Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1,546
questions
0
votes
2
answers
31
views
Changing an AD account password - what services will it break?
we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
0
votes
1
answer
28
views
Domain Member Servers - Accessing Certificate Revocation List (CRL)
In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
- 578
0
votes
0
answers
24
views
Cause of Master Key Backup Failure and Consequences of Workaround
I had a workstation afflicted with the issue described here:
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/dpapi-masterkey-backup-failures
Basically, in older versions of ...
- 133
0
votes
0
answers
8
views
domain controller B cannot use domain services once domain controller A is shut down (same domain)
So I have two different domain controllers on the same domain that reside on their own subnets. Domain controller A is the PDC with all the FSMO roles and Domain Controller B is on the other subnet (...
0
votes
0
answers
8
views
Repeating errors on my domain controllers - "Network Connectivity Assistant" is rejecting some unknown request
Going through my system logs today I discovered that both my Server 2019 Virtual Domain Controllers seem to have this error firing off every 2 minutes or so:
==
The Network Connectivity Assistant ...
- 95
0
votes
0
answers
12
views
Can Zerologon affect all domain controllers in a network?
If a network has a parent domain with multiple child domains each with a domain controller, but only one of the domain controllers is vulnerable to Zerologon, would that also affect the parent domain ...
0
votes
1
answer
35
views
How to correctly sync time of an Hyper-V host which is member of a domain?
There are many posts concerning issues when dealing with time synchronisation over a domain which holds virtualised PDC Emulators (see this article).
As a result our PDC Emulator time (and domain time)...
- 253
3
votes
1
answer
176
views
Interpreting LastLogon vs. LastLogonTimestamp
To get the time of last logon of an account in an Active Directory of a Windows domain im querying the LastLogon attribute on every Domain Controller and the LastLogonTimestamp on one domain ...
0
votes
1
answer
20
views
PDCe time won't sync
I'm encountering a very strange situation where the time on my VM-hosted PDCe is reported as synced, but the actual time doesn't sync. The server's running about an hour fast.
Here's what I've got:
I'...
- 703
1
vote
1
answer
148
views
How to Update ADMX Files - Different Server OS Versions in Domain
My clients domain has various 2012R2, 2016 and 2019 Windows Server versions. Two of the four domain controllers are running Windows 2012R2 and the ADMX files haven't been updated in years. The other ...
- 578
0
votes
1
answer
26
views
what to be carefull when rebuilding primary AD domain controller?
I just did some search such as this one and this to avoid asking a question which already has answer.
However, I'm not sure whether the information fully match my question or not.
The situation is, I'...
- 41
0
votes
1
answer
39
views
Unable to Transfer FSMO Role to Specific Domain Controller
I currently have two Windows 2012 R2 domain controllers - serverA and serverB. I have two Windows 2019 instances that were promoted to domain controllers with DNS roles - serverC and serverD. I was ...
- 578
0
votes
1
answer
155
views
Windows NTP Server Registry Configuration
I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
- 578
0
votes
1
answer
58
views
Is it possible to remove NICs from a domain controller in DNS?
I have the following situation and I'm not sure what its implications are.
On a barebone server with 4 network interfaces, I'm running one of two DCs to my domain. Now, in spite of 4 network ...
- 963
0
votes
1
answer
153
views
Not typical "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" issue
I have the "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" problem. But it is not that simple.
When I added a new user as a domain user, automatically the ...
- 1
0
votes
0
answers
12
views
Additional Bind caching nameserver next to domain controllers
In an environment where I already have two domain controllers acting as name servers I would like to run the Bind cache server installed on Ubuntu 20.04.3 LTS to act as nameserver for specific hosts.
...
- 1
0
votes
2
answers
97
views
Creating DNS A Record for 3 domain controllers
I have setup a new domain on our network consisting of 2 domain controllers, dc1, dc2.
I can see the A records for the 2 controllers. But I need to do load balancing so that I can refer to the 2 dcs ...
- 3
0
votes
1
answer
278
views
How to Properly Migrate Active Directory Certificate Services
I have Active Directory Certificate Services installed on a Windows 2016 domain controller. We plan on spinning up Windows 2019 instances to replace our 2016 domain controllers. We have one DC with ...
- 578
1
vote
3
answers
40
views
Can I setup a new W2019 domain on a fresh Server 2019 using KMS for licensing if the KMS isn't available yet?
I'm tasked with setting up a Windows 2019 AD environment (new domain) from scratch.
Normally we obtain our server licenses/activation from the company KMS system and we need to do that in this case as ...
- 6,242
0
votes
0
answers
26
views
The domain could not be found because the specified domain either not exist or could not be contacted
I have 2 Server Main Win 2016 server as Controller also DNS server the other is 2008 R2 after last update the 2008 can not find the main AD and does not log in, and on the main says the domain doesn't ...
-2
votes
1
answer
37
views
Mount usb device as existing network drive
I tried to find an answer to my issue but haven't been successful so far. Maybe I couldn't find the right search terms, so please apologize, if the question has already been answered and I was just ...
- 1
3
votes
1
answer
260
views
Domain Controller autoenrollment - changing issuing CA
We are cleaning up our Windows PKI/CA environment and replacing our root CA with a new server. The current root CA has been issuing the following certificate templates for years now (in addition to ...
- 32.2k
0
votes
0
answers
98
views
Turn off password protected sharing for a Domain Controlled Pc
I am learning how to build and manage server 2019
I have added a computer in my domain network, and after doing so, the option from advanced network and sharing to turn off Password Protected Sharing ...
- 1
1
vote
0
answers
75
views
Installing Graylog with Nxlog collector on a Windows DC: no service installed
I'm trying to install a NxLog collector on a Graylog client machine. The Graylog and associated infra (elastic and mongodb) is running just fine.
The install client is a Windows Server 2019 DC ("...
0
votes
0
answers
103
views
Samba not authenticating after upgrade
I just upgraded my Proxmox host, which also doubles as a storage server from buster to bullseye, which must have upgraded Samba as well. After this, I am unable to mount any Samba shares.
The host ...
- 225
0
votes
0
answers
61
views
Domain Controller Communication Timeout Limit
THE DOMAIN
I have a domain setup with a parent/child schema. All servers are Microsoft Windows 2019 Standard. There are 2 top level DCs and the 2 child domains each have their own 2 DCs. The issue I ...
- 761
1
vote
0
answers
20
views
Single User Can't Access RDP by DNS, only by IP
I have three domain controllers, dc01.ad.exmaple.com (10.83.78.10), dc02.ad.example.com (10.23.20.15) and dc03.ad.example.com (10.24.20.15). They are all in the standard Domain Controllers OU.
dc01 is ...
- 1,203
0
votes
0
answers
36
views
Migrating 2012 R2 Domain Controllers to Windows 2019 - Missing Group Policy Setting
I currently have two Windows 2012R2 Domain Controllers. I recently stood up two Windows Server 2019 instances and promoted them to Domain Controllers. The plan is to eventually demote/retire the ...
- 578
0
votes
0
answers
72
views
Warning: The server has IP addresses with conflicting site associations
There's a related post here, but it doesn't seem to match what I have going on.
We've been having strange DFS issues related to users being pushed the wrong DFS server, or their mapped drives being ...
- 13
1
vote
1
answer
122
views
Is it OK to rename server name after configuring the domain controller in it?
I have Windows Server 2012 R2 and there is domain controller inside of it. Now I need to rename the server name, is it OK rename it directly ?
0
votes
1
answer
44
views
How to properly and completely remove a Windows domain controller?
I have a single forest/domain with 2 DCs, SERVER2 and SERVER3. SERVER2 holds the FSMO roles. Both are healthy.
I now wish to remove SERVER2 for a clean reinstall. Based on my research for the project, ...
- 703
0
votes
0
answers
24
views
Can't remove old DC from Sites and Services
I have introduced 2 new Win2019 DC's into my domain, and removed the old ones properly (demoted then removed from domain). I confirmed from the Users and Computers app that my old DC's are no longer ...
- 1,604
0
votes
1
answer
40
views
How to add users and computers back to server 2012
I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
- 1
0
votes
1
answer
47
views
Two PDCs, two ADs, two domains - how to replicate one domain/AD to the other?
Here's the history:
SERVER2 was a 2016 Essentials Edition server, standalone with no other DCs. The OS became corrupted in a few areas, and so a decision was made to replace it. A standalone clean ...
- 703
0
votes
3
answers
98
views
How to check DNS in present in the Domain Controller or Not?
I want to check whether the DNS is present in the Domain Controller or not? or is there a way to filter out domain controllers without the DNS?
0
votes
1
answer
119
views
Best way to deploy 2nd domain controller on cloud?
I'm looking for my best way to prevent single point of failure on my hybrid environment.
I work for a small 100 users company and looking for a best way to deploy my second domain controller on cloud (...
0
votes
1
answer
34
views
Do I need second domain controller when we use AzureAD hybrid setup?
The subject wraps up my story pretty straight - Do I need second domain controller when we use AzureAD hybrid setup?
We have one domain with only one domain controller what is on-prem, and its AD is ...
0
votes
0
answers
29
views
SAMBA server restore
Last week I ran into some hardware issues with my SAMBA DC server.
I was able to recover the hard disk, but the other hardware seems to be nonfunctioning.
I have a spare server and would like to ...
- 1
0
votes
0
answers
26
views
Switched BizTalk's database domain, but cannot remove DC
I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains.
There has been efforts to modernize the systems and ...
- 1
0
votes
2
answers
59
views
Can a Hyper-V VM made from a Server 2012 R2 domain controller backup be used to replace the physical domain controller if it fails?
We have a Dell PER520 with Server 2012 R2 running 5 servers; AD DS, DHCP, DNS and WDS. We created a Hyper-V VM on another server using a bare metal backup created with Windows Server Backup. The VM ...
- 1
0
votes
0
answers
300
views
Samba: INTERNAL ERROR: Signal 11 in pid (4.10.16)
Have searched and read around for hours without success.
Maybe it's a known issue or easy to give a hint by someone with experience.
This is a fully updated Centos7, kernel-3.10.0-1160.45.1.el7.x86_64,...
0
votes
0
answers
21
views
Unable to join Azure Windows Server VM to local domain
I'm trying to get my Azure Windows Server VM to connect to my local AD.
I've already created a Site to Site VPN Gateway and connected both the DC (172.16.1.5) and VM (172.16.1.4) and I've confirmed ...
- 101
0
votes
0
answers
34
views
Alternate DNS server outside of domain
I'm managing a small network that only has a single DC, which is running DNS. When I'm doing maintenance in the server in order for users to keep internet connectivity I have to configure a alternate ...
0
votes
0
answers
16
views
How to create a new windows domain with an existing domain
We currently have an existing windows domain that uses ip range 192.168.2.X.
The main internet router has an internal ip for this domain.
We've just purchased new server hardware and want to setup a ...
- 121
0
votes
1
answer
750
views
Parent domain vs Child domain
As far as I know,
a child domain's fully-qualified domain name (FQDN) must be a subdomain of the parent domain's FQDN.
Also an implicit trust (two way - transitive) is established between them.
Are ...
- 5
0
votes
1
answer
43
views
Can I add a child domain to an existing child domain?
Under a root domain i have 2 child domains. What I want to do is to create a child domain using an existing child domain as its parent domain, but it's currently giving me credential errors. Do I need ...
0
votes
0
answers
155
views
Ansible get authentification timeout when using a domain account on a server running winbind
I installed a new domain controller hosted by Samba 4.11 on Ubuntu 20.04 (using ubuntu packages). I configured the system authentication to use AD credentials with the use of winbind. On others (...
- 1
0
votes
1
answer
76
views
ERROR_NO_SUCH_DOMAIN When 2 of 3 DCs are down
I have 3 DCs on my domain, (2 on local office, 1 in Amazon AWS), and I would like to move to Amazon and cut off the 2 local DCs.
I have shut down the 2 local DCs, to test if the AmazonDC is working ...
- 3
0
votes
0
answers
562
views
Unable to join a dc I just created with samba ad dc
I followed these instructions: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
These instructions didn't work exactly as they read. There was one step I ...
- 21
0
votes
1
answer
59
views
Unable to Log In to Domain Computers with Spoiled Domain Controller
The domain controller in our domain network is completely down and we don't plan to repair it. We couldn't log in to the computers because of that.
Worst case, we even forgot the local admin password....
- 171