@syko24 said in Move FSMO Roles Using PowerShell | Active Directory Domain Controller AD DC:

I'm a fan of the one liner assuming you are transferring all roles to the same DC.

Move-ADDirectoryServerOperationMasterRole -Identity "DC-Server" -OperationMasterRole 0,1,2,3,4 0: PDCEmulator 1: RIDMaster 2: InfrastructureMaster 3: SchemaMaster 4: DomainNamingMaster

Me too. This is what I normally use. SOOOO helpful.

Not sure why powershell made it so complicated to find who has the roles.
netdom query fsmo was so easy.

@JasGot said in What to use for new Windows network domain:

No need for split DNS this way.

That is a huge reason.

It is because of this licensing discrepency that we know that CloudAtCost was running a scam. They advertised Windows servers that were unlicensed, and unlicensable.

@Mike-Davis said in Server 2019 Essentials - Domain controller requirement:

@Dashrender said in Server 2019 Essentials - Domain controller requirement:

@IRJ said in Server 2019 Essentials - Domain controller requirement:

@Dashrender said in Server 2019 Essentials - Domain controller requirement:

@IRJ said in Server 2019 Essentials - Domain controller requirement:

@Dashrender said in Server 2019 Essentials - Domain controller requirement:

@CCWTech said in Server 2019 Essentials - Domain controller requirement:

@Dashrender said in Server 2019 Essentials - Domain controller requirement:

No one here knows - we don't run that software.

No one here runs Server 2019 Essentials?

No - most here run standard Windows Server or some flavor or Linux. Essentials is only for SUPER tiny environments (I think it's limited to 25 connections)... a version that at least with 2012 didn't require User CALs, making it significantly cheaper for super tiny shops that required Windows, but once you hit over 25, you got a HUGE upgrade cost i.e. full server license and 25+ CALs.

Yep. It is generally not reliable either. At least earlier version weren't. Throw all MS services on one piece of underpowered hardware and then throw all your apps over it. What could go wrong?

I guess i was lucky - when they started calling it Essentials - there weren't that many services left - File/Print/AD/DNS/DHCP and what WSUS? that's all pretty typical single box stuff in my mind. WSUS could be shit for sure, but the rest can work together no issues.

Back when it was SBS server and had Exchange and possibly a corporate firewall and SQL server - OMG - yeah, kill me now!.

That's just the out of the box stuff that can be simple solved off windows very easily 😉

Dont forget that these businesses like to throw quickbooks and other poorly made sofware on their Essentials server including these other services which are already too much to have on one box IMO. It's 2019, virtualize 🙂

It would be interesting to know if Essentials allows for the install of 3rd party software like that?
Probably does..

QuickBooks is the reason I have so many Essentials servers out there. If the environment is large enough where you can't just make one computer "the server" and share QuickBooks from there, Server Essentials goes in along with QuickBooks Database manager and its 25 year old architecture and you call it a day.

Same kind of problem here.

@DustinB3403 said in Windows Server 2012 Essentials Cannot Find Login Server for AD:

That's rough.

Very

Around that time is when we started to find Nethserver to be the more interesting project.

And Nethserver is active here, whereas Zentyal is not.

@scottalanmiller said in Do You Need Two AD Domain Controllers? SAMIT Video:

@dave247 said in Do You Need Two AD Domain Controllers? SAMIT Video:

.... haven't had the chance to dig in as I am a freaking "IT generalist" where I work.

Youtube Video

I have a video for everything these days.

yep I just watched that one.. guess I can't call myself a Systems Administrator anymore 😢 (jk I totally am)

@dbeato said in JRNL_WRAP_ERROR (SYSVOL):

@wirestyle22 You can still do the following as well:
http://kpytko.pl/active-directory-domain-services/authoritative-sysvol-restore-frs/
https://blogs.msmvps.com/acefekay/2013/08/28/how-to-recover-a-journal-wrap-error-jrnl_wrap_error-and-a-corrupted-sysvol-from-a-good-dc-what-option-do-i-use-d4-or-d2-whats-the-difference-between-d4-and-d2/

Maybe also move to DFRS instead of FRS, you would only use FRS if it is Server 2003 as part of one of your DCs

Possibly in the future but I have so many other things to focus on

@Mike-Davis said in Domain Controller and WINS Server Powered Down and Removed without Proper Demotion:

@wirestyle22 said in Domain Controller and WINS Server Powered Down and Removed without Proper Demotion:

We don't use DHCP at all

I would go the other direction then and check for WINS queries and then visit all the NICs that are still using WINS and remove the entry. This article explains it:
https://blogs.technet.microsoft.com/craigf/2010/07/09/decommissioning-wins/

Thanks! This actually answered a few of my other questions too.

@mlnews said in How to configure Ubuntu Linux server as a Domain Controller:

http://www.techrepublic.com/article/how-to-configure-ubuntu-linux-server-as-a-domain-controller-with-samba-tool/

Samba 4 and samba-tool make getting up and running with AD on Linux pretty quick and easy.

Sounds nice, I'll need to make time to look at this.

@wirestyle22 said in Error Demoting Domain Controller:

@Grey said in Error Demoting Domain Controller:

@wirestyle22 said in Error Demoting Domain Controller:

ForestDNSZone

I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
hvqjF5V.png

Are you working on a single domain or one root domain with multiple subdomains?

(*&@^$(@ Thing. Apparently, you need spaces in between the commas. This is dumb, though. Some places, this doesn't matter and others, you can't have spaces, and then this requires a space. Stupid thing.

Everything is still looking good!

@travisdh1 said in Friday afternoon account corruption.:

@Romo said in Friday afternoon account corruption.:

@travisdh1 Zabbix is a monitoring solution you're probably thinking of another product, probably Zentyal I would guess.

I bet you're right. I think it's a good thing I wasn't trying to fix things Friday, I would've just made things much worse!

"I'll jus treinstall Zabbix here and get everything back up and... hey what the crap is this?!"

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@coliver said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

Good article. There is ZERO reason to have a GUI on a Domain Controller. Everything can be done through Server Manager on Windows 10/8

You mean RSAT 😉

Both? You can do a lot of directory management through Server Manager as well.

Ok, agree. Just don't like the Server Manager this much, ugly interface. I want to be sure WHICH drive on WHICH host I'm going to format for example. But that is just my personal opinion and I'm more or less a console fetishist 😉

But when it comes to ADSIedit or AD sites, you really want to have RSAT.

huh?

0_1469044083616_2016-07-20_15-47-37.png

Those options are generally only there is RSAT is installed.

@momurda said in Secondary Domain Controller Setup:

dont forget to check afterwards if everything is ok with
dcdiag /v
repadmin /showrepl
repadmin /replsum

Everything looks good so far.

@PSX_Defector said:

@scottalanmiller said:

They don't treat the "business" that you work for as seriously as American or European (or Nicaraguan in my case)

That's the first time anyone ever referred to Latin America as "serious" in business. The work ethic of Latin America, besides the lowest level of worker, is horrible. It was like pulling teeth to get things done in Costa Rica when I was running Vegas Club Room. And then we start mentioning South, especially Brazil, holy f[moderated]!

Costa Rica has a reputation for work issues even in Central America, I would not use that as the standard. I've not seem similar issues in Panama, for example. Nicaragua I am still getting to know.

Well, I think...I'm pretty sure...

Wish I could be helpful I haven't had a need to do this since... 2010? And that was for college.

I do remember that everyone was struggling with Ubuntu to get it connected to AD but CentOS (which is what I was using at the time) worked flawlessly.