Questions tagged [domain-controller]
A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.
1,569
questions
0
votes
0
answers
14
views
Unable to join to domain
I have deployed two EC2 instances on AWS with one as a DC role and the other as a sql server which I intend to join to the domain.
However when I try to join it I am getting the following error.
...
- 101
-1
votes
0
answers
18
views
After building new domain controller internet slow to respond [closed]
My personal home network for context to my issue, VMware host esxi 7.0i with 2 domain controllers, 1x WS2019 1x WS2022, 1x WS2022 file server, 1x WS2019 with 2019 MS Exchange enterprise, 1x WS2022 ...
- 1
0
votes
0
answers
16
views
Can connect but not bind using ldp when creating new Domain Controller
I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server)
.....but when I attempt to bind ...
- 101
0
votes
0
answers
22
views
Can't bind to ldaps when creating new Domain Controller
I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server)
.....but when I attempt to bind ...
- 101
0
votes
0
answers
19
views
Member servers pull Group Policy from only 1 (of 2) domain controllers?
Environment overview: AWS
DC1 = Win2k12 instance in region1 - AZ1
DC2 = Win2k12 instance in region1 - AZ2
~ 60 Member servers = all within region1
Replication set up between the two DCs for GPO, DNS, ...
0
votes
0
answers
24
views
Log-in Failures after Endpoint Computers Name Change
We have a Windows Server 2016 on a VMware virtual machine, with about 30 end stations connected to the server DC.
Recently, a day after we changed several of the names of the computers of the end ...
-1
votes
1
answer
46
views
What happens if the only DC fails?
I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company.
Lets say, I am running ...
-1
votes
1
answer
63
views
Local user login on a domain machine, receiving System error 5 occurred Access is denied error
We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user.
...
-1
votes
1
answer
55
views
Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]
I am new to this domain controller and new to the company.
all the below domain controller are in windows 2008.
we got two parent controller
parent-DC1-2008.example.com
parent-DC2-2008.example.com
...
- 1
0
votes
1
answer
35
views
SQL Server - Windows Active Directory users
I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
4
votes
2
answers
223
views
Windows Server 2019 randomly changes time and date to incorrect values
In the last two months, we have got quite a few issues with the server time and date occasionally changing to some absolute random values. Sometimes it is a few days in the future or past, sometimes - ...
- 91
0
votes
0
answers
101
views
Error promoting Windows Server 2022 to Domain Controller
I have a virtual Windows 2022 Server in a VMWare ESXi environment, and a WS2019 virtual in another host, which is my Active Directory Domain Controller. I've been trying to promote the WS2022 to ...
- 1
2
votes
0
answers
137
views
Using Linux tools to allow a user in a domain to access only certain computers
I ran samba-ad-dc domain controller on Debian Bullseye. No problem to create users and groups, organizational units, etc and to join windows or Linux computers to domain. But there is other task: On ...
0
votes
0
answers
131
views
Deleting all dynamic DNS records from AD-Integrated DNS server? What can go wrong?
[1 Forest, 1 Domain, 2 DCs and nothing more - nothing special]
Is it OK, to remove all dynamic records from DNS.
If I decide to do so, should I do the same on the second Domain Controller?
Beside one ...
- 3
0
votes
0
answers
10
views
ADO on premise recovery scenario (domain controller, app tier + db tier)
We are thinking about disaster recovery scenarios of one of our services and I am currently lacking some knowledge or sources to further investigate.
We have an Azure DevOps On Premise server that has ...
- 103
0
votes
0
answers
34
views
I can't PING to my Cisco router when I try to access the domain server
I have this network image
I tried to connect the pc1 to the domain (in Windows Server 2012).
To do that I tried to PING from pc1 to the server and that works.
After that I go the pc1(Windows 7) and I ...
- 109
0
votes
0
answers
157
views
Kerberos Errors in Azure Event ID 5
Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors.
The Kerberos client ...
0
votes
1
answer
52
views
How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?
I'm a cybersecurity researcher, studying netflow patterns to learn about reflective DDoS events that leverage CLDAP as a UDP reflection vector. I need to be able to distinguish between a windows ...
- 429
5
votes
3
answers
2k
views
Domain computer account trust relationship failed after connecting system with old hard drive to network
Our server is Windows 2016. I set up a new install of Windows 10 on a new hard drive. I named the computer on the new install the same as the old one. I kept the old hard drive as-is and didn't make ...
- 51
0
votes
0
answers
108
views
Domain Controller Upgrade 2019 to 2022
I have 3 Domain controller in my environment Windows Server 2019 Standard.
Primary DC : On-prem (FSMO role)
Secondary DC : On-prem
Tertiary DC : Cloud
I want to upgrade my domain environment to ...
-1
votes
1
answer
393
views
How to Restrict network shares access for a specific domain user in all computer except a one specific computer in a Domain Environment?
I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules:
Block access to network drives (network ...
0
votes
1
answer
104
views
Readonly Domain Controller for Remote Office
We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
- 197
-1
votes
2
answers
97
views
Range of Normal Usage for Domain Controller's LDAP Ping
I'm a security research studying CLDAP as a vector for UDP reflection attacks, a from of Denial of Service. I'm not a MS Server expert, so I want to sure up my understanding of the context of the ...
- 429
0
votes
1
answer
225
views
Firewall Ports Domain Controller to Clients
I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in ...
- 3
0
votes
0
answers
58
views
Leaving Windows Servers out of a domain
I'm not much used to running Windows Servers and need ground to either defend or withdraw from this idea and have found nothing on Google. The company I work for recently suffered a ransomware attack. ...
1
vote
1
answer
60
views
feedback on HDD speeds for a HP Proliant ML110 Gen10 server
I have a RAID 1+0 array in a HP Proliant ML110 Gen10 server with 4 x 7200RPM 2.5" 6Gbps SATA drives. The power management is set to Static High Performance Mode.
I ran a CrystalDiskMark benchmark ...
- 145
1
vote
1
answer
40
views
How to restrict NTLM V1 to select servers?
The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
- 111
1
vote
1
answer
2k
views
Kerberos failures with accountname "host"
Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist).
Event Viewer shows those failures as ID ...
- 163
0
votes
0
answers
43
views
retrieve computer name on domain controller
Good morning. I currently have a domain controller (Windows server 2019) where there are approximately 500 users and computers.
when a computer x is damaged, it reinstalls the operating system. The ...
- 1
0
votes
0
answers
62
views
Domain Controller isn't logging events enabled in subcategories
I have an environment with 3 domain controllers, one on 2019, one on 2016, and one on 2012R2. A GPO is set on the Domain Controllers OU that has the following enabled
Audit: Force audit policy ...
- 1
3
votes
2
answers
421
views
Why are logon types on Domain Controller and Workstation different
When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the ...
1
vote
1
answer
974
views
Is it safe to mix 2016/2022 as domain controllers?
We have a 2016 Server Essentials PDC, and now we'd like to add another DC for failover/backup purposes.
Will it be OK to use 2022 Server Standard for this second DC? (Web searches are returning ...
- 753
0
votes
1
answer
2k
views
How can I remove a no longer existent child domain from my forest?
In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
- 496
0
votes
2
answers
52
views
Changing an AD account password - what services will it break?
we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
0
votes
1
answer
813
views
Domain Member Servers - Accessing Certificate Revocation List (CRL)
In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
- 648
0
votes
0
answers
230
views
Cause of Master Key Backup Failure and Consequences of Workaround
I had a workstation afflicted with the issue described here:
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/dpapi-masterkey-backup-failures
Basically, in older versions of ...
- 135
0
votes
0
answers
54
views
domain controller B cannot use domain services once domain controller A is shut down (same domain)
So I have two different domain controllers on the same domain that reside on their own subnets. Domain controller A is the PDC with all the FSMO roles and Domain Controller B is on the other subnet (...
0
votes
0
answers
46
views
Repeating errors on my domain controllers - "Network Connectivity Assistant" is rejecting some unknown request
Going through my system logs today I discovered that both my Server 2019 Virtual Domain Controllers seem to have this error firing off every 2 minutes or so:
==
The Network Connectivity Assistant ...
- 125
0
votes
0
answers
16
views
Can Zerologon affect all domain controllers in a network?
If a network has a parent domain with multiple child domains each with a domain controller, but only one of the domain controllers is vulnerable to Zerologon, would that also affect the parent domain ...
0
votes
1
answer
260
views
How to correctly sync time of an Hyper-V host which is member of a domain?
There are many posts concerning issues when dealing with time synchronisation over a domain which holds virtualised PDC Emulators (see this article).
As a result our PDC Emulator time (and domain time)...
- 253
3
votes
1
answer
2k
views
Interpreting LastLogon vs. LastLogonTimestamp
To get the time of last logon of an account in an Active Directory of a Windows domain im querying the LastLogon attribute on every Domain Controller and the LastLogonTimestamp on one domain ...
0
votes
1
answer
23
views
PDCe time won't sync
I'm encountering a very strange situation where the time on my VM-hosted PDCe is reported as synced, but the actual time doesn't sync. The server's running about an hour fast.
Here's what I've got:
I'...
- 753
1
vote
1
answer
4k
views
How to Update ADMX Files - Different Server OS Versions in Domain
My clients domain has various 2012R2, 2016 and 2019 Windows Server versions. Two of the four domain controllers are running Windows 2012R2 and the ADMX files haven't been updated in years. The other ...
- 648
0
votes
1
answer
179
views
what to be carefull when rebuilding primary AD domain controller?
I just did some search such as this one and this to avoid asking a question which already has answer.
However, I'm not sure whether the information fully match my question or not.
The situation is, I'...
- 63
0
votes
1
answer
486
views
Unable to Transfer FSMO Role to Specific Domain Controller
I currently have two Windows 2012 R2 domain controllers - serverA and serverB. I have two Windows 2019 instances that were promoted to domain controllers with DNS roles - serverC and serverD. I was ...
- 648
0
votes
1
answer
3k
views
Windows NTP Server Registry Configuration
I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
- 648
0
votes
1
answer
373
views
Is it possible to remove NICs from a domain controller in DNS?
I have the following situation and I'm not sure what its implications are.
On a barebone server with 4 network interfaces, I'm running one of two DCs to my domain. Now, in spite of 4 network ...
- 973
0
votes
1
answer
998
views
Not typical "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" issue
I have the "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" problem. But it is not that simple.
When I added a new user as a domain user, automatically the ...
- 1
0
votes
0
answers
57
views
Additional Bind caching nameserver next to domain controllers
In an environment where I already have two domain controllers acting as name servers I would like to run the Bind cache server installed on Ubuntu 20.04.3 LTS to act as nameserver for specific hosts.
...
- 1
0
votes
2
answers
620
views
Creating DNS A Record for 3 domain controllers
I have setup a new domain on our network consisting of 2 domain controllers, dc1, dc2.
I can see the A records for the 2 controllers. But I need to do load balancing so that I can refer to the 2 dcs ...
- 5