Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1
vote
0answers
12 views
How best to deal with networked device security certificate on domain?
When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
1
vote
1answer
36 views
Secondary Domain Controller no longer part of the domain
[before anyone corrects me I've used the terms secondary and primary colloquially and I understand the terminology]
I have a problem with my secondary DC, but not on any other server in the domain. ...
2
votes
1answer
35 views
Disc write cache on Windows domain controller | always disabled by default?
Is it true that on a Windows 2016 domain controller (bare metall installation), the disc write cache is turned off even if a battery-buffered RAID controller is installed and recognized by the system (...
2
votes
1answer
47 views
Why should the IP address of a Domain Controller map to the site it serves?
I have questions related to this specific event:
Index : 865
EntryType : Warning
InstanceId : 5802
Message : None of the IP addresses (192.168.254.17) of this ...
0
votes
0answers
13 views
Some PCs are not synced with domain Dcs, how to resynce them?
We have multiple sites all are synced very well
as one site we have windows 10 PCs , applied policy for PCs to take time from on-site DCs. After checking PCs i found:-
Policy is applied after ...
-3
votes
0answers
39 views
Windows Server 2016 RDSH without Active Directory
We require a Remote Desktop Session Host (RDSH) server without Active Directory in the environment. We have around 5 users.
Is this a supported configuration by Microsoft? I am not able to find ...
1
vote
0answers
18 views
Redirect Active Directory Authentication histories in MS SQL server?
Is there a way that I can redirect active directory authentication logs / histories to SQL DB?
I am trying to find a way to log all domain users authentication activities to a SQL database, Is this ...
0
votes
1answer
78 views
SSSD AD Integration - Clarification on Computer to join AD
Objective
Clarify Computer, Not User, when integrating a Linux box with a Windows Domain.
Background
Having confusion because most SSSD AD information focuses on User Authentication, however ...
3
votes
1answer
52 views
All DCs fail VerifyEnterpriseReferences and DNS RReg Test - Everything else works including replication to a brand new DC
So, we recently added a new DC to our domain (Win 2008 R2 Enterprise) with the idea to replace our Win 2008 R2 Standard DC with a second Enterprise one - which will give us the 2 DCs on 2008 R2 ...
1
vote
2answers
53 views
Attempting to reconfigured DC that was tombstoned and is offline - 'Delete Domain' in dcpromo?
We have a DC (BDC2) that a former SysAdmin was trying to set up so we could decommission an older DC. This DC was mostly set up, and then abandoned (IE, it was sitting shelved on a VM that was turned ...
0
votes
1answer
86 views
IIS: Change Default Domain Controller For Windows Authentication
Please bear with me, I am a software developer and know little of Active Directory and Windows Server domains.
I am running a .NET MVC intranet application on IIS (Windows Server 2016 Standard) that ...
0
votes
1answer
42 views
Global catalog server and primary domain controller
I have a domain, and a child domain. The child domains domain controller is a Global Catalog server. I know i can use queries to access the partial attribute set inside the global catalog server, and ...
4
votes
0answers
90 views
Why did w32tm /resync cause it to correct itself, then overshoot?
Background:
My LAN's Windows Server 2012 R2 Domain Controller had been running without any external time server for a few years and I finally synchronized it now. It had been running about 2 minutes ...
0
votes
2answers
125 views
Why does Samba4 fail with NT_STATUS_INTERNAL_ERROR on Ubuntu 18.04
I am having trouble setting up Samba as an AD DC. At present I have 1 Ubuntu box which I’d like to use to share files with other computers in my home network. At present the same machine which servers ...
0
votes
0answers
20 views
Backup and deployment of GPO from one server to another
Hi I am using LGPO to backup the policy and deploy it to another computer with the same administrator name.
So I tried using LGPO /b pathname. Successfully backedup.
Then I went to the other computer ...
0
votes
0answers
21 views
Multiple domains on network - problems with DFS
I've inherited a setup that we've been running with for a number of years that I've finally decided to sort out.
We have two offices connected via a VPN tunnel. Office A uses domain.net and office B ...
0
votes
2answers
51 views
Best practice for Domain Controller [closed]
I have a main DC on Microsoft Azure VM and an on-premise DC. Both domain networks are connected with site-to-site VPN.
The purpose of setting up the DC on cloud was to get rid of the old on-premise ...
0
votes
0answers
300 views
Samba ADS: Cannot contact any KDC for requested realm
I followed this Setting up Samba as an Active Directory Domain Controller - wiki and all seems fine (kinit,klist,net ads user,net ads group work).
Adding users without password also works, but if I ...
1
vote
2answers
108 views
How to prohibit users from installing specific software in windows system in an AD
I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
40 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
1answer
205 views
Sync of SYSVOL content between Windows 2016 Domain Controllers
I have the following setup:
Two Domain Controllers in different sites (both Windows Server 2016)
-The sites are permanently connected via a VPN (so the servers can directly reach each other)
The ...
0
votes
0answers
51 views
Configure Windows Service user account based on Domain Controller check
We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain ...
1
vote
1answer
20 views
Make domain controller automatically register IP of a replacement domain member
I have 3 VM servers in a domain. One of them is the domain controller with active directory and DNS installed. Another server is an application server. One of the requirements for that application ...
1
vote
2answers
58 views
Remove 2nd DC role from Exchange 2016
I have an Exchange 2016 server with the DC role installed (server 2016).
This DC is the 2d DC.
Now a want to remove de DC role from the Exchange 2016 server.
I have already installed an 3th DC.
Are ...
0
votes
0answers
676 views
How to login locally to Windows Server 2016 with a domain user account?
I have an instance of Windows Server 2016 which is setup as a Domain Controller. An application running on this server requires a domain user account that is permitted to login locally. I have updated ...
1
vote
0answers
141 views
DHCP Server: Missing Addresses and how to free them
Our DHCP Server, running on a Windows Server 2012 R2 Data Center, shows that we have 241 addresses total with 220 (91%) in use, 21 available. If I go to the Address Leases node and count all IP ...
1
vote
1answer
74 views
Find the source of a DNS query on Windows Server
I have a machine running Windows Server 2012 R2 that is generating invalid DNS queries.
The server's only IP address is 192.168.1.20/24 and is configured statically. It is configured for a single DNS ...
1
vote
1answer
561 views
Windows 10 Hello on domain-joined computer - Credentials could not be verified
I am on a Lenovo X1 6th Gen laptop with Windows 10 Pro Build 1803 and connecting to my work domain. I have all GPO's correctly configured for Windows Hello. I am able to login to my domain account ...
0
votes
0answers
28 views
File server for two windows domain
We have 2 distinct windows domain with 50 users. Gradually every user and computer of domain A (windows 2003) will be migrated (or re created) on domain B (windows 2012). A trust between the domains ...
6
votes
1answer
183 views
Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?
I have 2 DC's that are both Windows Server 2016.
We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode.
Our Domain Functional Level is at ...
0
votes
0answers
60 views
GPO - SYSVOL permissions reset
We currently have two (2012 and 2012 R2) DC but SYSVOL seems to be corrupted as we cannot apply GPOs due to permissions complains (from either server). But we don't have a valid system backup so GPOs ...
1
vote
0answers
19 views
Server wont accept username or password
I have a server 2012 as my primary DC, for the past week some random issues are coming up. mainly:
users get unauthenticated network error message on LAN
Trust relationship breaks on random computers
...
-1
votes
1answer
83 views
Windows server as a domain controller but not DHCP and DNS server [closed]
I want to integrate domain in my company. My colleague says he don't want windows server because it must become everything (DC, DHCP and DNS server). My question is can you have Widows Server only as ...
0
votes
2answers
363 views
Uninstall application via Windows GPO
The company I work at is switching the applications they use in Operations due to a recent upgrade in hardware equipment. All user PCs at my office have what we will call Application 1 installed. ...
1
vote
0answers
28 views
Sync users on Debian with Active Directory
I would like to be able to dynamically manage accounts on a Debian box that I am building. For this I think a possible solution is to have the box on our Windows domain and sync with a user group on ...
0
votes
1answer
511 views
Server 2016 Tombstone Lifetime
Does anybody know what the default tombstone lifetime for Server 2016 is?
Thanks in advance.
0
votes
0answers
15 views
How to grant permissions Access for domain users on local computer
I have domain server windows 2012 R2 with clients connected to it
on each pc I need to install an oracle forms application which will need to use the TNS_NAMES.ORA file located on their local PC to ...
1
vote
0answers
37 views
How do I determine a “known-good” DC in preparation for detecting lingering objects?
Update I tried using the `Lingering Object Liquidator' tool, but am left with the same primary question (and changed the question). See comments for details
I'm seeing Event Id 2042 in my Directory ...
0
votes
1answer
55 views
Build new domain server 2012 in parallel with existing windows domain server 2003
I have existing network with around 400 PCs on it working under windows xp professional and windows 7 professional too.
Around 375 PCs are linked using static IP address and they are not connected to ...
0
votes
0answers
78 views
GPOs recurringly show as 'inaccessable'
Ok,
So I have a windows server 2012 R2 environment and for the approximately the past 1-2 months we will randomly get GPOs that show up as inaccessable on various domain controllers while in GPMC. ...
1
vote
1answer
341 views
Does the SYSVOL and NETLOGON folder need to be in the same location on all domain controllers
I recently added a new domain controller to my domain. The past admins had the SYSVOL and NETLOGON folders on the C drive. I always thought it was best practice to have them on a separate drive so ...
0
votes
2answers
54 views
Windows 2012 DNS getting public ip instead of NIC IP
Win 2012 ADDC DNS
Today PCs were unable to login to domain. We transfered the ADDC to a new server a few weeks ago. After all the troubleshooting I found out that DNS is not working correctly, ...
0
votes
0answers
122 views
Migration from DC in Windows Server 2008 R2 to Windows Server 2016
We are having a project to migrate a Windows 2008 R2 domain controller to Windows Server 2016, and I have some doubts:
1) While I am configuring and migrating user accounts to the new DC, can I keep ...
0
votes
0answers
116 views
In CentOS 7 how i can search Windows Domains ( DA ) users, using LDAP?
I am using LDAP authentication on my php pages on a CentOS 7 hosted machine, how can i search on the same network a user on a configured Windows Domain ( AD ) using LDAP ?
0
votes
2answers
396 views
Best practices - Replication/Mirroring DC with another DC (Exchange 2010 + AD on same server)
Please be sweet in your help, I'm begginner in Exchange/Windows Sever skills.
Currently, I have one virtual server(VM) under Windows Server 2012 Standard with Exchange 2010 with role server AD. ( it'...
0
votes
1answer
121 views
Accounts are in Azure AD, we now have an on-premise server.
A little background of what I am trying to do, but am having no luck for various reasons: Windows 2016 Server on site domain join with Azure AD
After receiving some feedback from my colleagues, I may ...
0
votes
1answer
27 views
I can't see AD Recycle Bin in new DC?
I've a Server 2012 DC which is some services became malfunctioned. I've created secondary DC and moved all FSMO role to new one but I can't see AD Recycle bin in new server, when I right click to ...
1
vote
1answer
146 views
Connecting to a DC with duplicate IP addresses
I have 3 Domain controllers in a Windows Server 2016 environment: A-serv01, A-serv02, and A-01. The only two that my team use and are aware of are the "serv" ones. However, one day I ran nltest for ...
1
vote
1answer
47 views
How to add a new pc to a domain with name of old pc
Some Background...
A local small non-profit has recently lost their network guy (died unexpectedly) and I've been asked to help then install windows on some new pc's and set up wifi and printers ...
0
votes
1answer
74 views
Unusual Device Name In Windows Authentication Logs - JCIFS
I've seen a few articles with similar host names, however, I can not seem to find a definitive cause.
We have seen some Windows security logs (from DC) linked to the lockout of an account; the host ...
