...
0
votes
2answers
242 views

Windows server user for scanning to folder

I want to create a user whose only purpose is for network photocopiers to be able to scan to a specific folder (let's say, E:\Data\scan, shared as \\server\scan, to which other users will have rw ...
0
votes
2answers
492 views

Renaming domain controller during migration

We're looking at replacing an aged server for a client, and as we installed this server, it adheres to our naming convention (namely, SVR-DC as it's the only DC on the network). Now that we want to ...
0
votes
1answer
130 views

How to configure an HTTP redirect on the local domain?

I'd like to set up an HTTP redirect on our local domain, e.g. https://intranet.local -> https://home.intranet.local Our DNS servers are on our domain controllers, and intranet.local resolves to ...
1
vote
1answer
153 views

How to change time source from a LOCAL CMOS CLOCK to a Cisco router configured as a NTP master

I have a test network that I'm using for my CCNA. I am using my Cisco 2811 router as an NTP master. I think I have it configured correctly. Is there a Cisco command to see what NTP time source I am ...
2
votes
2answers
211 views

How do I interpret ID 4624 Type 3 events on a domain controller?

I'm seeing a lot of ID 4624 Events (Logon Type 3) on a domain controller (Windows Server 2012) and I'm wondering what those events want to to tell me. I've read that 4624 Type 3 events on a domain ...
0
votes
0answers
52 views

AD Domain Controller won't allow incoming connections on other subnets?

I'm currently working on setting up an active directory domain controller at one location, with my clients connecting to the server via other subnets. I am running Windows Server 2019, with Windows 10 ...
0
votes
2answers
114 views

Can't add Windows Server 2019 as AD to domain replica error

Context: I've got a Windows domain with a Windows 2016 functional level. Currently all the ADs (three) are based on Windows Server 2016 and up to date. Problem: I want to had a Windows Server 2019 as ...
5
votes
2answers
99 views

Multiple AD domains for different hotels of the same chain?

I am inheriting existing infrastructure for a hotel group, and trying to overhaul said infrastructure. The hotels (HotelA, HotelB, etc) were initially set up with one domain (and one domain ...
0
votes
4answers
137 views

Do I need 2 Domain Controllers?

Where I work we currently have 1 domain controller for around 35 PCs. It is a virtual DC running off Hyper-V on our Server. We also have other VM'S for Exchange, Apps etc. Do we need to have 2 DCs?...
2
votes
1answer
88 views

Is it a good idea to separate domain admins and domain controller admins?

Domain admins usually have access to all workstations in the domain, and the domain controllers too. I see this as a security risk, because if a domain admin account gets compromised, the attacker ...
0
votes
1answer
171 views

Windows Server 2019 Domain Controller - “Application-Aware” Backups Using VSS

This is a theoretical question regarding "application-aware" backups for Windows Server 2019 domain controllers (and other VMs) that can be made through third-party applications such as Veeam, Nakivo, ...
0
votes
2answers
389 views

Domain Controller Acting As NTP but using NT5DS

We are currently using a PDC setup for our domain controllers to be our NTP server but in the REGEDIT it is showing type NT5DC instead of NTP. The issue that I am having is that our non domain ...
0
votes
1answer
94 views

netdom query pdc fails on Domain controller

One of the domain child controller fails when I run netdom query/D:abc.example.com PDC. The output is: C:\Users\username>netdom query /D:abc.example.com PDC The specified domain either does not ...
0
votes
0answers
29 views

client not logged to local domain controller

I have a setup of Active Directory 1 DC with 4 RODCs A is my main DC. B,C,D,E are RODCs in different Branches. But When I checked from client pc the "logon server" is showing different location DC....
1
vote
0answers
3k views

Cannot change “w32tm /query /source” from “Local CMOS Clock” on PDC Domain Controller

I am trying to reconfigure the time settings for a single DC W2K8R2 domain. The DC is not a VM. I followed the instructions on this page to the letter..... https://gooroo.io/GoorooTHINK/Article/...
2
votes
1answer
54 views

Active Directory forest, root domain controller died

I have the following active directory structure: +------+ Forest +------+ | | | | v v domain1.example.com ...
0
votes
1answer
185 views

Multiple Domain Controller Environment. How to authenticate to only one Domain Controller

At my job we have (Quantity: 5) different Windows Domain Controller (DC) where our hosts and servers systems are bound to AD and where our users authenticate with their AD credentials. I have a ...
0
votes
0answers
103 views

Active Directory DNS server not updating

I'm having issues with an Active Directory 2008 R2 domain controller which we use as our "main" controller, as that's where we enter user, etc. We were having problems with new logins. Also changes ...
2
votes
1answer
64 views

Need to stop LDAP reflection attack. Will only allowing LAN IPs for LDAP break active directory/domain functionality?

Back story: I've got a domain controller exposed to the internet (I know, it shouldn't be, was put together piecemeal). Unfortunately, we just discovered that it's being used in LDAP reflection ...
0
votes
1answer
222 views

Is Windows 7 machine logged into domain or local cache

I've been learning AD and also troubleshoot a problem I'm having with AD. I'd like to be able to tell if a Windows 7 workstation is actively logged on to a domain or if it's logging into an account ...
0
votes
0answers
19 views

Domain Controller not reachable

So i'm installing some vm's first one is my pfsense firewall which seems to work. Currently i have got 2 more vm's my domain controller and vcenter running on windows server 2016. Both got an ip ...
0
votes
0answers
338 views

Primary Domain Controller not syncing with secondary

Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!) We have 2 domain controllers, a ...
0
votes
1answer
1k views

Active Directory Removal Created new user folder for administrator. How to revert?

I set up Active Directory Domain Service a couple of days ago thinking it would be neat to toy around with, upon realizing that I have no need for it I removed it from my roles and features. Upon ...
-1
votes
1answer
52 views

Windows Domain URL

Our laptops are connected to a windows server 2019 with the domain name company.int Everything works find and when I ping company.int it points to the windows server. The server is also responsible ...
0
votes
1answer
51 views

Installing Windows Server 2012 R2 on top of Windows Server 2008 R2 with RAID 1 configuration

I have Dell PowerEdge Rack Server R510 that have Dell PERC S300 RAID Adapter which is configured to RAID 1. The server runs Windows Server 2008 R2. Currently the OS corrupted I cannot do backup ...

1
2 3 4 5
29