All Questions
288
questions
1
vote
0
answers
27
views
Domain administrator unable to connect via remote desktop after group policy deployment
The network I administer has two virtualized Windows Server DC and a handful of Windows clients. I wanted to enable remote desktop on all computers (some had it, some hadn't) via group policy and so I ...
- 11
0
votes
0
answers
145
views
Setting up Domain Trust over NAT?
Short summary of our situation.
I have two separate domains that we need to establish a one-way forest trust between. Domain 1 has native subnet of 172.18.xx and Domain 2 has native subnet of 10.162....
- 1
1
vote
0
answers
48
views
Microsoft Active Directory Admin - Discriminate usable USB Disk devices
good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
- 11
0
votes
1
answer
474
views
Trouble debugging user access to Windows SMB shares
I am having trouble with 2 PC of my domain, both on Windows 10 1909, which I'll call "01" and "02", using a domain service account (called "s_automate" to connect to a ...
- 1
0
votes
0
answers
572
views
Kerberos Errors in Azure Event ID 5
Hi there we have a file server and DC. Sometimes connections to the file server are failing, and looking through the event viewer errors I am seeing lots of Kerberos errors.
The Kerberos client ...
1
vote
0
answers
145
views
Changing IP range that holds the Primary Domain Controller
My domain includes a few /24 ranges over an MPLS and we've recently acquired a business which uses the same /24 range as my Primary domain controller (172.17.0.0/24).
Because of this clash, I have 2 ...
- 11
0
votes
1
answer
27
views
Ramifications of a computer from organisation A joining the domain of organisation B
We are a small company who have some of our employees sitting at parter organisations, what we specifically do is not important for this question.
A new employee has received a new Win10 laptop, which ...
- 111
0
votes
1
answer
36
views
Windows Server 2012 RDS - How to add new Domainuser
So far I never had much to do with server administration, so this question might be very basic to some people.
I have to manage a Windows Server 2012 R2. There are around 8 users who use it. They all ...
1
vote
1
answer
5k
views
how to migrate existing profiles to new domain
We had our Server 2019 RAID fail and we had to rebuild it from scratch. This has now been completed and we're finding another issue - we now have to migrate users to this new domain w/o having them ...
- 113
0
votes
1
answer
635
views
SRV records not created on new domain controller
I've stood up a new domain controller and attached it to my existing domain and that seemed to complete without issue. But then when standing up a new server and attempting to attach it to the domain ...
- 457
-2
votes
1
answer
554
views
Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]
I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy.
Can a domain admin on the company network access my files or my PC ...
1
vote
1
answer
401
views
Why don't Windows domain machines periodically query security group membership, like other things? [closed]
When I was in lower tier support (and sometimes still), one of the most annoying sequences of events was a request for new file permissions >> add user to security group and specify in the reply ...
- 185
0
votes
0
answers
1k
views
Find Directory of Target File on Remote Server
I am trying to find a file directory on a list of remote servers. I want to:
Use Powershell; get targets from comma delimited text file, i.e. server1,file1
Note: file is different for each server.
...
- 1
0
votes
1
answer
420
views
Accessing domain shares on server from workgroup computers using domain user account
We have shares on our server which is on a domain. The shares is only shared to certain domain users. I want work group computers not part of domain to access these shares with the domain accounts ...
- 1
1
vote
0
answers
149
views
Add a domain user profile to a machine following offline domain join (DJOIN.exe)
I work for an MSP.
I have made an automation script within our RMM system (Connectwise Automate) which when ran on a device will find a domain controller within the same Client container as the device,...
- 11
0
votes
1
answer
395
views
How can I create a registry key on all domain machines with group policy?
I have a domain with a controller and joined workstations. I want to create a registry item on all of the connected workstations using a group policy.
I have created a group policy and tried to create ...
0
votes
0
answers
147
views
Specific Domain User Cannot Log into Specific Domain PCs
Good morning,
I have an employee who occasionally signs into different computers throughout our office depending where they are working that day (e.g. reception, checkout, etc.) but there are 4 PCs in ...
0
votes
2
answers
400
views
How to Clone Windows VM on GCP and the auto join clone to domain
I would like to create a Windows virtual machine (clone) on GCP from an existing Windows virtual machine on GCP
And i would like to have the clone autojoin the domain.
google-cloud-platform
-2
votes
1
answer
153
views
Left a domain and now I can't log in
Left the domain because of a trust issue and now windows tries to use the domain login instead of letting me input the local admin user, what should I do?
There is no "Other user" on the ...
- 101
0
votes
1
answer
63
views
network printer setup on win10 domain clients on a LAN
I have a computer work lab, it is a simple LAN with no real internet access. It started out as only a few PC's (years ago) and when it was just 4 or less the admin's did everything local on each pc ...
- 825
0
votes
1
answer
783
views
Windows authentication log
Windows domain.
Problem is in audit feature. I know how to enable audit in Group policy, but there is problem. One of our domain admins has killed host computer with hyper-v and we don't know who it ...
- 103
0
votes
1
answer
560
views
Login names between sub domains in Active Directory
If I create two subdomains (sub1.domain.com and sub2.domain.com) to my parent domain (domain.com) can different users have the same login in the different subdomains? Or does logins need to be ...
- 3
2
votes
0
answers
3k
views
Active Directory authentication using format domain.fqdn\username
Assuming an Active Directory domain with FQDN "domain.local" and NetBIOS name "DOMAIN", there are two standard formats to identify user accounts:
DOMAIN\username
[email protected]
(The second ...
- 70.7k
-2
votes
1
answer
484
views
IIS 8.5 two domain with two ssl issues
I have windows server 2012 r2 with IIS 8.5. and i am trying configure two domain with two different ssl.
my one domain is perfectly working in https. Problem is but when i browse another domain it ...
0
votes
1
answer
626
views
Can't resolve DFS in domain joined field laptops
When setting up business laptops (Windows 10) for some of the employees at my current job I'm facing a problem with joining them to our AD domain.
The setup:
Windows Server AD (on-premises) setup, ...
- 101
1
vote
2
answers
1k
views
ldaps certificate for connections using domain.local instead of fqdn
We have multiple Windows Server 2016 AD Domain Controllers and we need to replace all LDAP connections with LDAPS connections. For High Availability we would like to connect all LDAPS sessions to "...
- 23
0
votes
1
answer
86
views
connecting to a Windows computer as a named user, via WAN
Some server software (named Software) is running on a Windows PC (pc1). On the same LAN, client software is connecting to this server software. A parameter in the config file says ServerName=pc1\...
- 121
1
vote
2
answers
1k
views
Will group policy configurations applied locally through `gpedit` override domain GPOs until next GPO refresh interval?
Will group policy configurations applied locally through gpedit override domain GPOs until next GPO refresh interval?
I know that Domain GPOs takes precedence over locally defined GPOs (gpedit), ...
- 429
0
votes
2
answers
2k
views
Windows 10 in a domain takes forever to login
I have multiple computers using the same account in a domain.
When the users try to log in, the process take very long time (10/15 minutes).
I don't know how to fix that.
- 27
0
votes
2
answers
462
views
Any user can see (but not change anything in AD) with RSAT?
I'm setting up a helpdesk person with RSAT and then delegation for password resetting and when installing RSAT I noticed that ANY domain user can install RSAT and see every OU, which users are ...
- 101
5
votes
2
answers
247
views
Multiple AD domains for different hotels of the same chain?
I am inheriting existing infrastructure for a hotel group, and trying to overhaul said infrastructure.
The hotels (HotelA, HotelB, etc) were initially set up with one domain (and one domain ...
- 71
0
votes
0
answers
288
views
Domain resolves externally, but on my IIS server I can't browse to my website
Running Windows Server 2016. I set up a domain in IIS. Works fine externally. From home and work I can browse to myfakewebsite.com and it works just fine. Bindings are correct.
When I remote into the ...
- 65
0
votes
2
answers
61
views
Manage WIndows clients in the Azure cloud
I'm looking for a solution for the following scenario:
We are planing to install several Windows 10 systems (about 30 to 50 PCs).
We want to create user centrally, and also want to push group ...
- 25
1
vote
0
answers
270
views
Domain login behind NAT
Global network:
+-------------------+------------+--------------------+
| Server | Address | Description |
+-------------------+------------+--------------------+
| dc.contoso....
2
votes
1
answer
4k
views
Activation with KMS with other domain not working
On standalone computers for which I want to activate the Windows 2016 and 2019 license I have set the KMS domain with:
slmgr.vbs -skms-domain DomainFQDN
When I type, on the computer which I want to ...
- 449
0
votes
1
answer
393
views
Single Domain Computer Loses Internet Connection Everyday
A single domain computer loses internet connection everyday at 2:00pm. I've checked the logs and resolved group policy errors as the issue was highly correlated to when group policy errors occurred. I'...
- 377
0
votes
2
answers
15k
views
"The user's password must be changed before logging on the first time" when using a file server
I'm very new to network administration so please bear with me. I recently set up a new Dell server for a company, running Windows Server 2016, to act as a file server. We are also running Active ...
- 11
1
vote
1
answer
329
views
W10 Client temporary authentication failure when reconnecting network drives
The customer has a W10 laptop. The laptop is member of MyDomain. The user has 20 network drives mapped onto his laptop. The server is W2016 Domain Controller.
The user logs in on his laptop using his ...
- 297
5
votes
1
answer
12k
views
Cannot connect to Remote Desktop with Windows Hello PIN
When I try to connect to an intranet machine, it only works if I specify domain credentials. When I use Windows Hello pin, it fails with this message:
An authentication error has occurred (Code: ...
- 169
0
votes
2
answers
516
views
How to require computer authentication when accessing windows domain network shares
I have a network containing a mixed collection of Windows domain and workgroup computers.
Currently, the workgroup computers can access file/folder shares hosted on domain computers if the user ...
- 265
1
vote
3
answers
1k
views
Cannot disable group policy inheritance from domain
At work, my computer (Windows 10) is part of a local domain.
I added a few local group policies, and after noticing they were not being applied, I ran gpresult /H gp_report.html and it returned:
...
- 227
1
vote
2
answers
100
views
Is it possible for Windows clients to carry out external queries through an alternative DNS server directly?
Our Windows domain is far away. DNS performance is affected. Would it be possible for Windows clients to carry out external queries through an alternative DNS server directly? I understand this is not ...
- 458
0
votes
2
answers
121
views
Avoiding security groups in Windows domain with automated filesystem security
As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
- 460
2
votes
1
answer
350
views
Mount Windows share on linux host preserving ACLs
I have a debian server with some samba shares. It is joined to a Windows domain (Win 2008 R2) and the users are mapped using winbindd. Is it possible to mount a remote Windows share (situated on win7) ...
- 21
1
vote
0
answers
2k
views
SQL Server service: the service did not start due to a logon failure (Error 1069)
I am administering a database server running SQL Server 2016. The MSSQLSERVER service has been running under a domain account (with a password that does not expire) for a long time now with no ...
- 53
1
vote
1
answer
2k
views
Conditional Forwarder or DNS Stub Zone to Non-Authoritative DNS Zone
How could I go about forwarding DNS lookups to a non-authorative zone, in a sort of 'next hop' scenario?
The setups is as follows:
One ADDS Domain (contosob.local) which contains two DNS servers, ...
2
votes
1
answer
4k
views
Set password for local admin account on all computers in domain
Before you consider what I want to achieve as insane from a security standpoint, please continue reading:
I'm setting the password for the local admin account on all computers in the domain with a ...
- 121
5
votes
2
answers
16k
views
Add an account from a trusted domain to Domain Admins
Our domain is trusting an external domain (not in the same forest) and we need to add a group from the external domain into the Domain Admins group of our domain.
I understand that the Domain Admins ...
- 5,343
3
votes
2
answers
5k
views
List all txt records for a doman
How can I list all the txt records for a domain? All online tools i checked only list the firt one they find and the nslookup the same. I wish to do this on a windows machine.
- 41
0
votes
1
answer
209
views
Can i check when the domain admin last looked at my desktop folder, or a specific file on my desktop? [closed]
I have left a sensitive file on my windows 10 desktop folder. The windows 10 instance is connected to a domain. I understand that the domain admin has full access to my desktop.
Is their a way for a ...
- 55