To see if I could reproduce the error by moving the account from the default Users folder back to the OU where it was I discovered that when I moved it to the Users folder the error went away. I put the user back in the OU where it came from and the error won't come back. I agree - weird indeed.

In summary, I guess if I move those users to the Users folder and back where they came from, the problem should be resolved. I'll have to test on a couple other users.

@coliver said:

repadmin /replicate DC1 DC2 dc=domain,dc=com

So I have have limited success.. but success was made. I the user I created on the other end,.. is now on the local AD.

I'll look at this more,.. but think it's otherwise solved.

@scottalanmiller said:

If you have a second DC, the secondary DNS should point there rather than to the gateway.

If you don't have a second DC, then it should be blank.

@scottalanmiller I was planning on it

I'm confused - You're using folder redirection, so the local copy of the data is only there for speed or network connectivity loss. So there should be nearly zero data loss if you delete the profile after the user logs out.

I'm not sure if there is a reg key on Windows Workstation OS, but there definitely is on Server OS for Remote Desktop Services.

This was something I've seen often turned on to keep the local storage needs of the RDS server from ballooning out of control from left over profiles.

User logs into RDS, downloads profile, user logs out - copy is pushed to the server and local directory is deleted.

Pretty standard practice.

I'd be surprised if this wasn't available on say Windows 7, etc.

@scottalanmiller said:

@PSX_Defector said:

If you only have Samba controllers, hell it might work.

that's the normal way to use it. Mixing it in would just be weird. Lots of companies run on just it, it works great from what I hear. I've never heard of a shop that had issues after moving to it. It's full AD with all the bells and whistles. You can even manage it from Windows and GPOs work great too.

I saw somewhere online someone set up an environment that way and used RSAT from a Windows 7 computer to do GPO and users/computers.

As with any system, you should always swing back around and re-visit issues.

With the help of the group here, and other resources i hope to go over the GPP and see what I can clean up and improve.

@Minion-Queen said:

@IRJ Yes the answer is yes.....

Sigh!

@Jason said:

AD integrated password manager? No thanks. I use KeePass and it's synced to a cloud drive. I need to get to the passwords even if everything is down. Unless this thing offers some off site version of it and to use cached credentials.

It does, there is a mobile app.

All done. Thanks, guys! I am still learning using DC's, in case that wasn't obvious. 😛

How goes your project?

Thanks, Ill have a look. I wonder if they are features I would be concerned over.

@scottalanmiller said:

You are too fast for us 🙂

I had a meeting at 3pm EST with the vendor on the assumption I was going to have the issue fixed by then. Now I can go get some coffee.

Yes, I think that RSAT might actually care as if it does the wrong thing it won't see the files.

@momurda said in Secondary Domain Controller Setup:

dont forget to check afterwards if everything is ok with
dcdiag /v
repadmin /showrepl
repadmin /replsum

Everything looks good so far.

@dafyre said:

Chances are if Linux can do it, it probably does it better than Windows, lol.

I would second that.

I see.