Questions tagged [domain-controller]

A domain controller is a server in a Microsoft Active Directory or NT4 domain that is responsible for central authentication.

In Microsoft Active Directory and NT4 domains, a domain controller is the central repository for all of the user account authorization information. It allows a person to sign on once and be allowed access to many different resources.

1589 questions
8
votes
3 answers

Need for another Domain Controller

I have two domain controllers (Windows 2003) in one site where most of the department I support resides. There is another building (at another site) where my department resides as well, but they have no DC. This probably a classic question of…
7
votes
4 answers

Search Active Directory for computers logged in, in the last 30 days

I am trying to do a PowerShell search of AD to find computers only (not servers or others) that have been logged into within the last 30 days. I have most of the script written except for the limiting of 30 days part. Any help would be greatly…
Norrec
  • 71
  • 1
  • 1
  • 4
7
votes
2 answers

Delay Windows (member) Server start-up until Domain Controller is available

What is the most efficient way do delay (or pause) the cold start-up of Windows domain member servers until a domain server is available? There are ways to delay the start-up of a server , but it is a bit inefficient, because there is no real need…
Francois Nel
  • 183
  • 6
7
votes
3 answers

Should i disable DNS recursion?

I have two Domain Controller, both are DNS server and i have set Forwarder for both ( as per below Print-screen ) but i have not disable recursion on both server ( please see below print-screen ) there is one recommendation to disable DNS…
Param
  • 1,357
  • 14
  • 36
  • 52
7
votes
4 answers

SNMP service security tab is missing - Windows Server 2012 R2 - DC

I have to configure the security settings for the SNMP-Service on a Windows Server. But they are missing! Here are the facts: OS: Windows Server 2012 R2 I installed the SNMP feature and I believe, that I already configured the service (but I forgot…
7
votes
1 answer

Better to share File Services role with Active Directory DC role OR with the RDS Terminal Server role?

We are a small business setting up a new server... budget is limited of course. I have ~500GB of data to share that needs to be stored locally on the single server we have. Host Server: Dell Poweredge T610, 24GB RAM, Xeon CPU, RAID6 4TB…
7
votes
4 answers

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. The next step is to promote the new server to be…
7
votes
2 answers

How to set a default domain controller for all PowerShell AD cmdlets?

All the PowerShell cmdlets in the ActiveDirectory module support being run against a specific domain controller using the -server parameter; but is there any way to set a default DC to use for all AD-related operations, or do I need to specify it on…
Massimo
  • 70,200
  • 57
  • 200
  • 323
7
votes
3 answers

Can a Second Domain Controller, with buggy hard drive hardware, cause a corruption to Active Directory?

We have a new Domain Controller that holds all FSMO roles. We also have two old hardware servers, about 4-5 years old each, set up as secondary Domain Controllers (or better described as Domain Controllers that are DNS servers too not holding any…
dasko
  • 1,244
  • 1
  • 22
  • 30
7
votes
8 answers

How to tell what time a domain user logged in?

In the "Security" event log on a Windows 2003 domain controller, I see several entries of event 540 -- "Successful Network Logon" averaging a few minutes apart throughout the day. Is the first one of these for a particular user on a particular day…
6
votes
4 answers

In AWS, why is an EC2 behind NAT gateway in private zone said to be safer than one in public subnet?

I've been running four servers on AWS for a few years. It's for a hobby project. All servers live in the same subnet in the same VPC. To simplify the management of accounts and permissions, I've decided to use Active Directory. This means installing…
6
votes
1 answer

Can you raise the domain functional level to windows server 2016 and have DFS running on windows server 2012 r2?

I have 2 DC's that are both Windows Server 2016. We have one DFS server running Windows Server 2012 R2 but all of the namespaces are 2008 compatability mode. Our Domain Functional Level is at Windows Server 2012 R2. If I were to raise it to…
6
votes
1 answer

Inconsistent winbind info on Samba 4 AD domain controller

I've setup a Samba 4 AD domain controller on Debian Jessie (samba 4.2.10). Everything's working fine, except that winbind gives wrong user/group information. I have a sample user "testuser" and a security group "people". Their UNIX attributes are…
MasterM
  • 1,061
  • 2
  • 11
  • 18
6
votes
1 answer

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their profiles (including MyDocuments) appear to replicate…
TSG
  • 1,674
  • 7
  • 32
  • 51
6
votes
1 answer

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All servers are Windows Server 2012 R2 VMs running on the…
Massimo
  • 70,200
  • 57
  • 200
  • 323