Over 1 million tech questions and answers.

Computer was not able to setup a secure session with a domain controller

Q: Computer was not able to setup a secure session with a domain controller

Computer was not able to setup a secure session with a domain controller

Read other answers
Preferred Solution: Computer was not able to setup a secure session with a domain controller

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)


I am getting Event Id 5719, source is NETLOGON.  I have tried many different things such as removing and re-adding the computer account.  I have also looked online with no success.  Any assistance would be much appreciated.  I am on Windows
7 PRo.  See below for more info:

This computer was not able to set up a secure session with a domain controller in domain Domain due to the following:
There are currently no logon servers available to service the logon request.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.




[ Name]



[ Qualifiers]









[ SystemTime]







... Read more

A:Computer was not able to setup a secure session with a domain controller

Thanks for posting in Microsoft TechNet forums.
If you can correctly log on to the domain, you can safely ignore event ID 5719.

Because the Netlogon service may start before the network is ready, the computer may be unable to locate the logon domain controller. Therefore, event
ID 5719 is logged. However, after the network is ready, the computer will try again to locate the logon domain controller. In this situation, the operation should be successful.
Best Regards
Magon Liu
TechNet Subscriber Support
in forum. If you have any feedback on our support, please contact
[email protected]
 Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ?

Read other 25 answers

New to ATA but have found some security flaws on our part so far.  I can't seem to find a solution for the following
Reconnaissance using SMB Session Enumeration
SMB session enumeration attempts were successfully performed from certificateserv against dc,
exposing 555 accounts.

This is happening between our root certificate server, and one of our DC's.  The "exposed
accounts"  seem to be all of our workstations.   

Is this common, and can be ignored?  Has anyone else ran into this?


Read other answers

I want to install this administration software for my Network called Ranger for networks. To do this I am required for my PC to become a Domain Controller. I want this software installing on an exact PC which is running XP SP3. How do I make that PC the Domain Controller of my Network.

A:Domain Controller Setup

Posted via Mobile Device
you can't. A domain controller is setup on a Windows server OS.

Read other 1 answers

hey there, the office that i work at doing odds and ends for everything and anything doesn't have there networking setup in a domain enviroment, its in a peer to peer workgroup i think you call it. Basically my question is this...what does a server need in order to become a domain controller...is there seperate hardware or software or is it built into windows 2000 server. Right now the Dell 1400 SC server has 1Gb of ram and (2) Pentium III 1125 MHz processors. What would we have to do in order to get the server setup as a domain controller????? We plan on doing a clean install of everything if we can use this server as a domain controller... Also, i think one of this initial problems that they never had a domain controller setup is because most of the computers are running 98SE (about 28) some XP (about 6) and some 2000 pro (about 6) Im not sure if the 98's were a issue with a domain enviroment? Any and all info is greatly appreciated!!!!!!! Thanks for reading!

A:setup A domain controller on windows 2000 server???

Read other 10 answers

I am trying to create a network on my vista computers like the one on my xp computers. Specifically, I want a setup where once someone is logged into their computer, they get whatever permissions are associated with their user profile.

In Vista home premium, I cannot figure out how to do this.

So, I added all computers to the same workgroup, and created profiles on each computer in the network with the username of the main login of each of the other computers (5 in the network). This means 5 profiles per computer. I can then assign permissions in my folder sharing dialog. Then, when I login as a user on one computer, I can enter my network folder, click on a remote computer on the network, login using the profile name/password, and access the shared folders BY navigating through the users folder, then the *nam* folder...

although this works, I am not happy with it.
1) Each computer has multiple profiles on it, which I don't want. I want only one profile per computer, and a central list of those profiles in my main server computer, with the permissions. That way, when someone logs in on their computer, they become authenticated in the network, and their permissions are distributed to them. no more passwords, no "just go" to the folders they want.
2) I want each of the shared folders to show up in the "network" tabs, like it used to do in XP. That way, I don't have to navigate a series of folders to get to the shared folder I want.
3) I don�... Read more

A:VPN setup in Vista - domain controller workaround desired

One simplification--for a given user account use the exact same password on all machines. That should save the need to provide a password for remote access.

I don't know if this would work for you, but it would be much simpler to just have the desired user account on each computer and then put sharable files (or a shortcut to them) into the Public folder and turn Password Protected Sharing OFF. However, I infer from your setup that each family member wants to share each file with only certain other members, making this suggestion unworkable.

Read other 2 answers

I have a Machine with windows 7 x64 pro which was connected to a domain controller that is dead and not available anymore.
I want to continue to use this computer standalone and keep all the software and configurations already installed, however i need to change my pass and i am not able to do it getting this msg : configuration
information could not be read from the domain controller, either because the machine is unavailable, or because access is denied.
How can i solve this (change the pass or copy all the user settings to local) without the domain controller server?
thank you

Read other answers

Windows 8.1used admin creds to access computer renaming dialogchanged computer name (& description)applied changeswas asked for and entered creds againgot error: A specified logon session does not exist it may already have been terminated
Already tried the registry trick:
Network access: Do not allow storage of passwords and credentials for network authenticationPlease advise

Thank you

Read other answers

What does it mean (in layman's terms) when you see this message in ATA?
<computer A> was queried by one or more users from <computer B> using SAMR against <domain controller> 
I am seeing this every four hours in our network/domain. 

Read other answers

I am trying to add a win 7 pro pc to a domain and I get this error " an attempt to resolve the DNS name of a domain controller in the domain being joined has failed"
I am running win server 2003 can anyone help?

A:error an attempt to resolve the DNS name of a domain controller in the domain being joined has failed

Ok I got it to work I put in the DNSserver address agine same as I did yesterday ( I must have put it in 3 or 4 times) and it din''t work I did it agine today and it worked the frist time. Thank you every one for your help

Read other 13 answers

dear all

i have a problem in adding addtional domain controller in my forest domain.

when i try to add additional; domain controller after working few miniutes it gives meessage THE ACTIVE DIRECTORY WIZARD IS UNABLE TO CONVERT THE COMPUTER TO DOMAIN CONTROLLER ACESSES DENIED


But the user name has full permission he is administrator

please help me

Read other answers

I've been trying to join a new Windows 7 Professional machine to a domain controller running Windows 2003 Server with no luck.  We currently have 4 Windows XP machines running on that domain without any issues, but when I try to add the Windows 7 computer,
here is what happens:

A computer account on the domain could not be found (confirmed it is already there)
I put in the computer name and domain again, and Administrator credentialsNow it tells me: "An attempt to resolve the DNS name of a DC in the domain being joined has failed."
I currently have DNS on the Windows 7 PC set to the Domain Controller and have IPv6 unchecked under Network Properties.  I can even ping the domain name (resolves to IP of the domain controller).  It looks like it can, indeed, find the domain from
the message in step 1, so am I missing something here?
Thanks in advance for any help!

A:Cannot join Windows 7 to domain even after setting DNS to domain controller IP

You need flush your DNS cache in client side first.
Then, let?s create the following registry value for a try:
 - Created a DWORD DomainCompatibilityMode = 1
 - Created a DWORD DNSNameResolutionRequired = 0
Reboot the machine and check the result again.Alex Zhao
TechNet Community Support

Read other 17 answers

Hello everyone,

So on my work laptop yesterday i got disconnected from the network, and upon trying to reconnect i had internet access but no network access, ran through some diag, was able to ping my other work station, ip,dns and dg where all fine, checked for dns records issue, none found. so i removed it from the domain and tried re-adding it, and this is where the problem is no matter what i do i cannot add this laptop on the domain. i get full internet access on the network but no network access. i know the Dns server is functioning perfectly and cant be the issue, i have also flushed dns, rebuilt tcp/Ip stack and removed all lan and wlan profiles. i am also getting a certificate error when trying to access the network on wlan.

Using my local admin here are some print screens of first the issue when trying to add the laptop back to the domain, then Ping results to my DNS server .

after removing the machine from the domain it now no longer picking up the correct DNS server.

Would assigning a new DNS record resolve the issue???

he following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "bareesc.bareescentuals.com":

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for

Common causes of this error include th... Read more

A:An active directory domain controller for the domain could not be contacted

Funny enough, we've found a handful of users on our network today unable to access local resources for the same reason!

Your DNS settings are being hijacked. They should point at your DC, but instead are pointed at a malicious DNS server hosted somewhere in Israel. Give your computer a good bath before letting play with the other children again.

We're currently in the process of mediation around here, too.

Hope that helps!

Read other 2 answers

When I log into my banks secure web site and then click on a specific account to see the details I get a message something like: Current session expired.
Some browsers do not allow resizing windows in a secure session...
It worked before I had to go thru all the steps to remove the hideous popups and it works in IE (which I'd rather not use) and on the computer at work with Firefox. Any ideas? Should I reinstall?

Read other answers

I have an employee that gets this upon every boot on his assigned laptop. I have utterly no idea what it means or how to correct it. Help needed please.

A:Error: Domain controller could not be found for the specified domain.

Check the machine account. You might also delete it and recreate it. This may require a domain admin to rejoin the machine to the domain.

Read other 2 answers

Hello everyone. I really hope that you can help me. You are my last hope.

I maintain about 30 domain computers. Recently when users try to log in on most of them the following error appears frequently:

"Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. if the message continues to appear, contact your system administrator for assistance."

I have seen that this error appears only in the computers with Windows XP and not in the computers with Windows Vista or 7. We have 2 domain controllers.

Please let me tell you about the ways I tried to resolve this problem and their results:

- on some computers, after several restarts the users are able to log in, but if they restart or shutdown after that the error appears again; this worked for some computers, but I do not know if the error will appear again in the future.
- on some computers, when i disabled the windows firewall or allowed all kind of ICMPs it was resolved, but this did not work for all the computers and I do not know if the error will appear again in the future.
- I unjoined and then rejoined some computers from the domain and it was resolved but after restarting the error appears again.
- If I unplug the network cable the users can log in but after restart the error appears again.
- I have tried to reset the user password and computer on the Active Directory for some users and... Read more

A:windows cannot connect to the domain, either because the domain controller is down...

Read other 16 answers


We have a server set up with serval computers t. I formated a pc that was on the domain and now trying to attach it back to domain and i get the message.

Domain Contriller could not be contacted
I putted all the settings same as the other pc's..

i'm also getting the message " ip adress already in use. but i'm using the same ip as the pc had before i formated the pc. is this the reason that i get the message , Domain Contriller could not be contacted

i also can ping from the pc. to the server

Any Ideas?

thanks for the help

A:Problem:A domain controller for the domain could not by contacted

sorry i mean i also get the message " a duplicate name exist on the network"

Read other 1 answers

How-To Secure Your Browsing Session Before Hitting Starbucks!.

Starting today, Starbucks offers free Wi-Fi across US and Canadian cities. Free Wi-Fi hotspots have become a common method for connecting to the internet and sharing information, often private information.

Such hotspots attract the unwanted attention of hackers and others who are interested in capturing the information being shared on the hotspot.

Read the comment about JAP! Better yet - Just don't use it!

-- Tom

Read other answers

Spoiler (Highlight to read)  recently update the window8 to window10, but very soon the computer colaps, not able to boot, don't  even POST.after search on the internet, i reflash the bios with SPIPGM. the computer come back to live, but the system would shut off in a hour each time i power on the computer.  then i try to reflash the bios according to the acer bios update , the computer always give me an alarm, 18-error: unable to start a secure flash session. any hlep would be  appreciated.

Read other answers

Spoiler (Highlight to read)  recently update the window8 to window10, but very soon the computer colaps, not able to boot, don't  even POST.after search on the internet, i reflash the bios with SPIPGM. the computer come back to live, but the system would shut off in a hour each time i power on the computer.  then i try to reflash the bios according to the acer bios update , the computer always give me an alarm, 18-error: unable to start a secure flash session. any hlep would be  appreciated.

Go to Solution.

A:18-error: unable to start a secure flash session

after use fpt to flash the bios with a older version, then i am able to run the bios update. 

View solution in original post

Read other 3 answers


From my laptop I need access to 2 different "networks":

(A) I access a Workgroup within Microsoft Windows Network (I have the correct Workgroup name) to get access to printers and other computers at work.

(B) I sometimes run VPN to "log" in the domain at my university (necessary for Email clients).

(A) works when I start my laptop. But if I open the VPN connection and then close it, (A) does not work anymore most of the time.

I run Windows XP Professional without the "simple file sharing" option.

Anyone can help? Many thanks!

A:MS windows network Workgroup does not work after a VPN session on another domain

Read other 7 answers


IP settings 

Subnet mask




Windows 7

IP address automatically  





error code reads 


following error occored wen DNS was queried for the servise location (SRV)

record used to locate an Active Directory Domane Controller (AD DC) for Domain



error was: "This operation returned because the timeout period expired."

code 0x000005b4 ERROR_TIMEOUT)


query was for SRV record_ldap._tcp.dc._msdcs.dalek.local.

DNS server used  by this com... Read more

Read other answers

Hello Everyone!

I have a network with some computers ruuning windows Vista and a windows server 2003.
The computers are working in a network with a domain and fixed IPs and users logs in with their domain accounts at the computers.

Some computers are doing something that i cant figure out the reason.
Some computers works just fine, but two or three of them are having trouble working with the network eventhough they detect the network and open the folders shared on the network. If i try to run a software that normally works trough the network or if i open an office file or the windows vista network center the co mputer stops responding and windows explorer has to be restarted.
If i restart the computer the problem seems to be solved but it doesn't work all the time because sometimes i have to restart the PC several times until it works ok without this network related problem.

This problem seems to be random and i don't know if it is something related to the windows server or with the windows vista. I have other computers with windows vista on the network and they work ok.

I have already tried some situations but none of them fixed the problem because it keeps hapening:
Things that i've tried:

Start the pc with the anti virus software turned off;
Restart client and server DNS or DHCP service;
Unplug and plug the network cable;
Remove computer from the domain and add it again;

Anyone has an ideia of what might be the problem?

Thank you!

Read other answers

Hi all - I have a problem with my domain.

I have 1 domain "europe1" with the PDC in the UK.
I have 2 bdc's for europe1 in the a location in france.

europe1 is the accounts domain and is trusted by lots of resource domains.

The problem is this : Open user manager for domains on either one of the BDC's, it tries to retrive the list of users but gives the error "cannot find a domain controller for this domain".
If I try to retrieve a list of users from any one of the trusting domains it works no problem.

As a test we built a new bdc and it worked with no problems.

Any idea's what is wrong with our original BDC's ??

Thanks in advance

A:Cannot find domain controller for this domain

Have you done the standard what I term Microsoft solutions.

Reapply service pack the BDC's
Apply the latest Network card driver and reapply the service pack.

Only other thing I can think to check is can the BDC's resolve the PDC computer name.

Hope this is some what helpful.


Read other 1 answers

When I logon to our network I get "Domain controller for this domain could not be found:. The event viewer records event ID 5719 in the system log:
No Windows NT Domain Controller is available for domain PGMS_LAW. (This event is expected and can be ignored when booting with the 'No Net' Hardware Profile.) The following error occurred:
The RPC server is unavailable.
According to MS support the way to resolve this is to disable LMHOSTS lookup box. This was not enable on any machines and now I'm stuck. Does anyone have any ideas?

A:Domain controller for this domain could not be found

Simplest thing to try is remove it from the domain (make sure you have a local account with admin rights FIRST). Then re-add it to the domain.
Can you see/use network resources otherwise? Are the lights on on the NIC? Have you tried a different cable/network port?
Maybe remove/re-add the NIC. Check all the properties, correct IP/subnet/gateway/etc.......

Read other 1 answers

afuwin.exe IMAGEF1.CAP /p /r+---------------------------------------------------------------------------+| AMI Firmware Update Utility v3.03.01 || Copyright (C)2012 American Megatrends Inc. All Rights Reserved. |+---------------------------------------------------------------------------+Reading flash ............... doneSecure Flash enabled, recalculate ROM size with signature...- FFS checksums ......... okLoading capsule to secure memory buffer ... done18 - Error: Unable to start a Secure Flash session.Child process failed. Return code: 24C:\SWTOOLS\FLASH\F1JY74USA> I have tried:using OS flash tool,burn ISO to CD,boot from USB,enter serial & model # in BIOS update process all produce the same error message BIOS settings have no restrictions visible in BIOS settings such as passwords.   My present BIOS is: F1KT22AUSMy model # is: 3493EQG

Read other answers

Hi all,

I am trying to install Windows 7 on my Acer Predator 7750G but everytime the first installation phase stops it says that it cannot configure my computer so the installation will stop.

I have had some virus problems on my HDD were i couldn't see what was on them, that is the reason why i have choosen to install from scratch on the computer!

Anyone tried this problem?

Appreciate the help

NB! I am from Denmark so my english is very poor, sorry for that!

A:Windows 7 installation fails after 1 setup session

Did you clean your HD first?
SSD / HDD : Optimize for Windows Reinstallation

Are doing a clean install?
Clean Install Windows 7
Clean Install with a Upgrade Windows 7 Version

Read other 9 answers

I have been tearing my hair out for the past couple of months trying to fix a nasty problem with IE 6.0 where I am unable to load certain links that use javascript. I have consulted several technical support reps from many different sites and they all keep feeding me the same blindingly obvious answers, like turning off my popup blockers or re-setting my IE security settings.
I discovered a forum from a couple of years ago with an individual who described the exact same problem. The forum is titled "JavaScript links do not work" for reference.
I have gone through all of the same steps as best as i could and ended up with all the same results but have still been unable to correct the problem. My knowlege on these matters is very limited. One detail I did notice however, is that this problem always occurs on pages within a sucure domain.
I don't know what significance, if any, this may have.
If anyone has any more ideas, I would greatly appreciate your input. I am losing my mind trying to find an answer.

Read other answers

I cannot for the life of me figure this one out.. The server on the network does not control the internet - all clients run to a switch which runs to a T1.

I am having problems accessing secure sites. Doesn't matter which client machine I use, here is the problem..

When I login to a particular site, it seems like it accepts my login. Then once I advance from the login screen I have other links I can click on to continue. When I click a link, I am taken back to that same login screen. If I try this 5 times or so, I may be able to navigate to where I need to go.

What is the issue? If I try to login from anywhere else, I have no problems..

I have tried Firefox and Explorer and both have the same issues. I have added the site to a trusted site, and all security levels are correct.

Any ideas (PLEASE HELP)?

A:All machines on domain cannot login to secure sites

UPDATE (yeah that was fast) -

It seems as though it is not just secure sites!!! For instance on this site when I tried to edit the post I just made, it said that I am not logged in to do that. The problem lies in that the machine is not remembering that I am logged in. Cookies?? What is going on?>

Read other 3 answers

1. how can i make my domain name email accounts to be more secure with TLS or SSL?

i've a domain name hosted with godaddy.com.
when i tried to configure tls or ssl it wasn't worked.

what can i do to allow more secure email accounts with godaddy credit?

i'm using thunderbird 2 for now.

2. i also want to know how to make the the same account ftp hosting to be more secure.
i mean that i want to make some backups to a server. i'm using genie backup manager.


A:1. how can i make my domain name email accounts to be more secure with TLS or SSL?

Follow the instructions in this article:


Read other 2 answers

I'll be adding a new Domain Controller to our network this evening. It's not currently connected to anything right now, so I need to know if I actually have to join the machine to the domain, or can I just plug it in and bring it up as a new DC on the domain? In other words, do I have to go through the process of going in to Active Directory on the existing DC and actually adding a new computer to the domain and then bring it up as a DC, or does it automatically join when I make it a DC on the network?

IT Intern

A:New Domain Controller

Read other 12 answers

how many domain controller can be added in windows server 2003

A:domain controller

You will need at least one per domain.

Read other 1 answers

Ok here is my situation, I have 2 pc's running Win 2000 and a third running 2000 server, how do I get the 2 machines to join into the domain.....I installed AD and now have a domain called "something.local." does this make sense to anyone? also I am behind a linky router and have given my 2 pc's a static ip of "192.168.x.x" do I have to run a DHCP server on the 2000 server machine? I am completly lost and could use some help....I know Active Directory is not for the timid, maybe I bit off more than I can chew!!!

A:Domain Controller

You do not have to run DHCP from your server. You could run it from your router, or not at all. The key to getting your Win2k machines onto the domain is that you must build Domain User accounts on your server for them. This server must be configured as a Domain Controller. They must then change their Network Identification to join the Domain and log into the Domain Controller (your server) using the accounts that you have built for them under the Active Directory Groups and Computers area. (Start-->Programs-->Administrative Tools-->Active Directory Users and Computers.

When you boot your Win2k clients, be sure when the logon screen appears, that you use the drop-down box to select your domain not the local computer.

I use my Win 2k server as a Domain Controller and a file/backup server which I have found the most useful role for my small home network.

Hope this helps--


Read other 2 answers

Having trouble accessing Active Directory users/computers it times out and says it cannot connect to the domain controller and when I boot up takes forever and on the internet it takes minutes to switch screens.

Using XP Pro and Windows Server 2003. This is happenning on the admin PC. Thanks

A:Domain Controller

Hello & welcome to TSF,

you need to do this to both systems

do you have a Windows Xp cd, not the restore cd's that come with some systems, the cd will have the Windows logo & 3D hollowgram/image on it

if you do not maybe you can barrow one from a friend/family member/co-worker as long as it is the same version that is on your system

if you have (Windows XP Home Ed. sp2 ) then the cd will have to be that / if you have a cd with (Windows XP Home Ed. )you will have to slipstream (SP2 ) onto a disk that you create
this also applies for (SP3)

this also applies to (Windows XP Professsional )


now if you do have the Windows XP cd with sp2 please follow these steps


performing a (sfc) system file checker

It is a scan that checks the core files & dlls of the (os) operating system and replaces them if they are corrupt or missing with the correct original version


#1 then select (run) , then press enter
a window will open
#2 type in ( cmd ) then press enter
another window will open
#3 type in ( sfc )then press enter
another window will open
#4 type in (sfc /purgecache) then enter / your pc will work like crazy / this helps in rebuiding the cache file (notice the space between (sfc & /)
#5 type in (sfc /scannow ) then press enter ( notice the space between the (sfc & / )

now a scan will start , have your... Read more

Read other 1 answers

How do I run a domain network?

A:Domain controller?

Read other 6 answers

Ok here is my situation, I have 2 pc's running Win 2000 and a third running 2000 server, how do I get the 2 machines to join into the domain.....I installed AD and now have a domain called "something.local." does this make sense to anyone? also I am behind a linky router and have given my 2 pc's a static ip of "192.168.x.x" do I have to run a DHCP server on the 2000 server machine? I am completly lost and could use some help....I know Active Directory is not for the timid, maybe I bit off more than I can chew!!!

A:Domain Controller

In control panel, open system, under identification, change it, and add the domain name, apply, and you'll get a message as to whether it was sucessful or not.

Read other 1 answers

We have over 110 laptop users all logging on using cached domain login information.

Recently I've had a couple ring up saying that they can't log on to their laptops remotely as they get a message saying the domain controller is not available so all I've been able to do is get them to drive all the way on to our Head Office so i can reconnect their computer on to the domain and then get them to log on and then off the domain to create a cache of their logon details.

Any ideas the previous cached information has not allowed them to log on?

I'm guessing it has become corrupt but not sure how.

Read other answers

I've posted 2 threads on this forum and have NOT gotten a response... I'm sure someone on this forum is smarter than me!!

I asked if anyone can tell me why I can not access my servers on the network from my pc or any pc on the network when I shut down my PDC and leaving the BDC on at a different segment.

I am trying to test for a disaster recovery plan. If my PDC burns up the BDC should be able to authenticate all users and they should have access to all other servers as usual... correct?

Appreciate the help!~

Read other answers

Hi guys
I Have two Domain Controllers DC01 and DC02
Everything was working fine, until a week ago. two dcs are replicating just fine but the sysvol folder and GPO items doesn't replicate. 
I tried everything, there was a solution on a website that need a change on  HKEY-LOCAL-MACHINE: System: CurrentControlSet: Services: NtFrs: Parameters: Backup/Restore Process at Startup
so there is no direction at registry such as that
anyone got an idea ? 

Read other answers

Hi All, When i setup group policies on the active
directory domain controller, i get an error message
saying "Access denied" and in the event log it says
"The specified domain either does not exist or could not
be contacted" when i run dcdiag all tests pass with the
following exceptions: [1] Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... VMRDII passed test frssysvol

and [2] Starting test: FsmoCheck Warning:
DcGetDcName(PDC_REQUIRED) call failed, error 1355 A
Primary Domain Controller could not be located. The
server holding the PDC role is down.
......................... D1.vmrd.com failed test

[But ntdsutil says vmrdii *is* the PDC, and it is not
down because dcdiag was run on that very machine.]

netdiag passes all test with the following exception:

DC list test . . . . . . . . . . . : Failed
Failed to enumerate DCs by using the browser.
ntdsutil can connect to either domain controller
succesfully. So can Active Directory Users and
Computers, Domains and Trusts, etc. Just Global Policy
and Domain Controller Security Policy fail

Also, attempting to demote the secondary domain
controller to a member server throws a similar error
along the lines that the primary domain controller
cannot be found.

The question is how i can diagnose the problem. Thanks
for your help! Wei

A:Domain Controller Problem... HELP!

Just a guess as I have only one DC in my Active Directory domain, but can you uninstall Active Directory and then re-install it? Perhaps while it is uninstalled, you could use something like NT4's server manager to synchronize the domain, then reinstall Active Directory. My guess is that some piece of AD did not install correctly.

Read other 2 answers

Hello everyone,

I'm in a predicament. Our small company uses a domain controller which every user logs into for access to the network and their local profiles. The profiles are NOT coming/stored on the server side however, they are simply local, but users are given rights to certain file server areas. The machine used as the DC is VERY old and we're not confident it will stay running much longer.
What's the best way to migrate users to a new server?
We have a new machine, with a proper Windows 2003 server installed. We set up another domain (OfficeNet2). I was under the impression we simply needed to "promote" the new server to become the new Domain Controller - however, we're not sure how to do this, and do we need to "copy" the old user login information from the old server to the new (If that's even required?)
Any help or ideas would be GREATLY appreciated!
All users are XP PRO SP3 (with a few MACs) and both servers are Win2003.

A:Migrating from one Domain Controller to Another

Actually it would have been easier if you kept the new server on the same domain -


If you have the ability to do it you may want to just do that. I have some links in this thread that wshow you how to have 2 DCs in one domain and to promote the new one.

When you have 2 different domains it becomes a bit more convoluted and you have to do some trusting and domain migrations.

Read other 1 answers

I need to run the script below but the problem I have is that the command needs to run while you are logged onto the desktop of the domain controller but I am are not granted that access. Any suggestions would be wonderful. thanks

' This script will add assigned groups to NT clients local groups
' List any modifications and initialize

'script type:vbscript
Option Explicit

'number for sGroupArray entry below under "Initialize Group Array"

Dim oNet
Dim oGroup
Dim sComputerName
Dim sGroup
Dim sGroupName
Dim strDomainGroup(4)
Dim RetVal

strDomainGroup = "WinNT://NENA/Domain Admins"

' Create Network Object to get computer name.
For i = 1 To 3 '3 computer names
Set oNet = CreateObject("Wscript.Network")
Set sComputerName = oNet.ComputerName

sGroup = ("WinNT://SWSA/$Admin-GS-NBCPCADM" & i)
sGroup = ("WinNT://SWSA/$Admin-LS-NBCPCADM" & i)
sGroup = ("WinNT://SWSA/Software-Install" & i)

'Get group object for the above computer

Set oGroup = GetObject("WinNT://" & sComputerName & "/administrators,group")

'Add all the groups from the array into the clients administrators group.

For Each sGroupName In sGroupArray

RetVal = oGroup.IsMember("" & sGroupName & "")
If Not RetVal Then oGroup.Add ("" & sGroupName & "")

RetVal = oGroup.IsMember("" & strDomainGroup &a... Read more

A:vbscript to run without having to log in to the domain controller

Finally, I have it figured out how to do it...I reset the AD password since it is Windows 2000.

Read other 1 answers

I am tryin to add a user to a computer running W2k pro and when I type in the name and domain all I get is an error that says
"the trust relationship between this workstation and the primary domain failed"

This is a new workstation just added to the network, the user I am adding is myself and I have admin rights. For some reason all the users have to be local, I have checked the IP,DNS, and gateway. I can see the computer on the network.

A:Domain Controller does not trust me!

Hi tushkahoma
It seems that although you have local admin rights at the workstation, you may not have domain admin rights in order to join the domain.

Paul V

Read other 2 answers

An old client called me and he's still running a system I set up for him over a decade ago running an NT server. For some reason his network went down. When I looked it said "domain controller not found. What happened? I noticed that his HD only had around 600MB left. Could that be it? No room to load and swap out etc.?

Also event viewer says there is a bad block on the HD. maybe that?



A:NTt domain controller not found (yup!)

Did you check to see that WINS is running and the workstations are set up to connect to it? Have you checked to see that the workstations can do name lookups?

Read other 2 answers

I am new here and I hope someone will be able to advise me regarding the problem I am having.

I am responsible of a small office network that is based on one domain controller which also works as the DNS.

Yesterday, I was planning to join a new PC to our domain name and usually when I do this I change the administrator's password temporarily to use it on the new PC and then change it back to the original one. (it is a secuitry phobia issue!)

After successful join to the domain I changed the AD administrator password back to the original one and tested it immediately and it worked just fine.

I locked the server and few hours later I wanted to make a change in the AD and I was very surprised that the administrator password is not working anymore.

(Please note that other users passwords haven't change)

My questions here are:

1- Are there any type of (hacking) tools that can be run from a local network pc (which have local administrative privilages) that can hack the domain controller this way and change the administrator's password or harm the domain controller?

2- Could this be a problem/bug from the windows 2003 OS itself?

3- Is there any legitimate way to reset the password in this case?

4- Is the built in windows 2003 firewall reliable and what do you recommened for software secuitry.

This happened once before (about a year ago) and the network was smaller so I finally decided to resintall wndows 2003 and start from scratch. But this time I just w... Read more

A:Problem on my Domain Controller

One aspect of maintaining servers is to create additonal administrator accounts so you can use them to edit/change the default administator account if its profile becomes corrupt or you have issues with passwords.

Q1 not that I am aware of
Q2 doubtful
Q3 use another admin account
Q4 software firewalls are OK but you get better protection from a hardware router/firewall. Not sure what you mean by software security. That is what share and ntfs permissions are about.

Read other 2 answers