@syko24 said in Move FSMO Roles Using PowerShell | Active Directory Domain Controller AD DC:

I'm a fan of the one liner assuming you are transferring all roles to the same DC.

Move-ADDirectoryServerOperationMasterRole -Identity "DC-Server" -OperationMasterRole 0,1,2,3,4 0: PDCEmulator 1: RIDMaster 2: InfrastructureMaster 3: SchemaMaster 4: DomainNamingMaster

Me too. This is what I normally use. SOOOO helpful.

Not sure why powershell made it so complicated to find who has the roles.
netdom query fsmo was so easy.

@dbeato said in You Have Exceeded the Maximum Number of Computer Accounts - Windows and Active Directory:

@scottalanmiller This is for a standard user without any Domain Admin Privileges. I am assuming this is for a Technician joining computers that no one wants to have admin permissions.

That would be an example case. Yes.

Good find.

@Dashrender said in Need to Join Windows XP Clients to a 2016 Domain:

@scottalanmiller said in Need to Join Windows XP Clients to a 2016 Domain:

@Dashrender said in Need to Join Windows XP Clients to a 2016 Domain:

@scottalanmiller said in Need to Join Windows XP Clients to a 2016 Domain:

@Dashrender said in Need to Join Windows XP Clients to a 2016 Domain:

Does the XP machine need to be part of the domain? What about working around that issue?

We removed the domain completely.

So now you're what - trying to use a 2019 SMB file share or something?

What does file share have to do with AD? Completely disconnected concepts.

True - I was making my own leap -

So - where does this stand now then??

We removed AD. It turned out that it had been installed without evaluation and was serving no real purpose, but was posing a significant risk.

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@scottalanmiller said in Handling DNS in a Single Active Directory Domain Controller Environment:

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@stuartjordan said in Handling DNS in a Single Active Directory Domain Controller Environment:

I believe the forest level with Samba can only be 2008R2 though.

If you're not using Windows AD, what's it matter?

If he's merging in DFS, it might. It's rare to do, but could matter.

Oh I see, so Windows AD and other services were involved at some point.

Depending on what you want to do, sometimes AD has to support it.

@scottalanmiller said in Do You Need Two AD Domain Controllers? SAMIT Video:

@dave247 said in Do You Need Two AD Domain Controllers? SAMIT Video:

.... haven't had the chance to dig in as I am a freaking "IT generalist" where I work.

Youtube Video

I have a video for everything these days.

yep I just watched that one.. guess I can't call myself a Systems Administrator anymore 😢 (jk I totally am)

@scottalanmiller said in Always Virtualize Domain Controllers:

@black3dynamite said in Always Virtualize Domain Controllers:

It would help if Microsoft would also recommend to always virtualize domain controllers.

They do. They've been really clear on that from everything that I have seen.

Last recommendation seen on microsoft official docs - maybe the italian ones: virtualize the AD first instance, keep a phisical one as second instance...

don't understand the logic of this. but hey: their offical business support said I was not allowed to virtualise more than 2 VMs on hyper-v, even if there were linux 😕

@mlnews said in How to configure Ubuntu Linux server as a Domain Controller:

http://www.techrepublic.com/article/how-to-configure-ubuntu-linux-server-as-a-domain-controller-with-samba-tool/

Samba 4 and samba-tool make getting up and running with AD on Linux pretty quick and easy.

Sounds nice, I'll need to make time to look at this.