All Questions
Tagged with windows-server-2012-r2 domain-controller
170
questions
0
votes
0
answers
9
views
server 2012Rd backup domain controller not communicating with PDC
I have client with a server with four vm's One is primary dc and another backup dc. There was an error generated with windows time service. The recommendation was to add/ change the logon to ...
0
votes
0
answers
28
views
Trouble Upgrading Secondary DC from 2008R2 -> 2012R2 without FSMO Roles Present
I am attempting to upgrade a recovered DC running 2008R2 to 2012R2. This DC is the secondary and the primary is still in production. When attempting the upgrade process, I run into an issue where the ...
1
vote
1
answer
157
views
Promoting a domain controller fails prerequisites
I'm replacing my domain controller with another domain controller with more efficient hardware and migrate from Server 2012 R2 to Windows Server 2019.
The first step I joined the new server to the ...
0
votes
0
answers
681
views
Remote Group Policy Update failed (Access Denied) for Domain Admin
My first question in ServerFault heya :)
In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
0
votes
0
answers
40
views
Company Servers Unable to Communicate Between One Another (On Same Network)
I want to make sure and provide as much detail as possible to try to get this resolved or at the very least, figured out. If you need more information, please let me know and I will happily provide it....
0
votes
1
answer
49
views
Both LOCAL SERVICE and SYSTEM users are changing server time on DC
Odd one for you, our DC's time keeps changing by an hour, but it doesn't just go down by an hour it also go up. I've been monitoring the event logs and I can see that there are usually two entries ...
0
votes
0
answers
69
views
Member servers pull Group Policy from only 1 (of 2) domain controllers?
Environment overview: AWS
DC1 = Win2k12 instance in region1 - AZ1
DC2 = Win2k12 instance in region1 - AZ2
~ 60 Member servers = all within region1
Replication set up between the two DCs for GPO, DNS, ...
1
vote
1
answer
8k
views
Windows NTP Server Registry Configuration
I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
1
vote
1
answer
1k
views
Is it OK to rename server name after configuring the domain controller in it?
I have Windows Server 2012 R2 and there is domain controller inside of it. Now I need to rename the server name, is it OK rename it directly ?
0
votes
1
answer
61
views
How to add users and computers back to server 2012
I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
0
votes
1
answer
4k
views
Parent domain vs Child domain
As far as I know,
a child domain's fully-qualified domain name (FQDN) must be a subdomain of the parent domain's FQDN.
Also an implicit trust (two way - transitive) is established between them.
Are ...
0
votes
1
answer
276
views
Can I add a child domain to an existing child domain?
Under a root domain i have 2 child domains. What I want to do is to create a child domain using an existing child domain as its parent domain, but it's currently giving me credential errors. Do I need ...
0
votes
1
answer
185
views
Domain controller failover fails unidirectionaly
The problem I am having is that if I take one of my two writable domain controllers offline, nobody seems to "fail over" to using the other domain controller like they're supposed to - ...
1
vote
1
answer
101
views
Unable to rename the DN using trusted domain user credentials
I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com.
I created a AD-User(TEST1) in trust2.com using administrator ...
0
votes
1
answer
118
views
I cannot join machines to domains when primary DC fails, everything else works fine
So we have two domain controllers on our little network and they both have DHCP and DNS replication.
Active Directory was set up with replication betweens these two.
Information that is created on any ...
0
votes
1
answer
67
views
2x Windows Server for 2 labs in different parts of a building - what kind of failover to use
I have two servers and two labs in different parts of the building with Hyper-V 2019 with VMs for Windows Server Standard (2012 R2, will be upgrading in a few years). I want to:
configure ServerA for ...
5
votes
1
answer
827
views
Raising Domain Functional Level
In my environment, I currently have three domain controllers. My main DC is running on 2012R2 and the other two are running on 2016. The current domain functional level is 2008R2 and the Functional ...
2
votes
1
answer
648
views
Adding a UPN, when I log in using that UPN it doesn't use the same profile
I added a UPN to our AD Domain and to test I logged in using the new UPN as my user. Unfortunately, this for some reason used a new profile and I lost all of the bookmarks, cookies, settings, etc that ...
-1
votes
1
answer
810
views
Unable to change trusted users passwords from within trusting domain
I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
2
votes
1
answer
59
views
Preserving AD Configuration (User/Groups/OUs) After Uninstalling "Active Directory Domain Services" Role
I have somewhat of a unique challenge, I'm trying to migrate a old legacy server from a locally installed version of Active Directory Domain Service to a centrally managed AWS Directory Service. As ...
1
vote
0
answers
60
views
Why has my domain controller remembered its dns/dhcp settings from before a reinstall?
Recently due to a hardware upgrade/replacement we powered down the whole domain (this is a small office so it's all on one server (ADDS, DNS & DHCP)) but when we powered up the network couldn't ...
0
votes
1
answer
493
views
Cannot modify Audit Policy
I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
1
vote
0
answers
95
views
Can't get primary DC up after restore
Recently I have become the administrator of a Windows-server environment. Due to an error on the PDC, I decided to restore it from an old backup (a bit over a month old) - yeah I know now and I'm ...
1
vote
1
answer
2k
views
Why is a AD Domain controller object set to "unconstrained delegation"? Can this be altered?
As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way.
Can i change "unconstrained delegation" setting on all ...
0
votes
2
answers
819
views
Renaming domain controller during migration
We're looking at replacing an aged server for a client, and as we installed this server, it adheres to our naming convention (namely, SVR-DC as it's the only DC on the network).
Now that we want to ...
3
votes
2
answers
5k
views
How do I interpret ID 4624 Type 3 events on a domain controller?
I'm seeing a lot of ID 4624 Events (Logon Type 3) on a domain controller (Windows Server 2012) and I'm wondering what those events want to to tell me.
I've read that 4624 Type 3 events on a domain ...
0
votes
0
answers
2k
views
Primary Domain Controller not syncing with secondary
Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!)
We have 2 domain controllers, a ...
0
votes
1
answer
250
views
Installing Windows Server 2012 R2 on top of Windows Server 2008 R2 with RAID 1 configuration
I have Dell PowerEdge Rack Server R510 that have Dell PERC S300 RAID Adapter which is configured to RAID 1. The server runs Windows Server 2008 R2. Currently the OS corrupted I cannot do backup ...
1
vote
1
answer
7k
views
Access denied to IPC$ share on Windows Domain Controller when SMB session is setup with Kerberos 5
I am writing a system which performs user login and provides single-sign-on access to SMB shares within the network.
User login is done with Kerberos 5 to verify the user's identity and get a TGT ...
0
votes
0
answers
844
views
Clients could not join to domain controller
When I`m trying join a client to the domain controller the client raises the following error:
The following error occurred when DNS was queried for the service location (SRV) resource record used ...
1
vote
1
answer
731
views
Windows 2012 R2 Domain Controller making ARP requests outside of subnet?
I have a Windows Server 2012 R2 box acting as a Domain Controller which is on a segregated LAN. It also acts as the DNS server for this LAN.
I also have a Sonicwall NSA 2600 firewall which is set as ...
0
votes
1
answer
780
views
Windows Server - Can child domains sync via the parent?
Hi I’m still learning the in and outs of domain controllers and had a questions on how they sync
If I have three sites.
Site A - Parent domain hq.local
Site B - Child domain child.hq.local
Site C ...
1
vote
2
answers
960
views
Change DSRM Password - WIN32 Error Code: 0xa90
I'm using Windows 2012 R2 with Active Directory.
One of my DC has had hardware failure. I'd like to promote another server as a DC, but reading online it looks like I need the DSRM password to do so. ...
1
vote
0
answers
46
views
GPO policies not applying across domain. Some workstations some not
I've been trying to figure this one out for awhile now. I inherited a 200 user network running Win2k12 R2 DC. I noticed some domain firewalls are off on workstations and some are on. When sitting in ...
1
vote
2
answers
3k
views
Renaming of domain in Active Directory with Certificate authority
i have domain, washington.example.com on Windows Server 2012 R2. For intergations with office 365, my organization, decided to rename domain name from washington.example.com to example.com. My ...
0
votes
0
answers
427
views
How to configure domain trust and DNS to share content with an external domain?
I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
0
votes
1
answer
3k
views
How do I force a domain controller to sync with the PDC?
DC2 (a VM) is not syncing to DC1 (a physical server). On DC2 I get:
PS C:\> w32tm /query /source
Local CMOS Clock
What must I do so that DC2 syncs to DC1 as its time source?
Background: I had ...
2
votes
1
answer
5k
views
Error promoting secondary DC (Windows Server 2012)
I am trying to promote second DC server. Primary and secondary servers are both Server 2012 R2.
I joined secondary server to domain, but when i try to promote it, I get the following error.
...
1
vote
1
answer
238
views
Multiple Domain Controller
i need help on configuring this properly.
we have 5 domain controller which 4 of them are located in different country and the other one is which is located in locally.
Problem:
PC cannot join to ...
1
vote
2
answers
1k
views
How to prohibit users from installing specific software in windows system in an AD
I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
2
votes
0
answers
3k
views
DHCP Server: Missing Addresses and how to free them
Our DHCP Server, running on a Windows Server 2012 R2 Data Center, shows that we have 241 addresses total with 220 (91%) in use, 21 available. If I go to the Address Leases node and count all IP ...
6
votes
1
answer
553
views
Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?
I have 2 DC's that are both Windows Server 2016.
We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode.
Our Domain Functional Level is at ...
0
votes
0
answers
1k
views
GPO - SYSVOL permissions reset
We currently have two (2012 and 2012 R2) DC but SYSVOL seems to be corrupted as we cannot apply GPOs due to permissions complains (from either server). But we don't have a valid system backup so GPOs ...
0
votes
1
answer
247
views
Build new domain server 2012 in parallel with existing windows domain server 2003
I have existing network with around 400 PCs on it working under windows xp professional and windows 7 professional too.
Around 375 PCs are linked using static IP address and they are not connected to ...
0
votes
2
answers
123
views
Windows 2012 DNS getting public ip instead of NIC IP
Win 2012 ADDC DNS
Today PCs were unable to login to domain. We transfered the ADDC to a new server a few weeks ago. After all the troubleshooting I found out that DNS is not working correctly, ...
0
votes
1
answer
2k
views
I can't see AD Recycle Bin in new DC?
I've a Server 2012 DC which is some services became malfunctioned. I've created secondary DC and moved all FSMO role to new one but I can't see AD Recycle bin in new server, when I right click to ...
0
votes
2
answers
384
views
DNS Server on DC MS Server 2012 tries to reach gtld-servers.net
I have a Windows Server 2012 domain controller with DNS Server role installed. I configured several DNS servers as forwarders and that's working absolutely fine. All DNS requests are resolved.
Now I ...
0
votes
0
answers
48
views
Domain group policy strangeness
I have a solution with two domain controllers. Domain is COMPANY.CLOUD
We're trying to apply some group policies at the domain level, but things don't seem to be working correctly.
On COMPANY-DC1, If ...
0
votes
1
answer
1k
views
Secondary Domain controller accepting old password
We have this setup:
one server with Windows Server 2012 and Hyper-V that runs 2 WServer 2012 VM's, one of them is the primary domain controller which is working fine and other that runs SAP
one ...
1
vote
1
answer
3k
views
Disable Saving files and folders on desktop by group policy
I am using Windows Server 2012 R2 (AD, DC). 20 computers are joined with DC (Users are on Win 10 OS). I want to disable desktop file saving through group policy, and in this regard, I tried following ...