Over 1 million tech questions and answers.

Create GPO to block usb in domain controller 2012

Q: Create GPO to block usb in domain controller 2012

- I have created GPO in domain to bloc usb drive but it didn't work with window 8.1 or latter, window 7 work fine. why?

Read other answers
Preferred Solution: Create GPO to block usb in domain controller 2012

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)



IP settings 

Subnet mask




Windows 7

IP address automatically  





error code reads 


following error occored wen DNS was queried for the servise location (SRV)

record used to locate an Active Directory Domane Controller (AD DC) for Domain



error was: "This operation returned because the timeout period expired."

code 0x000005b4 ERROR_TIMEOUT)


query was for SRV record_ldap._tcp.dc._msdcs.dalek.local.

DNS server used  by this com... Read more

Read other answers

Or - will ATA just alert users to the action taking place, and users will have to setup different defense tactics?
I guess the overall question is: will ATA just alert or can ATA perform reactionary defensive actions as well?
Thank you!

A:Can ATA block actions such as Domain Controller leveraging or replication?

For now just alerting, and suggest what to do, but it will not take automatic actions.

Read other 2 answers

Windows 2012 Verification of prerequisites for Domain Controller promotion failed and gave the below error(In computer management local group and user option is not there as suggested by a solution!)

"Verification of prerequisites for Domain Controller promotion failed. The local Administrator account becomes the domain Administrator account when you create a new domain. The new domain cannot be created because the local Administrator account password
does not meet requirements.

Currently, the local Administrator password is blank, which might lead to security issues. We recommend that you press Ctrl+Alt+Delete, use the net user command-line tool, or use Local Users and Groups to set a strong password for the local Administrator
account before you create the new domain."

A:Windows 2012 Verification of prerequisites for Domain Controller promotion failed

You need to have a password before you begin. Arnav Sharma | http://arnavsharma.net/ Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Read other 6 answers

I have a Machine with windows 7 x64 pro which was connected to a domain controller that is dead and not available anymore.
I want to continue to use this computer standalone and keep all the software and configurations already installed, however i need to change my pass and i am not able to do it getting this msg : configuration
information could not be read from the domain controller, either because the machine is unavailable, or because access is denied.
How can i solve this (change the pass or copy all the user settings to local) without the domain controller server?
thank you

Read other answers

I am trying to add a win 7 pro pc to a domain and I get this error " an attempt to resolve the DNS name of a domain controller in the domain being joined has failed"
I am running win server 2003 can anyone help?

A:error an attempt to resolve the DNS name of a domain controller in the domain being joined has failed

Ok I got it to work I put in the DNSserver address agine same as I did yesterday ( I must have put it in 3 or 4 times) and it din''t work I did it agine today and it worked the frist time. Thank you every one for your help

Read other 13 answers

dear all

i have a problem in adding addtional domain controller in my forest domain.

when i try to add additional; domain controller after working few miniutes it gives meessage THE ACTIVE DIRECTORY WIZARD IS UNABLE TO CONVERT THE COMPUTER TO DOMAIN CONTROLLER ACESSES DENIED


But the user name has full permission he is administrator

please help me

Read other answers

I've been trying to join a new Windows 7 Professional machine to a domain controller running Windows 2003 Server with no luck.  We currently have 4 Windows XP machines running on that domain without any issues, but when I try to add the Windows 7 computer,
here is what happens:

A computer account on the domain could not be found (confirmed it is already there)
I put in the computer name and domain again, and Administrator credentialsNow it tells me: "An attempt to resolve the DNS name of a DC in the domain being joined has failed."
I currently have DNS on the Windows 7 PC set to the Domain Controller and have IPv6 unchecked under Network Properties.  I can even ping the domain name (resolves to IP of the domain controller).  It looks like it can, indeed, find the domain from
the message in step 1, so am I missing something here?
Thanks in advance for any help!

A:Cannot join Windows 7 to domain even after setting DNS to domain controller IP

You need flush your DNS cache in client side first.
Then, let?s create the following registry value for a try:
 - Created a DWORD DomainCompatibilityMode = 1
 - Created a DWORD DNSNameResolutionRequired = 0
Reboot the machine and check the result again.Alex Zhao
TechNet Community Support

Read other 17 answers

Hello everyone,

So on my work laptop yesterday i got disconnected from the network, and upon trying to reconnect i had internet access but no network access, ran through some diag, was able to ping my other work station, ip,dns and dg where all fine, checked for dns records issue, none found. so i removed it from the domain and tried re-adding it, and this is where the problem is no matter what i do i cannot add this laptop on the domain. i get full internet access on the network but no network access. i know the Dns server is functioning perfectly and cant be the issue, i have also flushed dns, rebuilt tcp/Ip stack and removed all lan and wlan profiles. i am also getting a certificate error when trying to access the network on wlan.

Using my local admin here are some print screens of first the issue when trying to add the laptop back to the domain, then Ping results to my DNS server .

after removing the machine from the domain it now no longer picking up the correct DNS server.

Would assigning a new DNS record resolve the issue???

he following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "bareesc.bareescentuals.com":

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for

Common causes of this error include th... Read more

A:An active directory domain controller for the domain could not be contacted

Funny enough, we've found a handful of users on our network today unable to access local resources for the same reason!

Your DNS settings are being hijacked. They should point at your DC, but instead are pointed at a malicious DNS server hosted somewhere in Israel. Give your computer a good bath before letting play with the other children again.

We're currently in the process of mediation around here, too.

Hope that helps!

Read other 2 answers

I have an employee that gets this upon every boot on his assigned laptop. I have utterly no idea what it means or how to correct it. Help needed please.

A:Error: Domain controller could not be found for the specified domain.

Check the machine account. You might also delete it and recreate it. This may require a domain admin to rejoin the machine to the domain.

Read other 2 answers


We have a server set up with serval computers t. I formated a pc that was on the domain and now trying to attach it back to domain and i get the message.

Domain Contriller could not be contacted
I putted all the settings same as the other pc's..

i'm also getting the message " ip adress already in use. but i'm using the same ip as the pc had before i formated the pc. is this the reason that i get the message , Domain Contriller could not be contacted

i also can ping from the pc. to the server

Any Ideas?

thanks for the help

A:Problem:A domain controller for the domain could not by contacted

sorry i mean i also get the message " a duplicate name exist on the network"

Read other 1 answers

Hello everyone. I really hope that you can help me. You are my last hope.

I maintain about 30 domain computers. Recently when users try to log in on most of them the following error appears frequently:

"Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. if the message continues to appear, contact your system administrator for assistance."

I have seen that this error appears only in the computers with Windows XP and not in the computers with Windows Vista or 7. We have 2 domain controllers.

Please let me tell you about the ways I tried to resolve this problem and their results:

- on some computers, after several restarts the users are able to log in, but if they restart or shutdown after that the error appears again; this worked for some computers, but I do not know if the error will appear again in the future.
- on some computers, when i disabled the windows firewall or allowed all kind of ICMPs it was resolved, but this did not work for all the computers and I do not know if the error will appear again in the future.
- I unjoined and then rejoined some computers from the domain and it was resolved but after restarting the error appears again.
- If I unplug the network cable the users can log in but after restart the error appears again.
- I have tried to reset the user password and computer on the Active Directory for some users and... Read more

A:windows cannot connect to the domain, either because the domain controller is down...

Read other 16 answers

When I logon to our network I get "Domain controller for this domain could not be found:. The event viewer records event ID 5719 in the system log:
No Windows NT Domain Controller is available for domain PGMS_LAW. (This event is expected and can be ignored when booting with the 'No Net' Hardware Profile.) The following error occurred:
The RPC server is unavailable.
According to MS support the way to resolve this is to disable LMHOSTS lookup box. This was not enable on any machines and now I'm stuck. Does anyone have any ideas?

A:Domain controller for this domain could not be found

Simplest thing to try is remove it from the domain (make sure you have a local account with admin rights FIRST). Then re-add it to the domain.
Can you see/use network resources otherwise? Are the lights on on the NIC? Have you tried a different cable/network port?
Maybe remove/re-add the NIC. Check all the properties, correct IP/subnet/gateway/etc.......

Read other 1 answers

Hi all - I have a problem with my domain.

I have 1 domain "europe1" with the PDC in the UK.
I have 2 bdc's for europe1 in the a location in france.

europe1 is the accounts domain and is trusted by lots of resource domains.

The problem is this : Open user manager for domains on either one of the BDC's, it tries to retrive the list of users but gives the error "cannot find a domain controller for this domain".
If I try to retrieve a list of users from any one of the trusting domains it works no problem.

As a test we built a new bdc and it worked with no problems.

Any idea's what is wrong with our original BDC's ??

Thanks in advance

A:Cannot find domain controller for this domain

Have you done the standard what I term Microsoft solutions.

Reapply service pack the BDC's
Apply the latest Network card driver and reapply the service pack.

Only other thing I can think to check is can the BDC's resolve the PDC computer name.

Hope this is some what helpful.


Read other 1 answers

Are there any free software or reg-hack that will allow me to block certain domain/url from IE?

For example, lets say that I don't want anyone using my computer to go to AOL. Is there any way to prevent people from opening link like www.aol.com/~yada or any www.aol.com?

Thanks in advance for your help.

A:Software to block domain

Yes you can use the hosts file to accomplish this. by pointing the desired hostname, ie www.aol.com, to this tutorial to learn more:The Hosts File and what it can do for you

Read other 1 answers

HI All,

My wife got the XP Security 2012 virus today and kudos to this site for the tips on removing it. They worked great.

For the future though,is there an antivirus software that works better than others to block these before they get on the computer? Norton? AVG?


A:Is there an antivirus software that will block threats like XP Security 2012

HI All,My wife got the XP Security 2012 virus today and kudos to this site for the tips on removing it. They worked great.For the future though,is there an antivirus software that works better than others to block these before they get on the computer? Norton? AVG? thanks,chadThese type of viruses are let in 99% of computers I work on because the end user clicked on something they shouldn't have from social engineering tactics(Think of it as giving someone the keys to your house so it will not matter what anti virus you have). I would install Microsoft Security Essentials as an anti virus and pay for the full version of MalwareBytes this combined with smart browsing is the best you can do.

Read other 2 answers

Hi all,

Does anyone know if it is possible to do the following:

I wish to lock down network traffic on XP using the MMC console so that no network traffic can enter/exit my machine apart from anything with the address (xxxxx).dropbox.com

Is this possible? Any idea how I would do it?



Read other answers

How can I block a domain name like "*.google.com" and not IP via Windows Firewall?

Thank you.

Read other answers

This is probably the wrong place to post this topic, so I welcome any idea on where I should post it.

In Windows Live Mail you can right click a message and choose block domain. It takes me 8 clicks plus copying and pasting to do the same thing in outlook 2010. I would hope there is a quicker way that I do not know about, but maybe not. I find MANY different spammer email addresses use the same domain. Any ideas?

Thanks for reading this. Eliot

A:Want quick way to block domain in outlook 2010

Maybe this will help:

There is no shortcut menu command to add a sender's domain to the Blocked Senders list in Outlook 2007 or in Outlook 2010

Read other 3 answers

I have installed WIN Server 2012 on my laptop using a new volume and dualBoot.
I would like to set it up on our domain but I'm not very technical. I have run NSLookup but I don't really know what I'm looking for. I haven't yet setup the DNS on the server.

Thank you in advance for any assistance you make be able to offer.

Read other answers

Hi, I'm a DBA and hope to help people with there database questions. However networking has always been my weakest area and I'm trying to change that. However, I've gotten in way over my head with this one. My kids and I built a server and I've installed Windows Server 2012 Data Center Edition on it with the intention of making it our DC and DNS server as well as to host some hyper-v instances. However, I can't seem to get this thing to work. Everything I've read tell me I have to give it a static IP but every time I try it loose connection to my router. I finally relized that I had to make the IP on the same subnet as the router. My router is and the DHCP ip my server was receiving was so I figured I'd make it and set the scope in my router from .2 -.49 but that didn't work. I really don't know what I'm doing and the network guys are work are trying to help me but it's not working and I live almost 50 miles from my office. Please help.

Read other answers


I would like to block access to computer of our partners to domain administrator.
I encrypt the local hard drives and put a password on startup.
I forbid booting from a CD.

But domain administrators can reset a password in active directory while the session is locked and so open.
Do you know a protection on the windows 7 pro itself ?
Someone would have an idea?


Read other answers

I like to go to myspace.com at work, but headquarters decided to block every computer in the whole system (network) from accessing that website. Headquarters is over 1000 miles away, so I can't ask them to disable the block on my computer. I don't know anything about computers, but my friend tried to piont me to something called a host or hosts file, maybe also called a hostname file. I found the IP number (or the PING number) or whatever number for myspace: I tried working with the host file but I still couldn't figure out how to get it to work. My friend said to just put in excite.com and that big long number and save the file, then in a browser, when I went to excite.com, it would actually take me to myspace and get me around the block. But it is not working. If anyone has a solution, then that would be helpful. I have Windows 2000 Professional for the operating system.

A:How To Create A Host File To Get Around A Block

but headquarters decided to block every computer in the whole system (network) from accessing that website.Welcome to Bleeping Computer.That statement says that whatever information we would give to allow you access would violate a corporate policy at your workplace. That leaves Bleeping Computer subject to penalties. The least of which such activity puts your job in jeopardy for circumventing a corporate safeguard. We will not advise you on how to break rules at your workplace. This thread is now closed.Da Animal, Forum ModeratorYou are more than welcome to post about any topics which do not violate Bleeping Computers TOS and Board Rules

Read other 1 answers

I have a Windows Server 2012 R2 domain in the dmz. I have a Windows Server 2012 R2 domain in the network. I can access the one in the network to the dmz without a problem, but I cannot access the one in the dmz to the network. The ip addresses in the network are different than the ip address in the dmz. I fowarded the ports but the dmz box still gets blocked. I tried to do it by VPN after setting the router to accept VPN. The connection still gets blocked. I set all the firewall settings.

I'm not sure where to go from here, any help would be appreciated.

Thank you

A:Windows Server 2012 R2 connecting 1 domain to another through 2 routers

Read other 6 answers

Hello Experts,

I have single AD Forest, 1 root domain and 4 child domain which having parent child trust with each other

Windows 2012 Functional Level

We find in some security tool that SID Filtering is not enabled on 4 child domain.

Please suggest is there any risk of enabling SID Filtering on domain level and how to do that from Root domain to child domain
Early response will be really appreciated

Thanks, NG

Read other answers

Acessing your account. Can the admin use AD or a domain service to over ride the local policy?

A:When setting a local login policy to block a domain admin from accessi

vvcmarttech, sorry but domain admins in the AD can do most anything they want. No hiding from them.


Read other 2 answers

Can Microsoft please provide methodology for setting up Windows Event forwarding (Sender initiated) for a Domain Controller based on a Windows Server 2012 R2 Core installation? Unfortunately all of your documentation relies on using the local Event
Viewer GUI to set this up. Connecting Event Viewer from a full Server 2012 installation to a Core Installation loses this ability entirely. The only option I've tried to employ so far leverages an .xml file, but I am not sure it is working correctly.

Please note: this is for Windows Security Event ID 4776 ingestion.

Read other answers

When imaging HP EliteOne 800 G1 All-in-One  (Intel I217-LM NIC) by Windows 10 task Sequence, Domain Join stage fails every time. It was imaged with Windows 8.1 without any issue.  Same task Sequence works on HP 800 Mini (Intel I217-LM NIC) and other system from different vendor. Could I get some help please? Regards

A:windows 10 Task Sequence Not Join Domain (SCCM 2012 R2 SP1)

Hi,  I'm having the same problem for both the g1 800 and G2 800 EliteDesk Mini 35w.  Did you have any luck resolving this?  Thanks.

Read other 1 answers

Is it possible to create all in one ISO for Windows 7/8/10/Server 2008/Server 2012 x86,x64.

I know I can use "Easy2Boot MultiBoot" for all my iso, but I want to create all in one of all my windows versions in one installation ISO.

Thanks in advance...

A:How to Create Windows 7/8/10/2008/2012 All in One ISO

Yes, but it will be big. Using an esd file instead of a wim will reduce it by perhaps 30%, but AFAIK with an esd you won't be able to do upgrade/repair installs with win7, only clean installs.

Another solution is to have the installation media on a usb stick, probably easier.

Read other 2 answers

Ok here is my situation, I have 2 pc's running Win 2000 and a third running 2000 server, how do I get the 2 machines to join into the domain.....I installed AD and now have a domain called "something.local." does this make sense to anyone? also I am behind a linky router and have given my 2 pc's a static ip of "192.168.x.x" do I have to run a DHCP server on the 2000 server machine? I am completly lost and could use some help....I know Active Directory is not for the timid, maybe I bit off more than I can chew!!!

A:Domain Controller

You do not have to run DHCP from your server. You could run it from your router, or not at all. The key to getting your Win2k machines onto the domain is that you must build Domain User accounts on your server for them. This server must be configured as a Domain Controller. They must then change their Network Identification to join the Domain and log into the Domain Controller (your server) using the accounts that you have built for them under the Active Directory Groups and Computers area. (Start-->Programs-->Administrative Tools-->Active Directory Users and Computers.

When you boot your Win2k clients, be sure when the logon screen appears, that you use the drop-down box to select your domain not the local computer.

I use my Win 2k server as a Domain Controller and a file/backup server which I have found the most useful role for my small home network.

Hope this helps--


Read other 2 answers

I'll be adding a new Domain Controller to our network this evening. It's not currently connected to anything right now, so I need to know if I actually have to join the machine to the domain, or can I just plug it in and bring it up as a new DC on the domain? In other words, do I have to go through the process of going in to Active Directory on the existing DC and actually adding a new computer to the domain and then bring it up as a DC, or does it automatically join when I make it a DC on the network?

IT Intern

A:New Domain Controller

Read other 12 answers

how many domain controller can be added in windows server 2003

A:domain controller

You will need at least one per domain.

Read other 1 answers

Ok here is my situation, I have 2 pc's running Win 2000 and a third running 2000 server, how do I get the 2 machines to join into the domain.....I installed AD and now have a domain called "something.local." does this make sense to anyone? also I am behind a linky router and have given my 2 pc's a static ip of "192.168.x.x" do I have to run a DHCP server on the 2000 server machine? I am completly lost and could use some help....I know Active Directory is not for the timid, maybe I bit off more than I can chew!!!

A:Domain Controller

In control panel, open system, under identification, change it, and add the domain name, apply, and you'll get a message as to whether it was sucessful or not.

Read other 1 answers

How do I run a domain network?

A:Domain controller?

Read other 6 answers

Having trouble accessing Active Directory users/computers it times out and says it cannot connect to the domain controller and when I boot up takes forever and on the internet it takes minutes to switch screens.

Using XP Pro and Windows Server 2003. This is happenning on the admin PC. Thanks

A:Domain Controller

Hello & welcome to TSF,

you need to do this to both systems

do you have a Windows Xp cd, not the restore cd's that come with some systems, the cd will have the Windows logo & 3D hollowgram/image on it

if you do not maybe you can barrow one from a friend/family member/co-worker as long as it is the same version that is on your system

if you have (Windows XP Home Ed. sp2 ) then the cd will have to be that / if you have a cd with (Windows XP Home Ed. )you will have to slipstream (SP2 ) onto a disk that you create
this also applies for (SP3)

this also applies to (Windows XP Professsional )


now if you do have the Windows XP cd with sp2 please follow these steps


performing a (sfc) system file checker

It is a scan that checks the core files & dlls of the (os) operating system and replaces them if they are corrupt or missing with the correct original version


#1 then select (run) , then press enter
a window will open
#2 type in ( cmd ) then press enter
another window will open
#3 type in ( sfc )then press enter
another window will open
#4 type in (sfc /purgecache) then enter / your pc will work like crazy / this helps in rebuiding the cache file (notice the space between (sfc & /)
#5 type in (sfc /scannow ) then press enter ( notice the space between the (sfc & / )

now a scan will start , have your... Read more

Read other 1 answers

We have over 110 laptop users all logging on using cached domain login information.

Recently I've had a couple ring up saying that they can't log on to their laptops remotely as they get a message saying the domain controller is not available so all I've been able to do is get them to drive all the way on to our Head Office so i can reconnect their computer on to the domain and then get them to log on and then off the domain to create a cache of their logon details.

Any ideas the previous cached information has not allowed them to log on?

I'm guessing it has become corrupt but not sure how.

Read other answers

I have a strange problem I cant workout. It started with a new customer RDP 2012 server which we could not connect to an app once logged in.
If on an external PC it works OK.
If I create a fresh PC on our LAN it works.
If I this PC to the domain, it works.
If I move the PC to a UK Specific OU it stops working
If I move back out of the OU it still does not work
If I remove from the domain and do "GPUPDATE /FORCE /BOOT" and reboot and log backon as local admin account it still does not work!!
So there seems to be something in particular on the GPO in the UK OU in AD which causes the problem but even after moving the computer out it seems to store this mysterious setting and fails to work unless reimaged.
Any suggestions besides adding each option one by one in test GPO/OU????

Read other answers

This was originally posted in the Server 2012 forum, but perhaps it's more applicable to Windows 7.


I've joined the Windows 7 Pro workstations to the Domain using the SERVER2012/Connect app and that seemed to work fine.  I made the Users all Standard, not Admin, and access to the Shared folders is working fine too.  Users appear to be in the
Administrators group on the local machine, which is what I need.
However, a number of our applications aren't working correctly ... one writes changes to HKey Current User and those changes will not stick.  Some IE sites that require changes have to be made each time; those changes don't save.  Some
of the ODBC connections to SQL databases are behaving strangly as well.  I tried checking permissions on the Windows Registry keys, and they looked OK.  Turning off User Access Control did not help either.
If I log on to the workstation not using the Domain Account I don't have this problem.  And, one of the workstations which had performed the Windows 10 Upgrade while connected to the previous Domain Controllder works fine.
Any direction would be greatly appreciated!   Thx DMiller

Read other answers

Hi there,

I would like to create a daily folder on system startup which has the date like this 12-03-2012

I also want it to go to a certain place on my hard drive C:Users/Name/My Documents

I have this script but it puts the date the wrong way around and I would prefer dashes in between the dates?

for /f "skip=1" %%d in ('wmic os get localdatetime') do if not defined mydate set mydate=%%d
md %mydate:~0,8%
Thanks in advance, Jay ;-)

A:Create a directory on startup with date i.e. 12-03-2012

Ok slightly different way of doing this, now get the dashes between the dates

SET dd=%DATE:~0,2%-
SET mm=%DATE:~3,2%-
SET yyyy=%DATE:~6,4%

mkdir %dd%%mm%%yyyy%

How do I set the path for it create the dated folder? do I just add the path after mkdir?

i.e. C:Users\Name\My Documents


Read other 4 answers

Hi, I am using Windows 7 Ultimate edition.

I want to create a domain on it. Please help me to how to create a domain on windows7.

I have a single machine and want to create and join domain on itself only. There is some application which requires to join a domain. Please help.

Thanks in advance.


A:How to Create Domain on Windows 7?

You can't. Creation of a domain requires a server.

Read other 9 answers

I am tryin to add a user to a computer running W2k pro and when I type in the name and domain all I get is an error that says
"the trust relationship between this workstation and the primary domain failed"

This is a new workstation just added to the network, the user I am adding is myself and I have admin rights. For some reason all the users have to be local, I have checked the IP,DNS, and gateway. I can see the computer on the network.

A:Domain Controller does not trust me!

Hi tushkahoma
It seems that although you have local admin rights at the workstation, you may not have domain admin rights in order to join the domain.

Paul V

Read other 2 answers

At one time we had an mixed environment.

After the NT box was removed we had 2 Windows 2000 servers (PDC, BDC).

About 5 months ago we replaced our PDC with a 2003 server and no longer operate in a PDC/BDC environment.

Well now it looks like we'll be replacing the old Windows 2000 server with a Windows 2003 server.

The new server with have the same name and IP address as the old 2000 server.

My question I guess is do I need to demote the existing DC and then take it off the network, put my 2003 server on the network and do a dcpromo?

A:Domain Controller Question

Read other 10 answers

Hi All,

My small company is running in a XP workgroup environment. For security needs I am switching over to a windows domain. Our recently engaged IT professional initially pushed back on the domain controller idea - citing the cost in terms of degradation of performance during log in as well as an increase in care and feeding of users. After being informed of the security requirements, he is on board with the domain controller plan. My question to the experts here is: What am i getting myself into running my small bus network (<10 office + 10 classroom systems) in a domain as opposed to workgroup? Will this be an operational headache?

Much thanks!

A:Fear of domain controller

If the business stays small no its not an operational nightmare. In fact I am a domain advocate as there are alot of centralized things you can do on a domain that you can't with workgroups.

I.E. A domain login account allows 1 person to log onto all 20 user PC's instead of having to setup all 20 users at each PC. On top of that password changes if you change a password on the domain it changes it at each station you log in to. Also this allows for ALOT of flexibility if you ever have turnover you simply disable the account in the one spot and the person can't log in anywhere.

As far as longer login times I think thats close to hog wash. In a 20 user environment in 1 building if you have a long log in to your domain your looking at someone who setup a pretty horrid domain controller (or possibly someone who does not know about DNS and Active Directory). Now if this is a domain log in over a WAN yes it can bump up login times but then you need to look at your WAN connections.

Read other 1 answers

Hello everybody,
On some of my computers, when I tried to log in, I get the error say that it cannot find the domain controller, so I must log in locally. But the others log in OK. And when I log in locally (on the computers that has the error), I can ping the domain controller, that's mean I don't have any connection problems, but why it cannot find the domain controller? Have anybody had a problem similar to me? Do you have any quick solution for this?

Thanks in advance

A:Cannot find domain controller

Did you add the WINS address under Advanced TCP/IP settings?

Read other 3 answers

The title says it all. Can Windows 7 Professional be modified to run as a domain controller and use Active Directory? If so please point the way to a tutorial if you know of one. Thank you.

A:Can Win 7 Pro be modified to run as a domain controller and use A.D?

No. If it could Microsoft would be on you faster then Winnie-the-pooh stalking a jar of honey.
The only way you are going to have a domain controller is by using Windows Server.

Read other 1 answers

Hello everyone,

I'm in a predicament. Our small company uses a domain controller which every user logs into for access to the network and their local profiles. The profiles are NOT coming/stored on the server side however, they are simply local, but users are given rights to certain file server areas. The machine used as the DC is VERY old and we're not confident it will stay running much longer.
What's the best way to migrate users to a new server?
We have a new machine, with a proper Windows 2003 server installed. We set up another domain (OfficeNet2). I was under the impression we simply needed to "promote" the new server to become the new Domain Controller - however, we're not sure how to do this, and do we need to "copy" the old user login information from the old server to the new (If that's even required?)
Any help or ideas would be GREATLY appreciated!
All users are XP PRO SP3 (with a few MACs) and both servers are Win2003.

A:Migrating from one Domain Controller to Another

Actually it would have been easier if you kept the new server on the same domain -


If you have the ability to do it you may want to just do that. I have some links in this thread that wshow you how to have 2 DCs in one domain and to promote the new one.

When you have 2 different domains it becomes a bit more convoluted and you have to do some trusting and domain migrations.

Read other 1 answers