Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

In Microsoft Active Directory and NT4 domains, a domain controller is the central repository for all of the user account authorization information. It allows a person to sign on once and be allowed access to many different resources.

1589 questions
3
votes
2 answers

Migrating existing domain to a new domain controller and keeping the server name

My current problem is the following migration scenario: Existing domain: Domain-Controller (Windows Server 2003 x86) named "W2003SRV" with domain DOMAIN.LOCAL Terminal-Server 1 (Windows Server 2008 R2 x64) Terminal-Server 2 (Windows Server 2008 R2…
3
votes
2 answers

Please help - Schema/RID master is unavailable and cannot connect to it via ntdsutil

I am in serious need of help. I had of 2 domain controllers and one currently went down last night indefinitely. I have one DC holding up the entire domain. Kinda in a panic. Our servers are running on 2008r2. The Domain controller that went down is…
3
votes
2 answers

Active Directory Domain Names - Forest/Tree/Children

I've been doing some reading on suggested top-level-domains for AD and whatnot. I used to setup domains as company.local and that worked just fine, however, more people want to use their external domain company.com instead of the .local…
Kyle Johnson
  • 163
  • 1
  • 2
  • 8
3
votes
1 answer

Why do I see a heap corruption error from lsass.exe on domain controllers after installing Google Apps Password Sync?

We're moving to Google Apps and have just installed Google Apps Password Sync. We have yet to roll this out to users and are experiencing some problems. Occasionally after a user changes their password an error message pops up on a domain…
rtf
  • 884
  • 2
  • 17
  • 31
3
votes
2 answers

How does Exchange System Attendant determine what domain controller to bind to?

I have a centralized data center where my Exchange 2010 is located. This site also holds the FSMO master DC. I also have two off site locations where I have two other domain controllers, one in each location. Both of which are also Global…
3
votes
2 answers

How do I solve LDIFDE errors on "last token starts with 'C'" and "change-modify entry is missing the terminator '-'" when..?

How do I solve LDIFDE errors on "last token starts with 'C'" and "change-modify entry is missing the terminator '-'" when trying to pair existing users to exiting security groups (domain migration)? I execute…
BlueToast
  • 67
  • 1
  • 1
  • 9
3
votes
0 answers

NERR_DCNotFound when attempting to join Windows Server 2010 domain using PBIS

I have a RHEL 6.3 Amazon Web Service instance I'm trying to join to a Windows Server 2012 AD domain through PowerBroker Identity Services Open (ie: not enterprise). The Server 2012 instance is in the same subnet, I've opened TCP 88, 139, 389, 445,…
3
votes
3 answers

Migrating from windows 2000 to windows 2003 server?

I want to move all the domain information from a windows 2000 server to a windows 2003 server (they are separate machines) and then promote the windows 2003 server as the primary domain controller. Is there an easy way for this? If possible make…
3
votes
3 answers

How do I make on Domain Controller be used more to logon than another Domain controller on the same network?

I am currently working in an environment where there are 2 DC's running and another DC that is a backup but is currently running as well so that if the other 2 fail, the backup has everything needed to be ran successfully. The problem that I am…
3
votes
1 answer

Revocation status of DC can't be verified

A Domain Controller within my forest was working fine (as the story usually goes). Then, suddenly, I can't logon with my smart card. Instead, I'm greeted with the following message: The system could not log you on. The revocation status of the…
Federer
  • 211
  • 2
  • 5
  • 11
3
votes
2 answers

Why do clients on Branch Sites insist on accessing SYSVOL on the HQ DC instead of the branches' RODC?

I'm still scratching my head over this situation... You see, we have 3 RW DCs in the HQ, and 1 RODC on every branch sites (50+ locations). During startup, a script will pull in some files from \\example.com\SYSVOL\example.com\Common\Data But we have…
3
votes
4 answers

Windows 7 accounts on a 2008r2 DC keep getting locked out randomly

As the title states, this happens randomly to Windows 7 accounts on our Windows 2008R2 domain controller. We just had this start happening after changing from 123together hosted exchange to Rackspace hosted exchange. Also around this time our…
3
votes
1 answer

Migrating Windows 2008 R2 to Windows 2012 (migrate all FSMO too)

I own 2 server with Windows 2008 R2, both DC. The first one is of course the Primary DC (with all FSMO). What I would like to do is ro dcdemote the 2nd DC, remove it from domain and replace the Windows 2008 r2 with 2012. I will then rejoin this 2nd…
Mauro
  • 31
  • 1
  • 2
3
votes
1 answer

Do Windows Domain Controllers broadcast anything to a remote server connected via VPN?

Our Windows 2003 Server web server (my responsibility) is in another city and talks to a database server on our LAN (the LAN is someone else's responsibility) via a VPN. The VPN is established via a hardware firewall on each end. When the LAN Domain…
Tim
  • 203
  • 1
  • 4
  • 11
3
votes
2 answers

How do I get Windows Domain Controller and Ubuntu dnsmasq to play nicely?

I've inherited "ownership" of a network which has a Windows 2003 Server running as a Domain Controller and file server (no IIS or DNS running). We also use an Ubuntu server running dnsmasq as an internal Name Server. This setup doesn't seem to have…