All Questions

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

server 2012Rd backup domain controller not communicating with PDC

I have client with a server with four vm's One is primary dc and another backup dc. There was an error generated with windows time service. The recommendation was to add/ change the logon to ...
docs's user avatar
  • 1
0 votes
0 answers
28 views

Trouble Upgrading Secondary DC from 2008R2 -> 2012R2 without FSMO Roles Present

I am attempting to upgrade a recovered DC running 2008R2 to 2012R2. This DC is the secondary and the primary is still in production. When attempting the upgrade process, I run into an issue where the ...
techengineer09's user avatar
1 vote
1 answer
157 views

Promoting a domain controller fails prerequisites

I'm replacing my domain controller with another domain controller with more efficient hardware and migrate from Server 2012 R2 to Windows Server 2019. The first step I joined the new server to the ...
Hassan Bosha's user avatar
0 votes
0 answers
681 views

Remote Group Policy Update failed (Access Denied) for Domain Admin

My first question in ServerFault heya :) In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
Lacrymae's user avatar
0 votes
0 answers
40 views

Company Servers Unable to Communicate Between One Another (On Same Network)

I want to make sure and provide as much detail as possible to try to get this resolved or at the very least, figured out. If you need more information, please let me know and I will happily provide it....
Leesa Moore's user avatar
0 votes
1 answer
49 views

Both LOCAL SERVICE and SYSTEM users are changing server time on DC

Odd one for you, our DC's time keeps changing by an hour, but it doesn't just go down by an hour it also go up. I've been monitoring the event logs and I can see that there are usually two entries ...
RobC_CTL's user avatar
0 votes
0 answers
69 views

Member servers pull Group Policy from only 1 (of 2) domain controllers?

Environment overview: AWS DC1 = Win2k12 instance in region1 - AZ1 DC2 = Win2k12 instance in region1 - AZ2 ~ 60 Member servers = all within region1 Replication set up between the two DCs for GPO, DNS, ...
celeryauthor's user avatar
1 vote
1 answer
8k views

Windows NTP Server Registry Configuration

I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
jrd1989's user avatar
  • 688
1 vote
1 answer
1k views

Is it OK to rename server name after configuring the domain controller in it?

I have Windows Server 2012 R2 and there is domain controller inside of it. Now I need to rename the server name, is it OK rename it directly ?
Gamer In The Game's user avatar
0 votes
1 answer
61 views

How to add users and computers back to server 2012

I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
Yogesh's user avatar
  • 1
0 votes
1 answer
4k views

Parent domain vs Child domain

As far as I know, a child domain's fully-qualified domain name (FQDN) must be a subdomain of the parent domain's FQDN. Also an implicit trust (two way - transitive) is established between them. Are ...
Allan's user avatar
  • 15
0 votes
1 answer
276 views

Can I add a child domain to an existing child domain?

Under a root domain i have 2 child domains. What I want to do is to create a child domain using an existing child domain as its parent domain, but it's currently giving me credential errors. Do I need ...
8d2013idk's user avatar
0 votes
1 answer
185 views

Domain controller failover fails unidirectionaly

The problem I am having is that if I take one of my two writable domain controllers offline, nobody seems to "fail over" to using the other domain controller like they're supposed to - ...
The ITea Guy's user avatar
1 vote
1 answer
101 views

Unable to rename the DN using trusted domain user credentials

I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com. I created a AD-User(TEST1) in trust2.com using administrator ...
user2956014's user avatar
0 votes
1 answer
118 views

I cannot join machines to domains when primary DC fails, everything else works fine

So we have two domain controllers on our little network and they both have DHCP and DNS replication. Active Directory was set up with replication betweens these two. Information that is created on any ...
Erudes's user avatar
  • 1
0 votes
1 answer
67 views

2x Windows Server for 2 labs in different parts of a building - what kind of failover to use

I have two servers and two labs in different parts of the building with Hyper-V 2019 with VMs for Windows Server Standard (2012 R2, will be upgrading in a few years). I want to: configure ServerA for ...
LeniVietz's user avatar
5 votes
1 answer
827 views

Raising Domain Functional Level

In my environment, I currently have three domain controllers. My main DC is running on 2012R2 and the other two are running on 2016. The current domain functional level is 2008R2 and the Functional ...
mrlljones's user avatar
2 votes
1 answer
648 views

Adding a UPN, when I log in using that UPN it doesn't use the same profile

I added a UPN to our AD Domain and to test I logged in using the new UPN as my user. Unfortunately, this for some reason used a new profile and I lost all of the bookmarks, cookies, settings, etc that ...
stormdrain's user avatar
  • 1,449
-1 votes
1 answer
810 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
wrathchild's user avatar
2 votes
1 answer
59 views

Preserving AD Configuration (User/Groups/OUs) After Uninstalling "Active Directory Domain Services" Role

I have somewhat of a unique challenge, I'm trying to migrate a old legacy server from a locally installed version of Active Directory Domain Service to a centrally managed AWS Directory Service. As ...
David Rogers's user avatar
1 vote
0 answers
60 views

Why has my domain controller remembered its dns/dhcp settings from before a reinstall?

Recently due to a hardware upgrade/replacement we powered down the whole domain (this is a small office so it's all on one server (ADDS, DNS & DHCP)) but when we powered up the network couldn't ...
Richard Rowlands's user avatar
0 votes
1 answer
493 views

Cannot modify Audit Policy

I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
JayJay's user avatar
  • 101
1 vote
0 answers
95 views

Can't get primary DC up after restore

Recently I have become the administrator of a Windows-server environment. Due to an error on the PDC, I decided to restore it from an old backup (a bit over a month old) - yeah I know now and I'm ...
majbom's user avatar
  • 11
1 vote
1 answer
2k views

Why is a AD Domain controller object set to "unconstrained delegation"? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all ...
Darktux's user avatar
  • 827
0 votes
2 answers
819 views

Renaming domain controller during migration

We're looking at replacing an aged server for a client, and as we installed this server, it adheres to our naming convention (namely, SVR-DC as it's the only DC on the network). Now that we want to ...
Jason Unger's user avatar
3 votes
2 answers
5k views

How do I interpret ID 4624 Type 3 events on a domain controller?

I'm seeing a lot of ID 4624 Events (Logon Type 3) on a domain controller (Windows Server 2012) and I'm wondering what those events want to to tell me. I've read that 4624 Type 3 events on a domain ...
mr.proton's user avatar
  • 133
0 votes
0 answers
2k views

Primary Domain Controller not syncing with secondary

Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!) We have 2 domain controllers, a ...
Gaza's user avatar
  • 215
0 votes
1 answer
250 views

Installing Windows Server 2012 R2 on top of Windows Server 2008 R2 with RAID 1 configuration

I have Dell PowerEdge Rack Server R510 that have Dell PERC S300 RAID Adapter which is configured to RAID 1. The server runs Windows Server 2008 R2. Currently the OS corrupted I cannot do backup ...
waka's user avatar
  • 1
1 vote
1 answer
7k views

Access denied to IPC$ share on Windows Domain Controller when SMB session is setup with Kerberos 5

I am writing a system which performs user login and provides single-sign-on access to SMB shares within the network. User login is done with Kerberos 5 to verify the user's identity and get a TGT ...
Nadim Z's user avatar
  • 21
0 votes
0 answers
844 views

Clients could not join to domain controller

When I`m trying join a client to the domain controller the client raises the following error: The following error occurred when DNS was queried for the service location (SRV) resource record used ...
MojtabaRezaeimehr's user avatar
1 vote
1 answer
731 views

Windows 2012 R2 Domain Controller making ARP requests outside of subnet?

I have a Windows Server 2012 R2 box acting as a Domain Controller which is on a segregated LAN. It also acts as the DNS server for this LAN. I also have a Sonicwall NSA 2600 firewall which is set as ...
MagikarpKing's user avatar
0 votes
1 answer
780 views

Windows Server - Can child domains sync via the parent?

Hi I’m still learning the in and outs of domain controllers and had a questions on how they sync If I have three sites. Site A - Parent domain hq.local Site B - Child domain child.hq.local Site C ...
Tom G.'s user avatar
  • 1
1 vote
2 answers
960 views

Change DSRM Password - WIN32 Error Code: 0xa90

I'm using Windows 2012 R2 with Active Directory. One of my DC has had hardware failure. I'd like to promote another server as a DC, but reading online it looks like I need the DSRM password to do so. ...
David Thomas Garcia's user avatar
1 vote
0 answers
46 views

GPO policies not applying across domain. Some workstations some not

I've been trying to figure this one out for awhile now. I inherited a 200 user network running Win2k12 R2 DC. I noticed some domain firewalls are off on workstations and some are on. When sitting in ...
Badfrogcz's user avatar
1 vote
2 answers
3k views

Renaming of domain in Active Directory with Certificate authority

i have domain, washington.example.com on Windows Server 2012 R2. For intergations with office 365, my organization, decided to rename domain name from washington.example.com to example.com. My ...
Piduna's user avatar
  • 571
0 votes
0 answers
427 views

How to configure domain trust and DNS to share content with an external domain?

I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
donmelchior's user avatar
0 votes
1 answer
3k views

How do I force a domain controller to sync with the PDC?

DC2 (a VM) is not syncing to DC1 (a physical server). On DC2 I get: PS C:\> w32tm /query /source Local CMOS Clock What must I do so that DC2 syncs to DC1 as its time source? Background: I had ...
Alan's user avatar
  • 1,003
2 votes
1 answer
5k views

Error promoting secondary DC (Windows Server 2012)

I am trying to promote second DC server. Primary and secondary servers are both Server 2012 R2. I joined secondary server to domain, but when i try to promote it, I get the following error. ...
markec134's user avatar
1 vote
1 answer
238 views

Multiple Domain Controller

i need help on configuring this properly. we have 5 domain controller which 4 of them are located in different country and the other one is which is located in locally. Problem: PC cannot join to ...
Ralph's user avatar
  • 11
1 vote
2 answers
1k views

How to prohibit users from installing specific software in windows system in an AD

I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
surjit's user avatar
  • 113
2 votes
0 answers
3k views

DHCP Server: Missing Addresses and how to free them

Our DHCP Server, running on a Windows Server 2012 R2 Data Center, shows that we have 241 addresses total with 220 (91%) in use, 21 available. If I go to the Address Leases node and count all IP ...
Sarah Weinberger's user avatar
6 votes
1 answer
553 views

Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?

I have 2 DC's that are both Windows Server 2016. We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode. Our Domain Functional Level is at ...
codyrigg's user avatar
0 votes
0 answers
1k views

GPO - SYSVOL permissions reset

We currently have two (2012 and 2012 R2) DC but SYSVOL seems to be corrupted as we cannot apply GPOs due to permissions complains (from either server). But we don't have a valid system backup so GPOs ...
kankamuso's user avatar
  • 487
0 votes
1 answer
247 views

Build new domain server 2012 in parallel with existing windows domain server 2003

I have existing network with around 400 PCs on it working under windows xp professional and windows 7 professional too. Around 375 PCs are linked using static IP address and they are not connected to ...
sam's user avatar
  • 111
0 votes
2 answers
123 views

Windows 2012 DNS getting public ip instead of NIC IP

Win 2012 ADDC DNS Today PCs were unable to login to domain. We transfered the ADDC to a new server a few weeks ago. After all the troubleshooting I found out that DNS is not working correctly, ...
Vinicio Guzman's user avatar
0 votes
1 answer
2k views

I can't see AD Recycle Bin in new DC?

I've a Server 2012 DC which is some services became malfunctioned. I've created secondary DC and moved all FSMO role to new one but I can't see AD Recycle bin in new server, when I right click to ...
Ercan Koc's user avatar
0 votes
2 answers
384 views

DNS Server on DC MS Server 2012 tries to reach gtld-servers.net

I have a Windows Server 2012 domain controller with DNS Server role installed. I configured several DNS servers as forwarders and that's working absolutely fine. All DNS requests are resolved. Now I ...
mountain_climber's user avatar
0 votes
0 answers
48 views

Domain group policy strangeness

I have a solution with two domain controllers. Domain is COMPANY.CLOUD We're trying to apply some group policies at the domain level, but things don't seem to be working correctly. On COMPANY-DC1, If ...
John's user avatar
  • 541
0 votes
1 answer
1k views

Secondary Domain controller accepting old password

We have this setup: one server with Windows Server 2012 and Hyper-V that runs 2 WServer 2012 VM's, one of them is the primary domain controller which is working fine and other that runs SAP one ...
Diego Alejandro Rosales Flores's user avatar
1 vote
1 answer
3k views

Disable Saving files and folders on desktop by group policy

I am using Windows Server 2012 R2 (AD, DC). 20 computers are joined with DC (Users are on Win 10 OS). I want to disable desktop file saving through group policy, and in this regard, I tried following ...
Naeem's user avatar
  • 143