Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1,627
questions
0
votes
0
answers
40
views
Browsing gets stopped on Terminal Servers in Domain. Need to restart Network Adapters
I am facing a problem in my Windows Server 2016 VMs. I have 3 terminal servers: T1, T2, T3 - all on different Hyper-V hosts. I have 2 Domain Controllers: AD2 and AD3. AD2 is the primary one.
Recently, ...
-1
votes
0
answers
44
views
Adding genericWrite Access to an AD group on a BUILTIN Group
In our AD environment, I need the group "Backup Admins" to have GenericWrite access on the builtin group "Backup Operators".
I tried the following PowerShell commands but they did ...
- 1
-1
votes
2
answers
59
views
Migrate Domain Controllers
I have two Windows Server 2012 R2 domain controllers DC1 and DC2. I need to migrate both servers to Windows Server 2022.
How it is possible to achieve this while keeping the same IP Addresses and the ...
0
votes
0
answers
48
views
SPN not replicated between different AD forests
I have issues with a SPN, which is not known by a domain controller.
What I want to achieve:
I have a fileshare, which should be available via FQDN lansweeper.example.com.
lansweeper.example.com is an ...
- 27
-1
votes
1
answer
45
views
Does login failure auditing impose significant extra load on a domain controller?
I have been told that enabling auditing on a domain controller imposes too much extra load on a system to enable it in production. I don't know anything about Windows server administration so I cannot ...
- 113
3
votes
1
answer
147
views
Too many SMB SAMR requests to Primary Domain Controller from Remote Site
I've noticed that our Windows Clients from remote sites cause a lot of SMB traffic to our primary domain controller at our main site.
Every location has its own domain controller and "Active ...
- 31
0
votes
1
answer
68
views
Any issues with changing IP address on newly configured domain controller?
In the middle of replacing an old DC with a new one running Windows Server 2022.
Just about everything is done on the new server, DHCP, DNS, roles transferred, etc. and the new DC is replicating ...
- 429
0
votes
0
answers
25
views
Domain Controller/DNS Server lost ping connection to my Sonicwall Router
I hope you can help me identify what is possibly happening on my network.
I have my ISP modem, then I connect a small 4-port switch (just for test ISP connection in case of internet issues), from here ...
- 1
-1
votes
1
answer
355
views
Advanced Audit Policy configuration using PowerShell
I created a GPO to enable advanced audit policies and Security settings.
Related policy settings
I need to edit and enable the settings using PowerShell.
What are the related registry keys?
How can I ...
- 1
-1
votes
1
answer
30
views
Define a specific policy in the domain controller gpo
I am defining a series of special policies in my domain controller, I wanted the user not to have admin access, but to be able to share the folder on the network for other users.
I even set the user’s ...
0
votes
1
answer
242
views
Starting Windows domain controller for testing in an isolated network: Can't sign in
Our backup strategy has been to export the domain controller (Hyper-V VM) along with the other server VMs to a large drive which we rotate offsite and off-grid.
Now we want to move the DC to a new ...
- 125
1
vote
0
answers
122
views
Administrator account from trusted domain loses privileges in trusting domain over time
I have test environment with two separate forests: ORANGE and GREY. They have one-way forest trust with Orange domain being trusted and Grey domain being trusting. In other words, account me@orange....
- 321
0
votes
0
answers
69
views
Windows Server 2022, DC Promo - Server manager closes abruptly
I have Windows Server 2022 virtual machine (Hyper-V Host, same OS) on which I am trying to deploy a second domain controller. I successfully installed the AD Domain Services Role. But when I try to ...
-1
votes
1
answer
161
views
Active Directory Domain Admin and UAC Prompts not working
I have strange issue in Active Directory environment. Let me try to explain step by step;
I have two DCs one of Primary second one is Additional. also repplication is work well between them.
Imagine ...
- 11
1
vote
1
answer
492
views
Best Practices for Restricting Domain Administrator Access in Active Directory
I’m seeking insights on the best practices for securing Domain and Active Directory environments, specifically regarding limiting of Domain Administrator access privileges. The goal is to ensure that ...
0
votes
1
answer
583
views
SYSTEM account of domain controller does not have permissions to change password of domain user
Have some software that runs as the SYSTEM account on the domain controller of an Active Directory. Part of what the software does is change passwords of select accounts at pre-determined intervals ...
0
votes
0
answers
54
views
What determines which server set-aduser connects to?
I was wondering this as I used it to create a user. Get-ADuser could see it straight after. Next I used Get-ADDomainController to presumably see what AD Set-ADuser created it on. However when I went ...
- 234
-1
votes
2
answers
492
views
How to resolve "Unable to obtain DNS hostname of Active Directory domain controller with ntdsa object name...."
It starts as a programming problem:
Domain.GetCurrentDomain().DomainControllers
triggers an exception:
Unable to obtain DNS hostname of Active Directory domain controller
with ntdsa object name &...
- 163
0
votes
1
answer
1k
views
Domain Admin account unable to access AD server both locally and via RDP
I am experiencing an issue with our "Primary" domain admin account whereby I am unable to connect to the AD, using this account. I am aware that this is not best practice as we normally use ...
- 1
0
votes
0
answers
161
views
Unable to logon using RDP after domain migration
We have issues after migrating a DC to a new DC.
When we attempt to RDP to some of our VMs using the DNS name, it fails. Using the IP address works.
This issue only occurs on some VMs.
It seems to be ...
- 1
0
votes
1
answer
900
views
kpssvc service won't start on DC
I have a single domain with 2 sites, each site has it's own 2019 DC. On the (secondary) site I see an alert that the KPSSVC service (KDC Proxy Server Service) is not started. And it's startup type ...
- 1,894
0
votes
0
answers
450
views
Error demoting Server 2008 R2 domain controller
I have a domain that is at functional level 2008 R2 running on a 2008 R2 DC.
joined a new 2019 server to the domain
added AD services role to the 2019 server
migrated FRS to DFSR on 2008 R2
promoted ...
- 143
1
vote
2
answers
386
views
Upgrading single Domain Controller server from 2008R2 to server 2019
We have a client with a very old active directory environment on Windows Server 2008 R2. We are going to replace it with a new server and would like to upgrade the existing server to keep all of the ...
- 143
-1
votes
1
answer
820
views
How to stop/break replication between 2 domain controllers that are in same domain? [closed]
So I was attempting to break replication between 2 domain controllers by editing objects in AD, since I cant just go to powershell and stop it with command, but it was unsuccessfully. I have to stop ...
-1
votes
1
answer
1k
views
Members of "Remote Desktop Users" group cannot logon to Windows Server 2019 domain controller
I installed a Windows 2019 domain controller. I added a user to the Remote Desktop Users group. The user cannot logon to the server, unless I add them to the Administrators group.
All I see in other ...
- 129
0
votes
0
answers
296
views
DNS error 4011, unable to write, or update
I encountered one intriguing issue with DNS service on a pair of our domain controllers. Frequently, about every half an hour (sometimes skips or shows only on one), I get the error ID 4011. These ...
- 1
-1
votes
3
answers
935
views
Installing Domain Controller and Hyper V Host in the same physical server 2023
I know there has been some articles pertaining to the concerns and it is a big NO NO. I'm wondering over the years with the latest OS versions and numerous patches by Microsoft, does this theory still ...
- 3
-2
votes
3
answers
690
views
I would like to use an ldap query for users with direct reports (aka all managers)
I am looking for an LDAP query that returns all users that have direct reports (aka all managers) could anyone help me out with that?
0
votes
0
answers
91
views
server 2012Rd backup domain controller not communicating with PDC
I have client with a server with four vm's One is primary dc and another backup dc. There was an error generated with windows time service. The recommendation was to add/ change the logon to ...
- 1
1
vote
1
answer
618
views
An Active Directory Domain Controller (AD DC) for the domain could not be contacted
I have a PC with Windows 11 Home. I use Hyper-V to install 2019 server (Server) and 2 Windows 10 Enterprise virtual machines (VMs). I add two Enterprise VMs on Server as follows.
I select MARVEL.local ...
- 21
0
votes
0
answers
296
views
Use Samba AD DC as Password Backend for Samba PDC
I've got the following situation:
Old Samba-server data.company.com Version 4.6.7
Configured as a PDC with workgroup = COMPANY for a population of Windows hosts with the following configuration:
[...
0
votes
1
answer
1k
views
GPO - Missing "Manage updates offered from Windows Server Update Service"
in our Windows Server 2019 DC we are missing the following Administrative Template:
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > ...
- 101
0
votes
1
answer
5k
views
Windows group policy settings are not replicating to other DC (windows 2019)
I have a scenario where group policy settings are not replicating from primary DC01 to backup DC02.
Please see in the picture attached below showing the same exact GPO policy being viewed from both ...
- 25
-1
votes
2
answers
519
views
How can I automate joining a Linux container to a Samba Domain?
I have a Samba domain controller (also running in a container) and I would like to start a new container and have it become a member of the domain. The normal process for this is to enter the ...
- 131
0
votes
0
answers
68
views
Trouble Upgrading Secondary DC from 2008R2 -> 2012R2 without FSMO Roles Present
I am attempting to upgrade a recovered DC running 2008R2 to 2012R2. This DC is the secondary and the primary is still in production. When attempting the upgrade process, I run into an issue where the ...
0
votes
2
answers
4k
views
Change primary and secondary DNS on domain servers using GPO
Windows Server 2016.
All Servers in domain obtain IP address automatically and DNS addresses are set manually:
Primary DNS 172.16.0.1
Secondary DNS 172.16.0.2
I created a 3rd DC (172.16.0.3), and ...
- 1
2
votes
2
answers
4k
views
Replacing Domain Controller with Server 2022
We have two Domain Controllers running 2012 R2. I have been given a project to replace these with 2022.
I have just discovered that the Domain Functional Level is still 2008 R2.
I have issues with FRS ...
- 21
1
vote
1
answer
2k
views
Promoting a domain controller fails prerequisites
I'm replacing my domain controller with another domain controller with more efficient hardware and migrate from Server 2012 R2 to Windows Server 2019.
The first step I joined the new server to the ...
- 11
0
votes
1
answer
2k
views
Domain Controller Upgrade 2016 to 2022
There are 3 Domain Controllers in my environment, all running Windows Server 2016 Standard:
Primary DC : On-prem (FSMO role)
Secondary DC : On-prem
Tertiary DC : Cloud
I want to upgrade The domain ...
-1
votes
1
answer
371
views
Active directory server set up DNS resolution failure or VERY SLOW, can I route external DNS requests the traditional way, before the server existed?
I'm very new to the world of active directory, windows server etc., so I apologise if some of the questions I ask are a bit stupid, but I'll try and explain exactly what I want to do below, and my ...
-2
votes
2
answers
65
views
Is it possible to delete 15 ad groups in one second without PS? [closed]
I deleted 2 user accounts in AD running on Windows 2016 (pdc), time stamp is around 1:05:00 pm, then the users report cannot access the share drive on a domain member file server.
Then I found in ...
- 1
0
votes
1
answer
713
views
How to create a GPO to audit start/stop of a service not running on the DC?
I'm trying to enable auditing of service start/stop events for a few specific services on a group of domain computers, and to make this change using Group Policy.
I've seen this answer, however when I ...
- 1
3
votes
2
answers
594
views
How do Windows domain clients behave if the on site domain controller is/goes offline?
If I have Windows PCs that are joined to a domain and the DC on the same site goes offline, what kind of behavior can I expect on the clients
a) when local DC is already offline when Windows boots? ...
1
vote
1
answer
610
views
Windows Server Manager crashing when promoting to domain controller
I have a problem when promoting my Windows Server 2022 to a domain controller.
So I installed the Active Directory Tools and then I wanted to promote the server to a domain controller. As soon as I ...
- 11
0
votes
0
answers
615
views
Does a new Windows 2019 domain controller require Windows to be activated before it will function as a logon server?
I have set up a new domain controller. I believe I've done all the necessary things. DNS is synchronized, DHCP is transferred and working, and handing out the new server as DNS, also working. Is a ...
- 145
0
votes
4
answers
659
views
Can Standalone (online) CA + Subordinate Enterprise CA configuration issue valid intranet SSL certs?
The question is purely about whether this config is capable of issuing valid intranet SSL certs (i.e. SSL certs for internally facing sites), and not any other implications or concerns.
(The focus of ...
- 326
0
votes
1
answer
439
views
domain controller 2012r2 is not listening working on port 445 - how should I fix?
Checked SMB Service Status:
Ensured that the Server service (LanmanServer) was running on the server where you're experiencing the issue. You can check this by opening the Services management console (...
1
vote
3
answers
521
views
Domain Controller Authorative Restore to a point in time where other domain controller(s) are not present
Day 1: Only one Domain Controller (DC1) is present. Windows Server Backup is configured on DC1 to save the system state. Delete an important user from AD.
Day 2: Promote additional Domain Controller (...
- 367
0
votes
1
answer
2k
views
Active Directory Sync - RPC Server Unavailable Error, but all services and network protocols are fine
Background: 4 Windows Server 2016 domain controllers at 4 different sites. Sites are connected by S2S IPSec connections. The one site moved and the server in this site broke down, so we had to restore ...
0
votes
0
answers
86
views
how does my laptop locate its domain controller if the DNS server is change
I have around 50 computers joined to DomainA in branch office A and will be move to a temporarily branch office B
Branch office B has a different subnet and DNS servers which belong to a different ...
- 383