Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1,579
questions
1
vote
0
answers
16
views
Hybrid Azure AD Join - Not joining correctly
Another day, another Hybrid Azure AD Join issue.
Having set up Hybrid Join, it looked like it was working. The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
- 11
0
votes
0
answers
22
views
Two Enterprise Root CA's on same domain
I am currently replacing 4 2012 domain controllers with 4 new 2022 domain controllers. I have run into an issue with the certificate authority as there were two enterprise root CA's installed on the ...
- 101
0
votes
0
answers
22
views
LDAPS, Certificate Authority, and Domain Controllers
I have a domain environment with 4 2012 Domain Controllers that I am working on replacing with 4 new 2022 domain controllers. I have some questions regarding how the CA works when issuing certificates ...
- 101
0
votes
1
answer
24
views
Both LOCAL SERVICE and SYSTEM users are changing server time on DC
Odd one for you, our DC's time keeps changing by an hour, but it doesn't just go down by an hour it also go up. I've been monitoring the event logs and I can see that there are usually two entries ...
- 13
0
votes
0
answers
19
views
Establish Trust Between Two Active Directory Domains with a Common Root
In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
- 111
0
votes
0
answers
39
views
bad password count in different sites
What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count?
Account lockout threshold value is 3
for eg
i have 3 sites - Site ...
-1
votes
0
answers
24
views
Some questions about AD
I'm studying AD and i have some questions, i can't find the answers just googling.. can you please help me?
1 is a linux DC the same of a windows one? Or has it less potential? And in case of a Linux ...
- 1
-1
votes
0
answers
23
views
Migrating Windows Server 2012r2 DC to 2019 DC with new domain name
Background: My project is to setup new DC using Windows Server 2019, with same configurations as my old DC, which is 2012r2. I need to keep both DCs running for 2 months in seperate network.
I have ...
-1
votes
0
answers
44
views
Kerberos Ticket Issue - Event KDC_ERR_S_PRINCIPAL_UNKNOWN
I started seeing this entry in several systems and can't seem to figure out why. Assume a domain name of corp.com
In the event log for server name it shows cifs/corp.com
target name = cifs/corp.com@...
- 180
0
votes
0
answers
28
views
Exchanging AD user groups with an external -not trusted- server for authentication and authorization
I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google.
We have a Microsoft AD domain and are currently planning to use ...
- 1
0
votes
0
answers
20
views
Adding users from DC to remote desktop users
How to add a user from DC to allowed remote desktop users for certain PC?
It lets me choose only users on local machine, although I am connected with a user defined in DC server. A domain user. Even ...
-1
votes
1
answer
79
views
why active directory computer object has machine password?
The active directory computer object (ie machine object) also have password , as far as i know only the user's logon name and users password is used when logging into the domain joined computer ? But ...
0
votes
0
answers
45
views
Server loses domain connection when promoting to domain controller
I am trying to stand up a new domain controller and add it to an existing domain. The two servers are in two separate cloud zones. Before promoting the new server I was able to contact the existing ...
- 457
0
votes
0
answers
150
views
Windows asks to install printer driver over and over
I have over 400 users on a 2012 DC, and a Win2019 server configured as a print server, which serves about 279 printers of varying make/model. Some users are receiving driver install messages when ...
- 167
0
votes
1
answer
103
views
Kerberos settings in GPO never seem to apply in spite of the GPO otherwise working
Server 2019 Domain Environment. Issue is related to the DCs themselves.
I've a self-created GPO on my DC OU that sets a bunch of things, several of which are Kerberos settings:
Curiously, while ...
- 153
0
votes
1
answer
182
views
Handling GPO Policies between different domains
I have a handful of changes in a policy that I'd like to apply to other domains. I am wanting to copy this policy to these other domains so I do not have to create them for every dc.
Most of what I've ...
- 226
1
vote
0
answers
74
views
looking for "access denied" server log entries on network shared print jobs (Windows) after removing the 'Everyone' group
In an effort to try to remove the ability for users to print directly to an MFP shared printer, relegating the users to use their badge ID for more secure printing while in the office... Currently ...
- 11
0
votes
0
answers
142
views
Unable to join to domain
I have deployed two EC2 instances on AWS with one as a DC role and the other as a sql server which I intend to join to the domain.
However when I try to join it I am getting the following error.
...
- 101
0
votes
0
answers
26
views
Can connect but not bind using ldp when creating new Domain Controller
I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server)
.....but when I attempt to bind ...
- 103
0
votes
0
answers
31
views
Can't bind to ldaps when creating new Domain Controller
I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server)
.....but when I attempt to bind ...
- 103
0
votes
0
answers
31
views
Member servers pull Group Policy from only 1 (of 2) domain controllers?
Environment overview: AWS
DC1 = Win2k12 instance in region1 - AZ1
DC2 = Win2k12 instance in region1 - AZ2
~ 60 Member servers = all within region1
Replication set up between the two DCs for GPO, DNS, ...
0
votes
0
answers
32
views
Log-in Failures after Endpoint Computers Name Change
We have a Windows Server 2016 on a VMware virtual machine, with about 30 end stations connected to the server DC.
Recently, a day after we changed several of the names of the computers of the end ...
-1
votes
1
answer
56
views
What happens if the only DC fails?
I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company.
Lets say, I am running ...
-1
votes
1
answer
131
views
Local user login on a domain machine, receiving System error 5 occurred Access is denied error
We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user.
...
-1
votes
1
answer
88
views
Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]
I am new to this domain controller and new to the company.
all the below domain controller are in windows 2008.
we got two parent controller
parent-DC1-2008.example.com
parent-DC2-2008.example.com
...
- 1
0
votes
1
answer
45
views
SQL Server - Windows Active Directory users
I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
4
votes
2
answers
704
views
Windows Server 2019 randomly changes time and date to incorrect values
In the last two months, we have got quite a few issues with the server time and date occasionally changing to some absolute random values. Sometimes it is a few days in the future or past, sometimes - ...
- 91
0
votes
0
answers
226
views
Error promoting Windows Server 2022 to Domain Controller
I have a virtual Windows 2022 Server in a VMWare ESXi environment, and a WS2019 virtual in another host, which is my Active Directory Domain Controller. I've been trying to promote the WS2022 to ...
- 1
2
votes
0
answers
304
views
Using Linux tools to allow a user in a domain to access only certain computers
I ran samba-ad-dc domain controller on Debian Bullseye. No problem to create users and groups, organizational units, etc and to join windows or Linux computers to domain. But there is other task: On ...
0
votes
0
answers
321
views
Deleting all dynamic DNS records from AD-Integrated DNS server? What can go wrong?
[1 Forest, 1 Domain, 2 DCs and nothing more - nothing special]
Is it OK, to remove all dynamic records from DNS.
If I decide to do so, should I do the same on the second Domain Controller?
Beside one ...
- 3
0
votes
0
answers
12
views
ADO on premise recovery scenario (domain controller, app tier + db tier)
We are thinking about disaster recovery scenarios of one of our services and I am currently lacking some knowledge or sources to further investigate.
We have an Azure DevOps On Premise server that has ...
- 103
0
votes
0
answers
45
views
I can't PING to my Cisco router when I try to access the domain server
I have this network image
I tried to connect the pc1 to the domain (in Windows Server 2012).
To do that I tried to PING from pc1 to the server and that works.
After that I go the pc1(Windows 7) and I ...
- 109
0
votes
0
answers
332
views
Kerberos Errors in Azure Event ID 5
Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors.
The Kerberos client ...
0
votes
1
answer
115
views
How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?
I'm a cybersecurity researcher, studying netflow patterns to learn about reflective DDoS events that leverage CLDAP as a UDP reflection vector. I need to be able to distinguish between a windows ...
- 439
5
votes
3
answers
2k
views
Domain computer account trust relationship failed after connecting system with old hard drive to network
Our server is Windows 2016. I set up a new install of Windows 10 on a new hard drive. I named the computer on the new install the same as the old one. I kept the old hard drive as-is and didn't make ...
- 51
0
votes
0
answers
257
views
Domain Controller Upgrade 2019 to 2022
I have 3 Domain controller in my environment Windows Server 2019 Standard.
Primary DC : On-prem (FSMO role)
Secondary DC : On-prem
Tertiary DC : Cloud
I want to upgrade my domain environment to ...
-1
votes
1
answer
796
views
How to Restrict network shares access for a specific domain user in all computer except a one specific computer in a Domain Environment?
I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules:
Block access to network drives (network ...
0
votes
1
answer
146
views
Readonly Domain Controller for Remote Office
We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
- 211
-1
votes
2
answers
161
views
Range of Normal Usage for Domain Controller's LDAP Ping
I'm a security research studying CLDAP as a vector for UDP reflection attacks, a from of Denial of Service. I'm not a MS Server expert, so I want to sure up my understanding of the context of the ...
- 439
0
votes
1
answer
436
views
Firewall Ports Domain Controller to Clients
I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in ...
- 3
0
votes
0
answers
113
views
Leaving Windows Servers out of a domain
I'm not much used to running Windows Servers and need ground to either defend or withdraw from this idea and have found nothing on Google. The company I work for recently suffered a ransomware attack. ...
1
vote
1
answer
74
views
feedback on HDD speeds for a HP Proliant ML110 Gen10 server
I have a RAID 1+0 array in a HP Proliant ML110 Gen10 server with 4 x 7200RPM 2.5" 6Gbps SATA drives. The power management is set to Static High Performance Mode.
I ran a CrystalDiskMark benchmark ...
- 145
1
vote
1
answer
166
views
How to restrict NTLM V1 to select servers?
The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
- 111
1
vote
1
answer
4k
views
Kerberos failures with accountname "host"
Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist).
Event Viewer shows those failures as ID ...
- 163
0
votes
0
answers
78
views
retrieve computer name on domain controller
Good morning. I currently have a domain controller (Windows server 2019) where there are approximately 500 users and computers.
when a computer x is damaged, it reinstalls the operating system. The ...
- 1
0
votes
0
answers
82
views
Domain Controller isn't logging events enabled in subcategories
I have an environment with 3 domain controllers, one on 2019, one on 2016, and one on 2012R2. A GPO is set on the Domain Controllers OU that has the following enabled
Audit: Force audit policy ...
- 1
3
votes
2
answers
720
views
Why are logon types on Domain Controller and Workstation different
When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the ...
1
vote
1
answer
1k
views
Is it safe to mix 2016/2022 as domain controllers?
We have a 2016 Server Essentials PDC, and now we'd like to add another DC for failover/backup purposes.
Will it be OK to use 2022 Server Standard for this second DC? (Web searches are returning ...
- 753
1
vote
1
answer
3k
views
How can I remove a no longer existent child domain from my forest?
In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
- 556
0
votes
2
answers
63
views
Changing an AD account password - what services will it break?
we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
