Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1,429
questions
0
votes
1answer
24 views
Windows domain joined Linux server tries to authenticate to multiple AD controllers
i have set up a Debian Server and let i join our domain.
Our company has multiple domain controllers around europe.
I have installed Winbind, Samba, Kerberos5, PAM and Open SSL on this machine.
...
1
vote
3answers
82 views
DC's storming me with issues
Hi
I have 2 DC's (server 2019) (1 physical, 1 Virtual) was working good, but last month I did notice some issues like I couldn't connect from dc2 to dc1. so I opened Event Viewer to find muliple ...
0
votes
1answer
21 views
Sharing a UPN between root and child AD domains
Is it possible to share a UPN between a root and child AD domains? We're considering our options around how to structure an Active Directory domain with the option of splitting off the child domain ...
0
votes
1answer
25 views
Demoting 2008 domain controllers in a multi-DC environment
This seems like a silly question, but I've looked everywhere and cannot find the answer in any videos.
I am assuming that demoting a DC in AD in a multi DC environment is exactly the same process ...
0
votes
0answers
27 views
KrbException: KDC has no support for encryption type
we are trying to connect SQL Server from Ubuntu by Windows authentication. But got a issue KrbException: KDC has no support for encryption type (14).
we have checked support AES 128, support AES 256, ...
-1
votes
0answers
60 views
Why can my Windows Server 2016 domain controller not register its records on an external BIND DNS server?
Background
For lab only purposes, I've set up a Windows Server 2016 domain controller on my network in a new forest. My goal is to use a BIND9 DNS server for all of its DNS needs rather than using ...
1
vote
0answers
40 views
Why has my domain controller remembered its dns/dhcp settings from before a reinstall?
Recently due to a hardware upgrade/replacement we powered down the whole domain (this is a small office so it's all on one server (ADDS, DNS & DHCP)) but when we powered up the network couldn't ...
0
votes
0answers
16 views
Get-BpaModel Powershell cmdlet fails on “Microsoft/Windows/DirectoryServices” with index out of range error
Get-BpaModel enumerates through all available bpa models. I run it from one of our dc with domain admin privileges.
It started to fail today on fourth model (it enumerates ADRMS, CertificateServices ...
0
votes
1answer
49 views
Cannot modify Audit Policy
I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
4
votes
3answers
123 views
What device is used for a Domain Controller?
I hear that this website can offer some assistance with IT-related questions so I figured I could give it a shot.
I'm learning about Active Directory and often in textbooks I see symbols like this ...
0
votes
1answer
59 views
Azure VM cannot join domain controller
I have setup a VM that is configured to be a Domain Controller and a second VM that I want to join to this Domain Controller. Both VM's are in the same Vnet with an Azure Private DNS Zone connected to ...
0
votes
1answer
28 views
linking G Suite and Windows Domain Controller for user management
I manage a small business and use G Suite for user management of all google apps as well as authentication for as many third party services as possible (like slack, atlassin and so on).
Then we also ...
0
votes
0answers
37 views
nslookup domain does not return RODC
i have a subnet which contains an RODC, however a prejoined domain-server cant authenticate inside the subnet. Running a "nslookup domain.com" does return a list of every DC except the RODC. I found ...
1
vote
0answers
20 views
Can't get primary DC up after restore
Recently I have become the administrator of a Windows-server environment. Due to an error on the PDC, I decided to restore it from an old backup (a bit over a month old) - yeah I know now and I'm ...
-1
votes
1answer
20 views
Slow domain user logon after promotion of ADC to DC
I had DC and ADC server of Windows 2016 R2 in a domain environment. The DC crashed and I promoted ADC to DC and shifted all five FSMO roles to new DC.
After the crashed DC was removed from the ...
0
votes
0answers
54 views
Win10 1909 in Samba 4.3.11 domain: RPC server unavailable (5719)
We've a Samba 4 domain (no AD, just DC) with LDAP backend on Ubuntu 14.04. We have purchased a new Lenovo laptop with Win10 which joined the domain without problems, but we cannot login with a domain ...
1
vote
1answer
15 views
Different last login dates and times coming from different web servers
I am trying to determine the last time a active directory user was logged in by doing a ldap query and using the property lastLogon. This code runs on two web servers. Each server is connecting to a ...
2
votes
0answers
23 views
Why is a AD Domain controller object set to “unconstrained delegation”? Can this be altered?
As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way.
Can i change "unconstrained delegation" setting on all ...
0
votes
0answers
24 views
Disable IPv6 on all tunnel interface
Microsoft recommends to disable ipv6 on all tunnel interface.
To implement this settings i have to set value 1 or less in registry under this path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
1
vote
1answer
259 views
How to tell domain controllers to not enroll a “Kerberos Authentication” certificate?
As per this question, I have an environment where certificates based on the "Kerberos Authentication" template cannot be issued (there are remote sites without direct connectivity to the CA, ...
5
votes
2answers
446 views
Error enrolling “Kerberos Authentication” certificate in a sparse network
I'm currently working on implementing an Enterprise Certification Authority for a customer whose network is not fully connected; it spans several geographical sites, and some of them don't have ...
0
votes
0answers
15 views
RDP Issue in Azure VM DC RRS
I'm running a Windows Server 2008 R2 DC in Azure IaaS VM (Classic). I created a new, addition VM of Windows Server 2012 R2 on Azure ARM on a separate VNet but on the same Resource Group as the Server ...
0
votes
1answer
71 views
Password Synchronization between two forests or in one forest; using replication or using MIM to synchronize?
So we have got a domain (e.g. contoso.local) which is replicated over 4 DCs. All DCs are in the same Subnet. All users reside in the same OU in this one domain. All Workstations are in their own OU as ...
0
votes
0answers
44 views
Secondary domain controller preparation failed
I am getting the following error while creating a secondary domain controller.
My current domain controller is in Windows server 2012 and the functional level is 2003.
My new secondary Domain ...
0
votes
0answers
15 views
Restoring GCP instance with failed domain controller
This took a good long while to figure out.
The story is the DC on our small domain on google cloud failed. Backups were all worthless due to the nature of the failure involving windows update - it ...
0
votes
2answers
242 views
Windows server user for scanning to folder
I want to create a user whose only purpose is for network photocopiers to be able to scan to a specific folder (let's say, E:\Data\scan, shared as \\server\scan, to which other users will have rw ...
0
votes
2answers
492 views
Renaming domain controller during migration
We're looking at replacing an aged server for a client, and as we installed this server, it adheres to our naming convention (namely, SVR-DC as it's the only DC on the network).
Now that we want to ...
0
votes
1answer
130 views
How to configure an HTTP redirect on the local domain?
I'd like to set up an HTTP redirect on our local domain, e.g.
https://intranet.local -> https://home.intranet.local
Our DNS servers are on our domain controllers, and intranet.local resolves to ...
1
vote
1answer
153 views
How to change time source from a LOCAL CMOS CLOCK to a Cisco router configured as a NTP master
I have a test network that I'm using for my CCNA. I am using my Cisco 2811 router as an NTP master. I think I have it configured correctly.
Is there a Cisco command to see what NTP time source I am ...
2
votes
2answers
211 views
How do I interpret ID 4624 Type 3 events on a domain controller?
I'm seeing a lot of ID 4624 Events (Logon Type 3) on a domain controller (Windows Server 2012) and I'm wondering what those events want to to tell me.
I've read that 4624 Type 3 events on a domain ...
0
votes
0answers
52 views
AD Domain Controller won't allow incoming connections on other subnets?
I'm currently working on setting up an active directory domain controller at one location, with my clients connecting to the server via other subnets. I am running Windows Server 2019, with Windows 10 ...
0
votes
2answers
114 views
Can't add Windows Server 2019 as AD to domain replica error
Context:
I've got a Windows domain with a Windows 2016 functional level.
Currently all the ADs (three) are based on Windows Server 2016 and up to date.
Problem:
I want to had a Windows Server 2019 as ...
5
votes
2answers
99 views
Multiple AD domains for different hotels of the same chain?
I am inheriting existing infrastructure for a hotel group, and trying to overhaul said infrastructure.
The hotels (HotelA, HotelB, etc) were initially set up with one domain (and one domain ...
0
votes
4answers
137 views
Do I need 2 Domain Controllers?
Where I work we currently have 1 domain controller for around 35 PCs.
It is a virtual DC running off Hyper-V on our Server.
We also have other VM'S for Exchange, Apps etc.
Do we need to have 2 DCs?...
2
votes
1answer
88 views
Is it a good idea to separate domain admins and domain controller admins?
Domain admins usually have access to all workstations in the domain, and the domain controllers too.
I see this as a security risk, because if a domain admin account gets compromised, the attacker ...
0
votes
1answer
171 views
Windows Server 2019 Domain Controller - “Application-Aware” Backups Using VSS
This is a theoretical question regarding "application-aware" backups for Windows Server 2019 domain controllers (and other VMs) that can be made through third-party applications such as Veeam, Nakivo, ...
0
votes
2answers
389 views
Domain Controller Acting As NTP but using NT5DS
We are currently using a PDC setup for our domain controllers to be our NTP server but in the REGEDIT it is showing type NT5DC instead of NTP. The issue that I am having is that our non domain ...
0
votes
1answer
94 views
netdom query pdc fails on Domain controller
One of the domain child controller fails when I run netdom query/D:abc.example.com PDC.
The output is:
C:\Users\username>netdom query /D:abc.example.com PDC
The specified domain either does not ...
0
votes
0answers
29 views
client not logged to local domain controller
I have a setup of Active Directory 1 DC with 4 RODCs
A is my main DC.
B,C,D,E are RODCs in different Branches.
But When I checked from client pc the "logon server" is showing different location DC....
1
vote
0answers
3k views
Cannot change “w32tm /query /source” from “Local CMOS Clock” on PDC Domain Controller
I am trying to reconfigure the time settings for a single DC W2K8R2 domain. The DC is not a VM.
I followed the instructions on this page to the letter.....
https://gooroo.io/GoorooTHINK/Article/...
2
votes
1answer
54 views
Active Directory forest, root domain controller died
I have the following active directory structure:
+------+ Forest +------+
| |
| |
v v
domain1.example.com ...
0
votes
1answer
185 views
Multiple Domain Controller Environment. How to authenticate to only one Domain Controller
At my job we have (Quantity: 5) different Windows Domain Controller (DC) where our hosts and servers systems are bound to AD and where our users authenticate with their AD credentials.
I have a ...
0
votes
0answers
103 views
Active Directory DNS server not updating
I'm having issues with an Active Directory 2008 R2 domain controller which we use as our "main" controller, as that's where we enter user, etc. We were having problems with new logins. Also changes ...
2
votes
1answer
64 views
Need to stop LDAP reflection attack. Will only allowing LAN IPs for LDAP break active directory/domain functionality?
Back story: I've got a domain controller exposed to the internet (I know, it shouldn't be, was put together piecemeal). Unfortunately, we just discovered that it's being used in LDAP reflection ...
0
votes
1answer
222 views
Is Windows 7 machine logged into domain or local cache
I've been learning AD and also troubleshoot a problem I'm having with AD. I'd like to be able to tell if a Windows 7 workstation is actively logged on to a domain or if it's logging into an account ...
0
votes
0answers
19 views
Domain Controller not reachable
So i'm installing some vm's first one is my pfsense firewall which seems to work.
Currently i have got 2 more vm's my domain controller and vcenter running on windows server 2016.
Both got an ip ...
0
votes
0answers
338 views
Primary Domain Controller not syncing with secondary
Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!)
We have 2 domain controllers, a ...
0
votes
1answer
1k views
Active Directory Removal Created new user folder for administrator. How to revert?
I set up Active Directory Domain Service a couple of days ago thinking it would be neat to toy around with, upon realizing that I have no need for it I removed it from my roles and features.
Upon ...
-1
votes
1answer
52 views
Windows Domain URL
Our laptops are connected to a windows server 2019 with the domain name company.int
Everything works find and when I ping company.int it points to the windows server. The server is also responsible ...
0
votes
1answer
51 views
Installing Windows Server 2012 R2 on top of Windows Server 2008 R2 with RAID 1 configuration
I have Dell PowerEdge Rack Server R510 that have Dell PERC S300 RAID Adapter which is configured to RAID 1. The server runs Windows Server 2008 R2. Currently the OS corrupted I cannot do backup ...
