Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
0 votes
0 answers
693 views

LDAPS, Certificate Authority, and Domain Controllers

I have a domain environment with 4 2012 Domain Controllers that I am working on replacing with 4 new 2022 domain controllers. I have some questions regarding how the CA works when issuing certificates ...
Tom Gordon's user avatar
0 votes
1 answer
70 views

Both LOCAL SERVICE and SYSTEM users are changing server time on DC

Odd one for you, our DC's time keeps changing by an hour, but it doesn't just go down by an hour it also go up. I've been monitoring the event logs and I can see that there are usually two entries ...
RobC_CTL's user avatar
0 votes
0 answers
498 views

Establish Trust Between Two Active Directory Domains with a Common Root

In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
Christopher King's user avatar
0 votes
1 answer
559 views

bad password count in different sites

What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count? Account lockout threshold value is 3 for eg i have 3 sites - Site ...
Sandy Santhosh's user avatar
0 votes
0 answers
29 views

Exchanging AD user groups with an external -not trusted- server for authentication and authorization

I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google. We have a Microsoft AD domain and are currently planning to use ...
PJ87's user avatar
  • 1
0 votes
0 answers
128 views

Adding users from DC to remote desktop users

How to add a user from DC to allowed remote desktop users for certain PC? It lets me choose only users on local machine, although I am connected with a user defined in DC server. A domain user. Even ...
SandShriner's user avatar
-1 votes
1 answer
1k views

why active directory computer object has machine password?

The active directory computer object (ie machine object) also have password , as far as i know only the user's logon name and users password is used when logging into the domain joined computer ? But ...
ironmanAJ's user avatar
0 votes
0 answers
167 views

Server loses domain connection when promoting to domain controller

I am trying to stand up a new domain controller and add it to an existing domain. The two servers are in two separate cloud zones. Before promoting the new server I was able to contact the existing ...
Tony's user avatar
  • 457
0 votes
0 answers
2k views

Windows asks to install printer driver over and over

I have over 400 users on a 2012 DC, and a Win2019 server configured as a print server, which serves about 279 printers of varying make/model. Some users are receiving driver install messages when ...
AaplMike's user avatar
  • 169
0 votes
1 answer
825 views

Kerberos settings in GPO never seem to apply in spite of the GPO otherwise working

Server 2019 Domain Environment. Issue is related to the DCs themselves. I've a self-created GPO on my DC OU that sets a bunch of things, several of which are Kerberos settings: Curiously, while ...
The ITea Guy's user avatar
0 votes
1 answer
4k views

Handling GPO Policies between different domains

I have a handful of changes in a policy that I'd like to apply to other domains. I am wanting to copy this policy to these other domains so I do not have to create them for every dc. Most of what I've ...
ErocM's user avatar
  • 226
1 vote
0 answers
196 views

looking for "access denied" server log entries on network shared print jobs (Windows) after removing the 'Everyone' group

In an effort to try to remove the ability for users to print directly to an MFP shared printer, relegating the users to use their badge ID for more secure printing while in the office... Currently ...
Feed-Jake's user avatar
0 votes
0 answers
424 views

Unable to join to domain

I have deployed two EC2 instances on AWS with one as a DC role and the other as a sql server which I intend to join to the domain. However when I try to join it I am getting the following error. ...
Vinay Joseph's user avatar
0 votes
0 answers
161 views

Can't bind to ldaps when creating new Domain Controller

I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server) .....but when I attempt to bind ...
Mick8695's user avatar
  • 103
0 votes
0 answers
98 views

Member servers pull Group Policy from only 1 (of 2) domain controllers?

Environment overview: AWS DC1 = Win2k12 instance in region1 - AZ1 DC2 = Win2k12 instance in region1 - AZ2 ~ 60 Member servers = all within region1 Replication set up between the two DCs for GPO, DNS, ...
celeryauthor's user avatar
1 vote
3 answers
121 views

What happens if the only DC fails?

I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company. Lets say, I am running ...
Borkhuu Enkhjargal's user avatar
-1 votes
1 answer
301 views

Local user login on a domain machine, receiving System error 5 occurred Access is denied error

We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user. ...
MrPeachyPenguin's user avatar
-1 votes
1 answer
189 views

Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]

I am new to this domain controller and new to the company. all the below domain controller are in windows 2008. we got two parent controller parent-DC1-2008.example.com parent-DC2-2008.example.com ...
David NG's user avatar
0 votes
1 answer
165 views

SQL Server - Windows Active Directory users

I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
Roman DotNetDev's user avatar
5 votes
3 answers
3k views

Windows Server 2019 randomly changes time and date to incorrect values

In the last two months, we have got quite a few issues with the server time and date occasionally changing to some absolute random values. Sometimes it is a few days in the future or past, sometimes - ...
MyUserName's user avatar
0 votes
0 answers
530 views

Error promoting Windows Server 2022 to Domain Controller

I have a virtual Windows 2022 Server in a VMWare ESXi environment, and a WS2019 virtual in another host, which is my Active Directory Domain Controller. I've been trying to promote the WS2022 to ...
Erik's user avatar
  • 1
2 votes
0 answers
455 views

Using Linux tools to allow a user in a domain to access only certain computers

I ran samba-ad-dc domain controller on Debian Bullseye. No problem to create users and groups, organizational units, etc and to join windows or Linux computers to domain. But there is other task: On ...
Mikhail Kulikov's user avatar
0 votes
0 answers
635 views

Deleting all dynamic DNS records from AD-Integrated DNS server? What can go wrong?

[1 Forest, 1 Domain, 2 DCs and nothing more - nothing special] Is it OK, to remove all dynamic records from DNS. If I decide to do so, should I do the same on the second Domain Controller? Beside one ...
v.doro2's user avatar
0 votes
0 answers
51 views

I can't PING to my Cisco router when I try to access the domain server

I have this network image I tried to connect the pc1 to the domain (in Windows Server 2012). To do that I tried to PING from pc1 to the server and that works. After that I go the pc1(Windows 7) and I ...
user84999's user avatar
  • 109
0 votes
0 answers
683 views

Kerberos Errors in Azure Event ID 5

Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors. The Kerberos client ...
cybernull's user avatar
0 votes
1 answer
316 views

How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?

I'm a cybersecurity researcher, studying netflow patterns to learn about reflective DDoS events that leverage CLDAP as a UDP reflection vector. I need to be able to distinguish between a windows ...
chad's user avatar
  • 439
5 votes
3 answers
3k views

Domain computer account trust relationship failed after connecting system with old hard drive to network

Our server is Windows 2016. I set up a new install of Windows 10 on a new hard drive. I named the computer on the new install the same as the old one. I kept the old hard drive as-is and didn't make ...
spencerja8's user avatar
0 votes
0 answers
737 views

Domain Controller Upgrade 2019 to 2022

I have 3 Domain controller in my environment Windows Server 2019 Standard. Primary DC : On-prem (FSMO role) Secondary DC : On-prem Tertiary DC : Cloud I want to upgrade my domain environment to ...
DinushaMadusanka's user avatar
-1 votes
1 answer
2k views

How to Restrict network shares access for a specific domain user in all computer except a one specific computer in a Domain Environment?

I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules: Block access to network drives (network ...
IT Researcher143's user avatar
0 votes
1 answer
270 views

Readonly Domain Controller for Remote Office

We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
user1913559's user avatar
-1 votes
2 answers
346 views

Range of Normal Usage for Domain Controller's LDAP Ping

I'm a security research studying CLDAP as a vector for UDP reflection attacks, a from of Denial of Service. I'm not a MS Server expert, so I want to sure up my understanding of the context of the ...
chad's user avatar
  • 439
0 votes
1 answer
1k views

Firewall Ports Domain Controller to Clients

I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in ...
Mia's user avatar
  • 3
0 votes
0 answers
226 views

Leaving Windows Servers out of a domain

I'm not much used to running Windows Servers and need ground to either defend or withdraw from this idea and have found nothing on Google. The company I work for recently suffered a ransomware attack. ...
Leonardo Pessoa's user avatar
1 vote
1 answer
111 views

feedback on HDD speeds for a HP Proliant ML110 Gen10 server

I have a RAID 1+0 array in a HP Proliant ML110 Gen10 server with 4 x 7200RPM 2.5" 6Gbps SATA drives. The power management is set to Static High Performance Mode. I ran a CrystalDiskMark benchmark ...
Kamal's user avatar
  • 145
1 vote
1 answer
3k views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
Prox's user avatar
  • 111
1 vote
1 answer
7k views

Kerberos failures with accountname "host"

Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist). Event Viewer shows those failures as ID ...
Panki's user avatar
  • 163
0 votes
0 answers
160 views

retrieve computer name on domain controller

Good morning. I currently have a domain controller (Windows server 2019) where there are approximately 500 users and computers. when a computer x is damaged, it reinstalls the operating system. The ...
Norcarde's user avatar
3 votes
2 answers
1k views

Why are logon types on Domain Controller and Workstation different

When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the ...
Amin Mirzanejad's user avatar
1 vote
1 answer
3k views

Is it safe to mix 2016/2022 as domain controllers?

We have a 2016 Server Essentials PDC, and now we'd like to add another DC for failover/backup purposes. Will it be OK to use 2022 Server Standard for this second DC? (Web searches are returning ...
InteXX's user avatar
  • 765
1 vote
1 answer
7k views

How can I remove a no longer existent child domain from my forest?

In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
stackprotector's user avatar
0 votes
2 answers
85 views

Changing an AD account password - what services will it break?

we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
user2463687's user avatar
0 votes
1 answer
3k views

Domain Member Servers - Accessing Certificate Revocation List (CRL)

In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
jrd1989's user avatar
  • 688
0 votes
1 answer
773 views

How to correctly sync time of an Hyper-V host which is member of a domain?

There are many posts concerning issues when dealing with time synchronisation over a domain which holds virtualised PDC Emulators (see this article). As a result our PDC Emulator time (and domain time)...
Riccardo's user avatar
  • 253
3 votes
1 answer
4k views

Interpreting LastLogon vs. LastLogonTimestamp

To get the time of last logon of an account in an Active Directory of a Windows domain im querying the LastLogon attribute on every Domain Controller and the LastLogonTimestamp on one domain ...
Johannes B. Latzel's user avatar
0 votes
1 answer
29 views

PDCe time won't sync

I'm encountering a very strange situation where the time on my VM-hosted PDCe is reported as synced, but the actual time doesn't sync. The server's running about an hour fast. Here's what I've got: I'...
InteXX's user avatar
  • 765
1 vote
1 answer
9k views

How to Update ADMX Files - Different Server OS Versions in Domain

My clients domain has various 2012R2, 2016 and 2019 Windows Server versions. Two of the four domain controllers are running Windows 2012R2 and the ADMX files haven't been updated in years. The other ...
jrd1989's user avatar
  • 688
0 votes
1 answer
753 views

what to be carefull when rebuilding primary AD domain controller?

I just did some search such as this one and this to avoid asking a question which already has answer. However, I'm not sure whether the information fully match my question or not. The situation is, I'...
user53815's user avatar
0 votes
1 answer
1k views

Unable to Transfer FSMO Role to Specific Domain Controller

I currently have two Windows 2012 R2 domain controllers - serverA and serverB. I have two Windows 2019 instances that were promoted to domain controllers with DNS roles - serverC and serverD. I was ...
jrd1989's user avatar
  • 688
1 vote
1 answer
10k views

Windows NTP Server Registry Configuration

I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
jrd1989's user avatar
  • 688
0 votes
1 answer
957 views

Is it possible to remove NICs from a domain controller in DNS?

I have the following situation and I'm not sure what its implications are. On a barebone server with 4 network interfaces, I'm running one of two DCs to my domain. Now, in spite of 4 network ...
vic's user avatar
  • 973

1
2
3 4 5
33