5
votes
Domain computer account trust relationship failed after connecting system with old hard drive to network
As others have said already, the old operating system can't authenticate to the domain anymore, because the computer account has been reassigned to the new one; the only solution is to join the domain ...
- 69.5k
5
votes
Domain computer account trust relationship failed after connecting system with old hard drive to network
The computer objects authenticates with a password, just like any other user. The trust relationship fails when the computer can't authenticate anymore towards the domain.
In your case, you overwrote ...
- 6,510
5
votes
Domain computer account trust relationship failed after connecting system with old hard drive to network
Same name? Then yes, it is the same computer account and you just overwrite the keys for the trust relationship as they are stored under the computer in AD. There is nothing you can do now - really. ...
- 51.4k
2
votes
Accepted
Domain Member Servers - Accessing Certificate Revocation List (CRL)
do clients get updated CRL information using the ldap string (query?) above?
yes. Clients use URL defined in CDP extension of certificate to download the CRL. Microsoft CA and Windows clients support ...
- 6,554
2
votes
Accepted
How to correctly sync time of an Hyper-V host which is member of a domain?
From an elevated command prompt on the Hyper-V host run the following:
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /syncfromflags:DOMHIER /update
net stop ...
- 109k
2
votes
Accepted
Domain Controller DNS alias
Loopback SMB connections are indeed treated differently from external ones: https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/accessing-server-locally-with-fqdn-cname-alias-...
- 69.5k
2
votes
Accepted
Why are logon types on Domain Controller and Workstation different
In short, you'll see an interactive or remote logon type recorded on your workstations or servers. On your domain controllers, you're seeing logon type 3 because the computers are authenticating ...
- 3,369
2
votes
Is it safe to mix 2016/2022 as domain controllers?
The answer is yes.
Windows Server 2016 functional levels
Supported domain controller operating systems:
Windows Server 2022
Windows Server 2019
Windows Server 2016
- 753
2
votes
Accepted
Firewall Ports Domain Controller to Clients
You do not. Ports only need to be opened from Client to Server for Active Directory Authentication.
- 499
2
votes
Accepted
feedback on HDD speeds for a HP Proliant ML110 Gen10 server
You're not going to get better speeds out of those drives without a RAID cache or a higher-end standalone SmartArray controller.
- 196k
2
votes
Accepted
Handling GPO Policies between different domains
Copying and importing GPOs from another forest (high level)
Create a Backup in the source domain. Using Group Policy Management expand Group Policy Objects (You'll see all your GPOs listed here), if ...
- 476
2
votes
Accepted
How many Domain Controllers might a Windows Client send LDAP Ping to when trying to locate a DC for Authentication?
Can someone give me some sense of what the typical number of DC's a client might reach out to during this process?
No-one can provide this answer. It depends on numerous factors, such as how many ...
- 35k
1
vote
Accepted
Kerberos settings in GPO never seem to apply in spite of the GPO otherwise working
All account policies settings applied by using Group Policy are applied at the domain level. Default values are present in the built-in default domain controller policy for Password Policy settings, ...
- 35k
1
vote
Challenging Multiple Domain Controller Upgrade Questions (parent and child)
Those are many questions. And please do not use "parent" and "child" references in a multi-master domain model like active directory. There is no such thing; there are DCs in ...
- 4,574
1
vote
Windows Server 2019 randomly changes time and date to incorrect values
There are a couple things that will cause this that I have experienced. One is the bios time is set incorrectly. Second is the CMOS battery dying or on the way out.
- 11
1
vote
Windows Server 2019 randomly changes time and date to incorrect values
Try using an external time server. I recommend: pool.ntp.org
See: https://www.pool.ntp.org/de/use.html
We use pool.ntp.org as time source of our Domain Controllers and all devices which are not in the ...
- 121
1
vote
Accepted
Readonly Domain Controller for Remote Office
Do you need to set up a new site with your subnet? Yes, you should.
Do you need to set up a new rDNS zone for your subnet? You don't need to, but I consider it best practice.
- 109k
1
vote
Kerberos failures with accountname "host"
We experienced the same issue. Please see this article for a possible resolution:
https://support.microsoft.com/en-us/topic/may-19-2022-kb5015019-os-build-14393-5127-out-of-band-8548dfda-38ba-4fb6-...
- 11
1
vote
Accepted
How can I remove a no longer existent child domain from my forest?
You can remove an orphaned child domain the hard way by performing the following steps:
Determine the domain controller that holds the Domain Naming Master Flexible Single Master Operations (FSMO) ...
- 546
1
vote
Domain Controller thinks its on a Public Network
I had a similar event on a stand-alone 2016 Active Directory DS server. Server showed in a Public network. The initial symptom was that DNS lookups would fail against this server using NSLookup. ...
- 204
1
vote
Domain Controller thinks its on a Public Network
Implementation of marsh-wiggle's excellent answer in Ansible:
- name: Set dependencies of NLA service
ansible.windows.win_service:
name: nlasvc
dependencies:
- DNS
- NTDS
...
- 546
Only top scored, non community-wiki answers of a minimum length are eligible