I wanted to configure Server 2019 for replication in workgroup mode.
I followed the steps from https://michaelfirsov.wordpress.com/hyper-v-replica-in-windows-server-2016-configuring-certificate-based-authentication-part1/ but with the exception of changing the DNS Suffix of the machine.
I also configured the certificate without a FQDN, just created the ...
As you are referencing a Microsoft Windows Active Directory help site I am assuming you are talking about Active Directory Domain Controllers (AD DCs).
My answers are based on that assumption.
Ad 1. If you followed Microsoft best practice recommendations then your DNS zones are configured as AD integrated zones, see https://docs.microsoft.com/en-us/windows-...
You're asking multiple Things, however I try to be specific as possible
Do I need to keep both VM on the Same Domain for robocopy to work, or I can use it over cross-domain
No, They don't need to be, as you can use a network Drive to map the paths and copy it from there.
I was told that if a VM is on a Domain then all Administrators who have AD Entries can ...
Based on your question and comments that it will be a single forest/single domain -- then it's just a matter of proper OU structure and Delegation of rights within AD.
See here from Microsoft for more info: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-by-using-ou-objects
Basically you are creating specific OU ...
The need to log out is due to AD group memberships only updating when a Kerberos ticket is created, which occurs during login.
You can refresh a computer's Kerberos ticket by running klist -li 0:0x3e7 purge on an elevated command line, followed by gpupdate /force if you need to update the group policy.
First of all, you have to define ns1.railnet.ir. in your zone. Add a line
ns1 IN A 22.214.171.124
Second, your DNS server does not reply. dig railnet.ir @126.96.36.199 does not return any answers. To figure out why, have a look at the logs provided by bind. Likely it can't open the zone file for some reason, or finds it invalid.
Third, your also-notify and ...