Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

Filter by
Sorted by
Tagged with
0 votes
0 answers
14 views

Unable to join to domain

I have deployed two EC2 instances on AWS with one as a DC role and the other as a sql server which I intend to join to the domain. However when I try to join it I am getting the following error. ...
-1 votes
0 answers
18 views

After building new domain controller internet slow to respond [closed]

My personal home network for context to my issue, VMware host esxi 7.0i with 2 domain controllers, 1x WS2019 1x WS2022, 1x WS2022 file server, 1x WS2019 with 2019 MS Exchange enterprise, 1x WS2022 ...
  • 1
0 votes
0 answers
16 views

Can connect but not bind using ldp when creating new Domain Controller

I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server) .....but when I attempt to bind ...
  • 101
0 votes
0 answers
22 views

Can't bind to ldaps when creating new Domain Controller

I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server) .....but when I attempt to bind ...
  • 101
0 votes
0 answers
19 views

Member servers pull Group Policy from only 1 (of 2) domain controllers?

Environment overview: AWS DC1 = Win2k12 instance in region1 - AZ1 DC2 = Win2k12 instance in region1 - AZ2 ~ 60 Member servers = all within region1 Replication set up between the two DCs for GPO, DNS, ...
0 votes
0 answers
24 views

Log-in Failures after Endpoint Computers Name Change

We have a Windows Server 2016 on a VMware virtual machine, with about 30 end stations connected to the server DC. Recently, a day after we changed several of the names of the computers of the end ...
-1 votes
1 answer
46 views

What happens if the only DC fails?

I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company. Lets say, I am running ...
-1 votes
1 answer
63 views

Local user login on a domain machine, receiving System error 5 occurred Access is denied error

We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user. ...
-1 votes
1 answer
55 views

Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]

I am new to this domain controller and new to the company. all the below domain controller are in windows 2008. we got two parent controller parent-DC1-2008.example.com parent-DC2-2008.example.com ...
0 votes
1 answer
35 views

SQL Server - Windows Active Directory users

I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
4 votes
2 answers
223 views

Windows Server 2019 randomly changes time and date to incorrect values

In the last two months, we have got quite a few issues with the server time and date occasionally changing to some absolute random values. Sometimes it is a few days in the future or past, sometimes - ...
0 votes
0 answers
101 views

Error promoting Windows Server 2022 to Domain Controller

I have a virtual Windows 2022 Server in a VMWare ESXi environment, and a WS2019 virtual in another host, which is my Active Directory Domain Controller. I've been trying to promote the WS2022 to ...
  • 1
2 votes
0 answers
137 views

Using Linux tools to allow a user in a domain to access only certain computers

I ran samba-ad-dc domain controller on Debian Bullseye. No problem to create users and groups, organizational units, etc and to join windows or Linux computers to domain. But there is other task: On ...
0 votes
0 answers
131 views

Deleting all dynamic DNS records from AD-Integrated DNS server? What can go wrong?

[1 Forest, 1 Domain, 2 DCs and nothing more - nothing special] Is it OK, to remove all dynamic records from DNS. If I decide to do so, should I do the same on the second Domain Controller? Beside one ...
0 votes
0 answers
10 views

ADO on premise recovery scenario (domain controller, app tier + db tier)

We are thinking about disaster recovery scenarios of one of our services and I am currently lacking some knowledge or sources to further investigate. We have an Azure DevOps On Premise server that has ...
  • 103
0 votes
0 answers
34 views

I can't PING to my Cisco router when I try to access the domain server

I have this network image I tried to connect the pc1 to the domain (in Windows Server 2012). To do that I tried to PING from pc1 to the server and that works. After that I go the pc1(Windows 7) and I ...
  • 109
0 votes
0 answers
157 views

Kerberos Errors in Azure Event ID 5

Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors. The Kerberos client ...
0 votes
1 answer
52 views

How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?

I'm a cybersecurity researcher, studying netflow patterns to learn about reflective DDoS events that leverage CLDAP as a UDP reflection vector. I need to be able to distinguish between a windows ...
  • 429
5 votes
3 answers
2k views

Domain computer account trust relationship failed after connecting system with old hard drive to network

Our server is Windows 2016. I set up a new install of Windows 10 on a new hard drive. I named the computer on the new install the same as the old one. I kept the old hard drive as-is and didn't make ...
0 votes
0 answers
108 views

Domain Controller Upgrade 2019 to 2022

I have 3 Domain controller in my environment Windows Server 2019 Standard. Primary DC : On-prem (FSMO role) Secondary DC : On-prem Tertiary DC : Cloud I want to upgrade my domain environment to ...
-1 votes
1 answer
393 views

How to Restrict network shares access for a specific domain user in all computer except a one specific computer in a Domain Environment?

I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules: Block access to network drives (network ...
0 votes
1 answer
104 views

Readonly Domain Controller for Remote Office

We have two locations, one in Miami (192.168.3.0/24) and the other in New York (192.168.5.0/24). The two locations are linked via VPN. I wanted to set up an Read-only Domain Controller (RODC) in New ...
-1 votes
2 answers
97 views

Range of Normal Usage for Domain Controller's LDAP Ping

I'm a security research studying CLDAP as a vector for UDP reflection attacks, a from of Denial of Service. I'm not a MS Server expert, so I want to sure up my understanding of the context of the ...
  • 429
0 votes
1 answer
225 views

Firewall Ports Domain Controller to Clients

I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in ...
  • 3
0 votes
0 answers
58 views

Leaving Windows Servers out of a domain

I'm not much used to running Windows Servers and need ground to either defend or withdraw from this idea and have found nothing on Google. The company I work for recently suffered a ransomware attack. ...
1 vote
1 answer
60 views

feedback on HDD speeds for a HP Proliant ML110 Gen10 server

I have a RAID 1+0 array in a HP Proliant ML110 Gen10 server with 4 x 7200RPM 2.5" 6Gbps SATA drives. The power management is set to Static High Performance Mode. I ran a CrystalDiskMark benchmark ...
  • 145
1 vote
1 answer
40 views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
  • 111
1 vote
1 answer
2k views

Kerberos failures with accountname "host"

Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist). Event Viewer shows those failures as ID ...
  • 163
0 votes
0 answers
43 views

retrieve computer name on domain controller

Good morning. I currently have a domain controller (Windows server 2019) where there are approximately 500 users and computers. when a computer x is damaged, it reinstalls the operating system. The ...
0 votes
0 answers
62 views

Domain Controller isn't logging events enabled in subcategories

I have an environment with 3 domain controllers, one on 2019, one on 2016, and one on 2012R2. A GPO is set on the Domain Controllers OU that has the following enabled Audit: Force audit policy ...
3 votes
2 answers
421 views

Why are logon types on Domain Controller and Workstation different

When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the ...
1 vote
1 answer
974 views

Is it safe to mix 2016/2022 as domain controllers?

We have a 2016 Server Essentials PDC, and now we'd like to add another DC for failover/backup purposes. Will it be OK to use 2022 Server Standard for this second DC? (Web searches are returning ...
  • 753
0 votes
1 answer
2k views

How can I remove a no longer existent child domain from my forest?

In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
0 votes
2 answers
52 views

Changing an AD account password - what services will it break?

we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
0 votes
1 answer
813 views

Domain Member Servers - Accessing Certificate Revocation List (CRL)

In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
  • 648
0 votes
0 answers
230 views

Cause of Master Key Backup Failure and Consequences of Workaround

I had a workstation afflicted with the issue described here: https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/dpapi-masterkey-backup-failures Basically, in older versions of ...
0 votes
0 answers
54 views

domain controller B cannot use domain services once domain controller A is shut down (same domain)

So I have two different domain controllers on the same domain that reside on their own subnets. Domain controller A is the PDC with all the FSMO roles and Domain Controller B is on the other subnet (...
0 votes
0 answers
46 views

Repeating errors on my domain controllers - "Network Connectivity Assistant" is rejecting some unknown request

Going through my system logs today I discovered that both my Server 2019 Virtual Domain Controllers seem to have this error firing off every 2 minutes or so: == The Network Connectivity Assistant ...
0 votes
0 answers
16 views

Can Zerologon affect all domain controllers in a network?

If a network has a parent domain with multiple child domains each with a domain controller, but only one of the domain controllers is vulnerable to Zerologon, would that also affect the parent domain ...
0 votes
1 answer
260 views

How to correctly sync time of an Hyper-V host which is member of a domain?

There are many posts concerning issues when dealing with time synchronisation over a domain which holds virtualised PDC Emulators (see this article). As a result our PDC Emulator time (and domain time)...
  • 253
3 votes
1 answer
2k views

Interpreting LastLogon vs. LastLogonTimestamp

To get the time of last logon of an account in an Active Directory of a Windows domain im querying the LastLogon attribute on every Domain Controller and the LastLogonTimestamp on one domain ...
0 votes
1 answer
23 views

PDCe time won't sync

I'm encountering a very strange situation where the time on my VM-hosted PDCe is reported as synced, but the actual time doesn't sync. The server's running about an hour fast. Here's what I've got: I'...
  • 753
1 vote
1 answer
4k views

How to Update ADMX Files - Different Server OS Versions in Domain

My clients domain has various 2012R2, 2016 and 2019 Windows Server versions. Two of the four domain controllers are running Windows 2012R2 and the ADMX files haven't been updated in years. The other ...
  • 648
0 votes
1 answer
179 views

what to be carefull when rebuilding primary AD domain controller?

I just did some search such as this one and this to avoid asking a question which already has answer. However, I'm not sure whether the information fully match my question or not. The situation is, I'...
0 votes
1 answer
486 views

Unable to Transfer FSMO Role to Specific Domain Controller

I currently have two Windows 2012 R2 domain controllers - serverA and serverB. I have two Windows 2019 instances that were promoted to domain controllers with DNS roles - serverC and serverD. I was ...
  • 648
0 votes
1 answer
3k views

Windows NTP Server Registry Configuration

I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
  • 648
0 votes
1 answer
373 views

Is it possible to remove NICs from a domain controller in DNS?

I have the following situation and I'm not sure what its implications are. On a barebone server with 4 network interfaces, I'm running one of two DCs to my domain. Now, in spite of 4 network ...
  • 973
0 votes
1 answer
998 views

Not typical "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" issue

I have the "To Sign in Remotely, You Need the Right to Sign in Through Remote Desktop Service" problem. But it is not that simple. When I added a new user as a domain user, automatically the ...
  • 1
0 votes
0 answers
57 views

Additional Bind caching nameserver next to domain controllers

In an environment where I already have two domain controllers acting as name servers I would like to run the Bind cache server installed on Ubuntu 20.04.3 LTS to act as nameserver for specific hosts. ...
  • 1
0 votes
2 answers
620 views

Creating DNS A Record for 3 domain controllers

I have setup a new domain on our network consisting of 2 domain controllers, dc1, dc2. I can see the A records for the 2 controllers. But I need to do load balancing so that I can refer to the 2 dcs ...
  • 5

1
2 3 4 5
32